1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Design Chalets GmbH
Mauerkircherstrasse 2
81679 München
Germany
Represented by: Anne-Catherine Grüntges
Phone: +49-160- 631 93 91
Email: info@designchalets.de
2. General information and legal bases
We only process personal data to the extent necessary to provide a functional website, our content and services, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures, e.g. booking enquiries), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests). Where information is stored on or read from your device, this is based on Section 25(1) TDDDG (consent) or, where strictly necessary for a service you requested, Section 25(2) no. 2 TDDDG.
3. Hosting and server log files
This website is hosted by: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR; the host processes the data only on our instructions. Privacy policy of the host: https://www.strato.de/datenschutz/
When you access the website, technically necessary data is processed in server log files: IP address, date and time, page requested, amount of data transferred, referrer URL, browser type and operating system. This is necessary to deliver the website and to ensure its security and stability (Art. 6(1)(f) GDPR). The data is not combined with other data sources.
Data between your browser and our server is transmitted in encrypted form (SSL/TLS).
The following fonts or libraries are installed locally on our server; loading them does not establish a connection to the providers’ servers: Google Fonts, Font Awesome, jQuery, jQuery UI.
4. Contacting us
If you contact us by email or phone, we process your details (e.g. name, contact details, content of the enquiry) to handle your request. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or booking, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering). The data is deleted once it is no longer required for this purpose, unless statutory retention obligations apply.
5. Online booking and booking enquiries
For availability searches, booking enquiries and online bookings we use the booking system of an external service provider. The booking function (e.g. the search bar) is loaded from the provider’s server when you visit our pages; technical connection data such as your IP address is transferred to the provider. The legal basis is our legitimate interest in offering you a direct booking option (Art. 6(1)(f) GDPR); where information is stored on or read from your device, this is because it is necessary for the booking function you use (Section 25(2) no. 2 TDDDG). The details you enter for an enquiry or booking are processed to take pre-contractual steps and to perform the contract (Art. 6(1)(b) GDPR). Booking data is deleted after expiry of statutory retention periods (Art. 6(1)(c) GDPR).
Provider: zadego GmbH (easybooking), Sparkassenplatz 2, 6020 Innsbruck, Austria. Privacy policy: https://www.easybooking.eu/datenschutz
6. Management of your consents
To request and store your consents we use a self-hosted solution on our own server; no data is transferred to third parties. Your choice is stored in the cookie “acdc_consent” on your device (lifetime 365 days). To be able to prove consent, we log a randomly generated identifier, the time, your choice and the version of the information shown – but not your IP address. The log is deleted after 365 days. The legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR and Section 25(2) no. 2 TDDDG.
You can change or withdraw your consent at any time with effect for the future: Open privacy settings.
In addition, the following strictly necessary information is stored on your device (Section 25(2) no. 2 TDDDG): Language selection: pll_language (1 year).
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal.
Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).
We object to the use of the contact details published in the legal notice for sending unsolicited advertising and information material.
8. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Last updated: October 2026