Imprint

Provider
Mana BL Consult GmbH
Kinkelstrasse 36
8006 Zurich, Switzerland

Authorized to represent
Ben Lechner, Managing Director

Contact
Phone: +49 160 171 7016
E-mail: kontakt@ferienwohnung-oberwinter.de

Commercial register / UID / VAT
Commercial register Canton of Zurich
UID: CHE-456.321.783
VAT no.: CHE-456.321.783 VAT

EU representative pursuant to Art. 27 GDPR
Ben Lechner
Dechant-Heimbach-Str. 17, 53177 Bonn, Germany
Email: datenschutz@ferienwohnung-oberwinter.de

Responsible within the meaning of § 5 TMG
Mana BL Consult GmbH, address as above.
No journalistic-editorial offer within the meaning of § 18 MStV.

Liability for content
Despite careful maintenance, no guarantee for correctness, completeness and topicality (§ 7 para. 1 TMG).

Liability for links
The operators of external content are responsible for their content. We will remove illegal content as soon as we become aware of it.

Copyright
The contents of this website are protected by copyright. Use only with permission.

Online dispute resolution
Platform of the EU Commission: https://ec.europa.eu/consumers/odr
We do not participate in consumer dispute resolution procedures.

Hosting
Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland.
Order processing in accordance with Art. 28 GDPR agreed.

Status: 19.08.2025

Privacy policy

Responsible
Mana BL Consult GmbH, Kinkelstrasse 36, 8006 Zurich, Switzerland
E-Mail: datenschutz@ferienwohnung-oberwinter.de | Tel. +49 160 171 7016

EU representative pursuant to Art. 27 GDPR
Ben Lechner, Dechant-Heimbach-Str. 17, 53177 Bonn, Germany
Email: datenschutz@ferienwohnung-oberwinter.de

Data Protection Officer
Not named. Contact via the above details.

1. purposes and legal bases

Purposes: Operation of the website, communication, offer, booking, billing, IT security.
Legal basis: Art. 6 para. 1 lit. b, c, f GDPR; for analysis/marketing Art. 6 para. 1 lit. a GDPR.

2. hosting and server logs

Processed data: IP address, date/time, URL, referrer, user agent, status code.
Purpose: Operation/security, prevention of abuse.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Storage period: max. 30 days, longer in case of security incidents.
Processor: Hostpoint AG (CH).

3. cookies and consents

Non-technically necessary services are only loaded after consent via Real Cookie Banner.
Legal basis: § 25 TTDSG (access/storage) and Art. 6 para. 1 lit. a GDPR (subsequent processing).
Revocation: at any time via the footer link “Cookie settings”.
Details on individual cookies: see cookie policy on this website.

4. contact

In the case of e-mail/telephone/contact form, we process transmitted data for processing.
Legal basis: Art. 6 para. 1 lit. b or f GDPR.
Storage period: until completion, thereafter in accordance with legal obligations.

5. booking and contract processing

Data: Name, address, contact, travel data, fellow travelers, correspondence, invoice data.
Purpose: Offer, booking, fulfillment, billing, verification obligations.
Legal basis: Art. 6 para. 1 lit. b, c GDPR; legitimate interests Art. 6 para. 1 lit. f (operation/security).
Retention: Contract/invoice documents for up to 10 years.

Booking/PMS widget
Smoobu GmbH, Wrangelstr. 22, 10997 Berlin, Germany, as processor.
Direct booking on the website is active.

Payments
Currently only bank transfer. No payment service providers integrated on the website.

6. services used (only with consent)

Real Cookie Banner (Consent Management)
WPML (language management)
Further analysis/marketing services are currently not active.

7th recipient

IT service providers, hosters, booking providers, authorities in the case of mandatory
order processing contracts in accordance with Art. 28 GDPR exist.

8. third country transfers

Switzerland: EU adequacy decision.
Transfers to other third countries only if appropriate, EU-SCC or EU-US-DPF, and if necessary after consent.

9. obligation to provide

Certain details are required for bookings. Without these, no booking is possible.

10. storage period

Deletion or anonymization after the purpose has been achieved or in accordance with legal obligations.

11 Automated decisions

No automated decision-making within the meaning of Art. 22 GDPR.

12. rights of data subjects (EU/EEA)

Information, rectification, erasure, restriction, data portability, objection, withdrawal of consent.
Right to lodge a complaint with a data protection supervisory authority in the EU.