DATA PROTECTION

Welcome to our privacy policy. Protecting your personal data is very important to us at Villa Zeno. In this statement, we inform you about how we collect, use, and protect your data. Please adapt this text to your specific needs to ensure that all relevant information is included. The link to the privacy policy should be accessible from every page of the website.

1. Controller

The controller responsible for data processing on this website is:

Christian Anding

Birkenweg 11

15566, Schöneiche

Email: info@villa-zeno.de

2. General Information on Data Processing

Protecting your personal data is important to us. We process your personal data exclusively within the framework of applicable data protection laws.

Personal data refers to all information relating to an identified or identifiable natural person. This includes in particular name, email address, phone number, IP address, or information submitted as part of a booking inquiry.

Processing is carried out in particular to provide this website, handle inquiries, process bookings, and ensure the technical functionality and security of our online offering.

3. Hosting via WIX

This website is operated on the WIX platform. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

WIX provides the technical infrastructure for operating this website. In doing so, personal data of website visitors — in particular technical access data — may be processed on WIX servers.

Processing is carried out for the purpose of providing and securely delivering the website. Further information on data processing by WIX can be found in WIX's privacy policy.

Where WIX processes personal data on our behalf, this is done on the basis of a data processing agreement or equivalent legal data protection grounds.

4. Access Data and Server Log Files

When this website is accessed, information is automatically transmitted by your device's browser to the website's server. This information may include in particular: IP address, date and time of access, page/file accessed, referrer URL, browser type and version, operating system, hostname of the accessing device. This data is processed to ensure stable and secure operation of the website and for technical error analysis.

Legal basis: Art. 6(1)(f) GDPR Legitimate interest: secure and technically sound provision of our online offering

5. Contact If you contact us via contact form, email, or phone, we process the data you provide in order to handle your inquiry.

This may include in particular: name, email address, phone number, travel dates, number of guests, content of your message.

Processing is carried out solely to handle your inquiry and, where applicable, to prepare or execute a booking.

Legal basis: Art. 6(1)(b) GDPR, where the inquiry relates to a booking or pre-contractual measures. Art. 6(1)(f) GDPR for general inquiries. Legitimate interest: efficient handling of incoming inquiries.

6. Booking Inquiries and Contract Processing

If you submit a booking inquiry or initiate a reservation via the website, we process your data to check availability, communicate with you, and fulfill the contract.

The following data may be processed in particular: first and last name, contact details, length of stay, number of guests, billing and payment data where applicable, and any further information required for the booking.

Legal basis: Art. 6(1)(b) GDPR

Data is stored only for as long as necessary for contract fulfillment, compliance with statutory retention obligations, or the establishment, exercise, or defense of legal claims.

7. Cookies and Consent Management

Our website uses cookies and similar technologies. Some are technically necessary for the proper provision of the website. Others serve statistical, analytical, or marketing purposes.

Non-essential cookies are only set if you have given your explicit consent. You may change or withdraw your consent at any time with effect for the future. Your settings can be managed via the cookie or consent tool integrated on the website.

Legal bases: Art. 6(1)(c) GDPR where storage is technically required or legal obligations apply. Art. 6(1)(a) GDPR for consent-based services and non-essential cookies.

8. Analytics and Marketing Tools

Where analytics or marketing services are used on this website, this is done exclusively following your prior consent. In such cases, the specific services used, the data processed, the providers, and the respective legal bases will be listed separately in this privacy policy.

9. Recipients of Personal Data

Your personal data is only shared where this is legally permitted or you have given your consent.

Recipients may include in particular: technical service providers for hosting and website operations, communication service providers, payment service providers where payments are processed, tax advisors, authorities or other bodies where required by law.

10. Third-Country Transfers

Through the use of WIX or other technical service providers, it cannot be excluded that personal data may also be processed outside the European Union or the European Economic Area.

Where data is transferred to third countries, this is done only in compliance with the applicable legal requirements, in particular on the basis of appropriate safeguards such as adequacy decisions or standard contractual clauses, where required.

11. Retention Periods

We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.

Inquiries submitted via contact form or email are regularly deleted once their processing is complete and no statutory retention obligations or legitimate interests in further storage exist.

Data from contractual and booking transactions is retained within the statutory commercial and tax law retention periods.

12. Your Rights

Subject to the applicable legal requirements, you have the following rights:

Right of access to your personal data stored with us
Right to rectification of inaccurate data
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw any consent given at any time with effect for the future

To exercise your rights, you may contact us at any time using the contact details provided above.

You also have the right to lodge a complaint with a data protection supervisory authority. These rights form part of the core data subject rights under the GDPR.

13. Right to Object

Where we process your personal data based on Art. 6(1)(f) GDPR, you have the right to object at any time to such processing on grounds relating to your particular situation.

14. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, unauthorised disclosure, or unauthorised alteration.

15. Amendments to this Privacy Policy

We reserve the right to update this privacy policy as needed to ensure it always reflects current legal requirements or changes to our services on the website.

Last updated: April 2026