Privacy

This statement explains which personal data are processed when you visit this website. It is deliberately short, because this website does very little: it embeds no analytics or tracking services, operates no user accounts and sends no newsletter. You only transmit data to us if you choose to – through the reservation request (section 8) or by calling or writing to us.

This is a translation for your convenience. In case of doubt, the German version of this privacy statement applies.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Boardinghouse Rülzheim
Owner: Martin Bahlinger
Neue Mühlgasse 1
76761 Rülzheim
Germany

Phone: +49 151 188 022 25
E-mail: info@boardinghouse-ruelzheim.de

We have not appointed a data protection officer, as the legal requirements for doing so do not apply to us. For any questions concerning data protection, please use the contact details above.

2. Visiting the website (server log files)

What is processed: Each time a page is called up, your browser transmits technically necessary data which our web server records in log files. These are: your IP address, the date and time of access, the address requested, the page previously visited (referrer, where transmitted), the browser and operating system used, as well as the volume of data transferred and the delivery status.

Purpose: Delivering the website, ensuring operational security and stability, and investigating and preventing attacks.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the technically faultless and secure operation of this website.

Retention period: The log files are deleted or truncated after seven days at the latest, unless they are exceptionally required for longer in order to investigate a specific security incident.

These data are not merged with other data sources and are not used to analyse your behaviour.

3. Hosting

This website is operated on servers of the following service provider:

Wolf Ware GmbH
Gutenbergstraße 6
76761 Rülzheim
Germany

The provider processes the data listed under section 2 exclusively on our behalf and in accordance with our instructions, on the basis of a data processing agreement pursuant to Article 28 GDPR. The servers are located in Germany.

4. Cookies and local storage

This website sets no analytics, advertising or tracking cookies. There is no analysis of your usage behaviour, no profiling and no integration of advertising networks. A consent banner is therefore not required.

The following is stored, and only because it is technically necessary:

Session cookie PHPSESSID – set only on the pages where the reservation request is available. It contains a random identifier and serves to protect the form against abusive submission from other sites and by bots (see section 8). It contains no personal data, is not evaluated, and expires at the latest when you close your browser.
Entry bh-karte-einwilligung in your browser's local storage – remembers your consent to the map so that you are not asked again on every visit (see section 5). This is not a cookie and is not transmitted.

Both fall under section 25(2) no. 2 TDDDG (strictly necessary) and do not require consent.

5. Google Maps on the contact page

On our contact page we offer a map provided by Google to make it easier for you to find us.

The map is not loaded automatically. As long as you do not click the "Load map" button, no connection to Google is established and no data are transmitted there. Instead of the map, you will see an explanatory note.

Only when you click is the map loaded from Google. In doing so, Google learns your IP address, the page requested and technical information about your browser and device. If you are logged into a Google account at that moment, Google may associate the request with that account. We have no influence over Google's further processing.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.

Legal basis: Your consent pursuant to Article 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You give this consent by clicking "Load map".

Storage on your device: Your consent is stored in your browser's local storage under the entry bh-karte-einwilligung. This is not a cookie; the entry is not transmitted to us or to any third party and serves solely to remember your decision.

Withdrawal: You may withdraw your consent at any time with effect for the future by clearing your browser's local storage for this website. In common browsers this is done through the same function you would use to delete cookies and site data. The explanatory note will then appear again instead of the map.

For further information, please see Google's privacy policy: policies.google.com/privacy

In addition to the map, we provide an ordinary "Plan your route" link to Google Maps. This link transmits data to Google only once you click it – as with any other external link.

6. Fonts

The typeface used on this website is delivered from our own server. There is no connection to Google Fonts or any other external font service, and therefore no data are transmitted there.

7. Contacting us by telephone or e-mail

If you call us or send us an e-mail, we process the information you provide – such as your name, telephone number or e-mail address and the content of your message – in order to deal with your request.

Legal basis: Article 6(1)(b) GDPR where your enquiry is aimed at concluding or performing a contract, otherwise Article 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries.

Retention period: We delete the data as soon as your request has been dealt with conclusively and no statutory retention obligations apply. Retention periods under commercial and tax law remain unaffected.

Please note that the transmission of unencrypted e-mail may have security gaps. For confidential information, please feel free to use the telephone.

8. Reservation request

The form on the "Reservation request" page lets you enquire about an apartment without obligation. No booking is concluded through it – a booking becomes binding only with our written confirmation.

What is processed: your name and e-mail address as mandatory fields, optionally your telephone number and message, plus the details of the request itself – the apartment, arrival and departure dates, number of guests and whether you are bringing a travel cot or a dog.

Purpose: handling and answering your enquiry and preparing a possible accommodation contract.

Legal basis: Article 6(1)(b) GDPR – processing takes place at your request in order to carry out pre-contractual measures.

Recipients: the request is sent by e-mail to the mailbox of Boardinghouse Rülzheim. Apart from the hosting provider named in section 3 and our e-mail provider, no one receives it.

Retention period: we delete your details as soon as the enquiry has been dealt with conclusively and no statutory retention obligations apply. If a booking results, retention periods under commercial and tax law apply. The data are not stored on the web server – there is no database; the details are only forwarded by e-mail.

Necessity: the mandatory fields are needed in order to process your enquiry; without them we cannot reply. You are not obliged to use the form – you can reach us equally well by telephone or e-mail.

Protection against misuse: the form contains an additional field invisible to you and measures how long it took to complete. Both serve solely to detect and discard automated submissions; there is no analysis of your behaviour and no disclosure to third parties. In addition, the session cookie described in section 4 is used. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a functioning, spam-free contact channel.

Price estimate: the amount shown in the form is calculated solely from your entries and our rate table. It is non-binding, and no automated decision within the meaning of Article 22 GDPR takes place (see section 10).

9. Recipients and transfers to third countries

Apart from the hosting provider named in section 3, we do not pass your data on to third parties. An exception applies only where we are legally obliged to do so or where it is necessary in order to pursue attacks on our systems.

A transfer to countries outside the European Union takes place solely within the scope of the map described in section 5 – and then only if you have expressly consented to it.

10. No automated decision-making

Automated decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.

11. Your rights

You have the following rights with regard to the personal data concerning you:

Access to information about whether and which data we process about you (Article 15 GDPR)
Rectification of inaccurate data or completion of incomplete data (Article 16 GDPR)
Erasure of your data (Article 17 GDPR)
Restriction of processing (Article 18 GDPR)
Data portability (Article 20 GDPR)
Objection to processing based on a legitimate interest (Article 21 GDPR)
Withdrawal of consent with effect for the future (Article 7(3) GDPR)

An informal message to the contact details given in section 1 is sufficient to exercise these rights.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Article 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz, Germany
www.datenschutz.rlp.de

13. Encrypted transmission

This website is delivered over an encrypted connection (TLS). You can recognise this by the address beginning with https:// and by the padlock symbol in your browser's address bar.

14. Changes to this statement

We will adapt this privacy statement whenever the content of this website or the legal requirements change.

Last updated: August 2026