Privacy

Controller

Telephone: +49 151 708 35 724

Email: boehm_holger@gmx.net

Hosting and server logs

This website is hosted on a server provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The application is managed through a self-hosted Coolify installation. When you visit the website, technically necessary data is processed. This may include your IP address, date and time, the requested page or file, browser and operating system information, referrer URL and HTTP status code.

The processing is necessary to deliver the website and maintain its stability and security. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure operation of the service. Log data is retained only for as long as necessary for these purposes. Longer retention may be required for a specific security incident or by law.

netcup privacy information ↗

Contact by telephone and email

If you contact me by telephone or email, I process the contact details and message content you provide to respond to your enquiry. For booking enquiries, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is Article 6(1)(f) GDPR; my legitimate interest is responding to incoming messages.

Contacting me is voluntary. Without a means of contacting you, however, I cannot respond. Data is deleted when the purpose of the communication no longer applies, unless legal retention obligations or legitimate reasons require longer storage.

GMX email service

I use a GMX mailbox for email communication. GMX is provided by 1&1 Mail & Media GmbH. The email provider may process sender and recipient addresses, time, subject, message content and technical delivery information. The legal bases set out under “Contact by telephone and email” apply.

GMX privacy information ↗

Contact through WhatsApp

The website contains a standard link to WhatsApp with a pre-filled enquiry. Merely visiting this website does not connect you to WhatsApp. If you open the link, you leave this website and WhatsApp may process technical data. If you send a message, your telephone number, profile name and message content are processed to respond to your enquiry.

For users in the European Economic Area, the service is provided by WhatsApp Ireland Limited. WhatsApp may also process data outside the European Economic Area. My processing is based on Article 6(1)(b) GDPR for booking enquiries and Article 6(1)(f) GDPR for other enquiries. You can contact me by telephone or email instead. The retention criteria described under “Contact by telephone and email” apply.

WhatsApp privacy policy ↗

Fonts, images and cookies

Fonts, images and icons are served by this website. No external font or image services, advertising services or social media plugins are integrated. The website has no contact form.

Your consent choice is stored for 182 days in a technically necessary cookie named mrmelody_consent. Google Analytics statistics cookies are set only after you agree.

Google Analytics 4

After your express consent, I use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without consent, the Google script is not loaded and no analytics data is sent to Google.

GA4 processes page views and technical browser and device information. Depending on the web data stream settings, scroll depth, outbound-link clicks and file downloads may also be collected. Such events may include the destination URL or file name. Page views reported by this website contain no URL parameters. Google Signals and advertising personalisation are disabled in the website tag. GA4 may set cookies such as _ga and _ga_*; their lifetime is limited to 28 days from initial creation on this website.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can change or withdraw your choice at any time with effect for the future through “Cookie settings” in the footer. GA4 cookies are deleted where technically possible when consent is withdrawn. User-level event data is retained in the GA4 property for 2 months.

GA4 may involve data processing outside the EU, particularly in the United States. Google provides more information in its privacy policy.

Google privacy policy ↗

Recipients and retention

Personal data is shared only with parties that need it for the purposes described above. These may include the hosting provider, email provider and, if you choose that contact channel, WhatsApp. Further disclosure only takes place on a legal basis or with your consent.

Retention periods depend on the relevant purpose, the progress of an enquiry and any statutory retention obligations. After that, data is deleted or anonymised unless another legal basis permits further storage.

Your rights

Subject to the GDPR, you may request access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may object to processing based on legitimate interests under Article 21 GDPR. You may withdraw any consent with effect for the future.

To exercise your rights, contact the controller named above. You may also lodge a complaint with a data protection supervisory authority. In Baden-Württemberg, the competent authority is the State Commissioner for Data Protection and Freedom of Information, Heilbronner Straße 35, 70191 Stuttgart, Germany.

Website of the supervisory authority ↗

Security and updates

The website is transmitted using HTTPS encryption. I take appropriate technical and organisational measures to protect personal data. This notice will be updated if the website or the services used change.