Privacy Policy
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Villa Burgau by RoBi GmbH
Herbert-Isaac-Straße 16
52156 Monschau
Germany
Phone: [TELEPHONE NUMBER]
Email: info@villa-burgau.de
Website: www.villaburgaumonschau.de & www.villa-burgau.de
2. General information on data processing
We process personal data only insofar as this is necessary to provide our website, process enquiries, prepare and carry out bookings, communicate with our guests, or where another legal basis permits this.
Personal data includes, in particular, information relating to an identified or identifiable person, such as a name, email address or details concerning a planned stay.
We comply with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).
3. Visiting our website
When you visit our website, technically necessary data is processed to deliver the website to your device and ensure secure and stable operation.
This may include:
IP address of the accessing device
Date and time of access
Pages and files accessed
Information about the browser and operating system used
Referrer URL, where provided by the browser
Technical information required for the provision and security of the website
This data is processed for the technical provision, stability and security of our website.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, functional and user-friendly provision of our website.
4. Website hosting
Our website was created using the Hostinger AI Builder and is operated using the hosting infrastructure of Hostinger.
Our contractual partner for the Hostinger services we use is:
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca
Cyprus
Hostinger provides, among other things, the technical infrastructure for hosting our website, the website builder, as well as the email and domain services we use.
Where Hostinger processes personal data on our behalf, this is carried out on the basis of the contractual agreements between us and Hostinger, including the Data Processing Addendum (DPA).
Hostinger describes itself as the processor and the customer as the controller where the customer processes personal data using services provided by Hostinger.
Processing may include data submitted to us by visitors through our website, such as information from contact and booking enquiries.
Hostinger may process personal data outside the European Economic Area as part of its technical infrastructure and the services used. Where an adequate level of data protection is not otherwise guaranteed for such transfers, the current Hostinger DPA provides appropriate safeguards, in particular EU Standard Contractual Clauses.
Further information can be found in Hostinger’s applicable privacy and contractual documents.
5. Contact and booking enquiry form
You can contact us via an enquiry form on our website.
The following personal data may be processed:
First name
Last name
Email address
Information provided in the “Message” field, such as preferred travel dates, number of guests and other details
We use this information exclusively to process your enquiry, check and coordinate availability, contact you and, where requested, prepare a possible accommodation contract.
The legal basis is Article 6(1)(b) GDPR insofar as your enquiry relates to the initiation or performance of a contract. For general enquiries that are not directly related to the preparation of a contract, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is the processing and answering of enquiries.
The data submitted via the form is processed through Hostinger’s technical infrastructure and forwarded to our email inbox at info@villa-burgau.de.
6. Email communication
For business email communication, we use an email inbox hosted by Hostinger:
If you contact us by email, we process the personal data you provide, in particular your email address, your name where provided, and the content of your message.
This processing is carried out to process and answer your enquiry and, where relevant, to initiate or perform a contract.
The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other enquiries.
Access to the email inbox may take place through email programs such as Apple Mail or Microsoft Outlook. These programs are used solely to access our email inbox hosted by Hostinger.
7. Cookies and similar technologies
Our website uses technically necessary cookies and similar technologies where they are required for the operation and basic functions of the website.
Technically necessary cookies may be used, for example, to provide basic website functions and save your cookie settings.
No consent is required for technically necessary cookies or similar technologies where their use is strictly necessary to provide the digital service expressly requested by you.
Optional platform analytics
Our Hostinger website builder may provide optional analytics functions. Optional platform analytics are not used on our website without your prior consent.
If you select only necessary cookies in the cookie banner, optional analytics remain deactivated.
If you consent to optional analytics, processing is based on your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may change or withdraw your consent at any time with effect for the future via the cookie settings.
Cookie consent management
When you first visit our website, you can use the cookie banner to choose whether to allow only necessary technologies or also consent to optional analytics functions.
Your selection is stored technically so that we can take your decision into account when you visit other pages.
Consent is voluntary. You can generally use our website without consenting to optional analytics functions.
8. Recipients of personal data
As part of the technical operation of our website and the processing of booking enquiries, personal data may be transferred to service providers commissioned by us.
These may include:
Hosting and website service providers
Email service providers
IT and technical service providers
Where legally required, we commission service providers on the basis of appropriate data processing agreements.
9. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations.
Data from non-binding enquiries is generally deleted once the enquiry has been conclusively processed and there are no statutory retention obligations or legitimate reasons for further storage.
If an accommodation contract is concluded as a result of an enquiry, the necessary data is stored in accordance with the statutory retention periods. These periods may arise in particular from tax and commercial law requirements.
Once these periods have expired, the data concerned is deleted unless it may or must continue to be processed on another legal basis.
10. Your rights
Subject to the statutory requirements, you have the following rights in particular:
Right of access to the personal data stored by us, pursuant to Article 15 GDPR
Right to rectification of inaccurate data, pursuant to Article 16 GDPR
Right to erasure, pursuant to Article 17 GDPR
Right to restriction of processing, pursuant to Article 18 GDPR
Right to data portability, pursuant to Article 20 GDPR
Right to object to certain processing activities, pursuant to Article 21 GDPR
Right to withdraw consent with effect for the future
To exercise your rights, you may contact us at any time using the contact details above.
11. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates data protection regulations, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority.
The authority responsible for us in particular is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Phone: +49 (0) 211 38424-0
Email: poststelle@ldi.nrw.de
You may also contact another competent data protection supervisory authority.
12. Data security
We use appropriate technical and organisational security measures to protect your personal data against loss, misuse, unauthorised access and other unauthorised processing.
Data transmitted between your browser and our website is encrypted using an HTTPS connection.
13. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy if the technical circumstances of our website or the legal requirements change.
Version: August 2026