Privacy

## 1. Controller **Yeganeh Stays** Am Wachberg 80 50374 Erftstadt Germany Email: [info@yeganeh-stays.de](mailto:info@yeganeh-stays.de) Phone: +49 176 24864663 ## 2. Website Hosting Our website and our data, including bookings and website content, are hosted and stored by a hosting and content delivery provider with whom we have concluded a data processing agreement. When you visit our website, technically necessary data is processed, in particular your IP address, the time of access, the page requested and information about your browser. This processing is necessary to provide the website and to protect it against attacks and misuse. The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in the secure and stable operation of the website. Data may also be processed in the United States. The provider is certified under the **EU-U.S. Data Privacy Framework**. In addition, the European Commission’s Standard Contractual Clauses may apply. ## 3. No cookies, anonymous visitor statistics We count anonymously, and only as daily totals, how often the website is visited, pages are viewed and booking steps are started. For each visit we record only the type of device (phone, tablet or computer), the country (derived by our hosting provider from the connection), the language and the website you came from (only its name). No IP addresses, identifiers or profiles are stored. Our hosting provider also produces equally cookieless, anonymous page-view statistics. The legal basis is our legitimate interest in improving our offer (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count your visit. ## 4. Contact Form and Email If you contact us, we process your name, email address and the content of your message in order to handle and respond to your enquiry. For enquiries relating to a booking, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on Art. 6(1)(f) GDPR. We delete this data once your enquiry has been fully resolved, unless statutory retention obligations require us to retain it for longer. ## 5. Bookings When you make a booking, we may process in particular the following data: - Name - Email address - Telephone number - Travel dates - Number of guests - Booking price - Payment status This processing is carried out in order to initiate, conclude and perform the accommodation contract on the basis of Art. 6(1)(b) GDPR. Your booking is stored in our booking and channel management system. The provider we use for this purpose is based in Germany. The system is used, among other things, to automatically block booked dates across connected booking platforms. We have concluded a data processing agreement with the provider. We retain invoices and booking records in accordance with statutory commercial and tax retention obligations, in particular pursuant to § 147 AO and § 257 HGB. The retention period may be up to ten years. The legal basis for this retention is Art. 6(1)(c) GDPR. ## 6. Payment Payments are processed by **Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland**. You enter your payment details, such as credit card information, directly with Stripe. We do not receive your full payment details. We only receive information such as the payment amount and payment status. Stripe also processes certain data under its own responsibility as an independent controller, for example for fraud prevention and to comply with legal obligations. Data may also be transferred to the United States. Such transfers may be based, in particular, on the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses. Processing in connection with payment is based on Art. 6(1)(b) GDPR. Further information is available in Stripe’s privacy policy: https://stripe.com/privacy ## 7. Booking-Related Emails We send booking confirmations, payment confirmations, check-in information and cancellation confirmations to the email address you provide. This processing is necessary for the performance of the contract and is based on Art. 6(1)(b) GDPR. We use an email service provider for this purpose with whom we have concluded a data processing agreement. ## 8. Online Check-in and Identity Documents You may check in online before your arrival. Where German law requires registration of accommodation guests, in particular pursuant to §§ 29 and 30 of the German Federal Registration Act (Bundesmeldegesetz – BMG), we process the legally required information on the basis of Art. 6(1)(c) GDPR. We retain the registration form for one year following the date of departure. It is then destroyed within three months. If you upload a copy of your identity document, we use it exclusively to verify your identity for the purpose of contactless check-in. Processing is based on Art. 6(1)(a) and Art. 6(1)(b) GDPR. The copy is stored in encrypted form and deleted no later than three months after your departure. You may black out information on your identity document that is not required for identity verification. ## 9. Guest Reviews We may display reviews published by guests after their stay on platforms such as **Airbnb** or **Booking.com**. The following information may be displayed: - First name - Place of origin, where provided - Month of the stay or review - Star rating - Review text Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to provide prospective guests with authentic information and experiences relating to our accommodation. If you do not want your review to appear on our website, you may contact us and we will remove it from our website. ## 10. Videos YouTube videos provided by **Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland** are only loaded once you actively click to play them. We host the preview images ourselves. Therefore, no data is transmitted to YouTube before you start the video. Only when you actively play the video may data, in particular your IP address, be transmitted to YouTube or Google. This may also involve a transfer of data to the United States. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR, which you provide by actively starting the video. ## 11. Your Rights Subject to the applicable legal requirements, you have in particular the following rights: - Right of access pursuant to Art. 15 GDPR - Right to rectification pursuant to Art. 16 GDPR - Right to erasure pursuant to Art. 17 GDPR - Right to restriction of processing pursuant to Art. 18 GDPR - Right to data portability pursuant to Art. 20 GDPR - Right to object to processing based on Art. 6(1)(f) GDPR pursuant to Art. 21 GDPR You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. To exercise your rights, please contact us at: [info@yeganeh-stays.de](mailto:info@yeganeh-stays.de) ## 12. Obligation to Provide Data Without the information required for a booking, we are unable to conclude an accommodation contract with you. We do not use automated decision-making, including profiling.