Privacy Policy
As of: October 2026
1. Controller
The controller responsible for data processing on this website is:
…
2. Overview
This website presents the holiday apartment ‘Saunaloft Braunlage’ (Apartment 03, Auberge Chalet Residences), shows its availability and prices, and forwards bookings to the booking system of StrandBerg GmbH. We only process the data required for these purposes and use cookies or similar technologies for analytics and advertising only with your consent.
3. Hosting and server log files
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the website is accessed, Vercel processes technically necessary data such as the IP address, date and time, the page accessed, the referrer and the browser identifier in order to deliver the site and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service). Vercel is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are also in place. Log data is deleted after a short period.
4. Availability and prices
Our server retrieves available dates and prices from the Mews booking system (Mews Systems B.V., Amsterdam), which StrandBerg uses. No personal data about you is transmitted in the process, only the travel dates and number of guests you select in the calendar.
5. Booking via StrandBerg and Mews
When you click ‘Book now’, the Mews booking window is loaded on this page. From that moment on, data is transmitted to Mews (including IP address and browser data), and the information you enter there (name, contact details, payment details) is transmitted directly to StrandBerg GmbH, Herzog-Wilhelm-Straße 10, 38700 Braunlage, as landlord and contracting party. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract and performance of the contract). StrandBerg is the controller for any further processing; its privacy policy applies: https://www.strand-berg.de/datenschutz/.
The booking window may load analytics services configured by StrandBerg (Google Tag Manager / Google Analytics). If you have not consented to analytics and marketing on this website, we inform the booking window that tracking is disabled.
So that we know whether a booking has been completed, we receive from the booking window information about the booking step and the booking value, but no names, contact details or payment details.
6. Analytics without cookies (PostHog)
To understand how the website is used, we use PostHog (PostHog Inc., 2261 Market St #4008, San Francisco, CA 94114, USA; data is processed in the EU data centre in Frankfurt am Main). As long as you have not given your consent, PostHog works without cookies and without storing anything on your device: visits are counted using a non-reversible hash value that changes daily. In doing so, we record the pages accessed, clicks on key elements (e.g. calendar, booking button), the selected travel dates and the number of guests. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our service. The data is sent to PostHog via our own domain. A data processing agreement is in place with PostHog.
7. With your consent: cookies, session recordings and Meta Pixel
If you select ‘Accept’ in the banner, PostHog sets cookies or uses local storage to recognise returning visits and records sessions (mouse movements, clicks, scrolling). Input in form fields is masked. We then also load the Meta Pixel of Meta Platforms Ireland Ltd., Merrie Hall, 4 Grand Canal Square, Dublin 2, Ireland, to measure the success of advertisements (e.g. page view, start and completion of a booking). In this context, data may be transferred to Meta Platforms Inc. in the USA; Meta is certified under the EU-U.S. Data Privacy Framework.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via ‘Cookie settings’ in the footer of every page.
8. Fonts, map and external links
Fonts and the map of Braunlage are delivered from our own server; no data is transmitted to Google or OpenStreetMap in the process. Only when you click ‘Open in Google Maps’ or ‘Plan your route’ are you taken to Google; Google’s privacy policy then applies.
9. Storage period
Analytics data in PostHog is stored for a maximum of 12 months, session recordings for a maximum of 30 days. We store your cookie choice in your browser until you change or delete it.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time. To do so, please contact the controller named above.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover.