Privacy Policy

1. Data Controller

The party responsible for data processing on this website is:

TravelSuites GmbH
Im Degen 50
70327 Stuttgart
Deutschland
Telefon: +49 155 6611 2443
E-Mail: [email protected]

2. General Information

We process personal data only in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the TDDDG.

Personal data is any data by which you can be personally identified or are identifiable.

3. Website Hosting

Our website is operated by an external hosting and infrastructure service provider. Personal data is processed as necessary for the provision, security, and functionality of the website.

This may include in particular:

  • IP address
  • Date and time of access
  • Pages/files accessed
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device

Processing is carried out for the secure, stable, and efficient provision of our online services. The legal basis is Art. 6(1)(f) GDPR.

Our website is hosted by: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes personal data on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. Further information: https://www.hetzner.com/legal/privacy-policy

4. Server Log Files

When visiting our website, technical access data is recorded in server log files. Processing of this data is necessary to provide the website, ensure system security, and detect and prevent misuse.

The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

We use technically required cookies and technologies on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

Where non-technically required cookies or comparable technologies are used, this is done only on the basis of your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You may revoke your consent at any time with effect for the future or adjust your settings.

5a. Google Analytics

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that enable analysis of your use of our website.

Google Analytics is used on this website exclusively with IP anonymization. Your IP address is truncated by Google within the EU/EEA before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

The information generated by the cookie about your use of this website (including the truncated IP address) is transmitted to and stored on a Google server. Google will use this information on our behalf to evaluate website usage and to compile reports on website activity.

Google Analytics is only activated after your explicit consent via our cookie banner (legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You may revoke your consent at any time by deleting the cookies in your browser or by calling up our cookie banner again.

For more information on data protection at Google, visit: https://policies.google.com/privacy. You can also prevent data collection by Google Analytics by installing the browser add-on: https://tools.google.com/dlpage/gaoptout

6. Contact

When you contact us by email, phone, contact form, or other means, we process your information to handle your inquiry.

The following data may be processed in particular:

  • Name
  • Email address
  • Phone number
  • Message content
  • Communication history

The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry is aimed at concluding a contract or making a booking, otherwise Art. 6(1)(f) GDPR.

7. Booking Inquiries and Reservations

When you submit a booking inquiry or prepare a reservation through our website, we process the personal data required for this purpose.

This may include in particular:

  • First and last name
  • Contact details
  • Period of stay
  • Number of guests
  • Accommodation and booking data
  • Billing and payment data
  • Booking-related communication data

Processing is carried out for the performance of pre-contractual measures and the fulfillment of the accommodation contract. The legal basis is Art. 6(1)(b) GDPR.

8. Booking Processing via Smoobu

For the management and processing of bookings, we use the software and services of Smoobu in the background. Where personal data is processed via Smoobu in connection with bookings or booking inquiries, this is done for processing reservations, managing availability, organizing guest data, and the operational handling of our rental services.

The legal basis is Art. 6(1)(b) GDPR insofar as processing is necessary for bookings or pre-contractual measures, as well as Art. 6(1)(f) GDPR for the efficient organizational handling of our rental processes.

Where Smoobu processes personal data on our behalf, this is based on a data processing agreement pursuant to Art. 28 GDPR.

Recipient / Service provider:
Smoobu GmbH
Wönnichstraße 68/70
10317 Berlin
Deutschland

For more information about data protection at Smoobu, please refer to Smoobu's privacy notices.

9. Payment Processing and Invoicing

Where payment data is processed in connection with bookings, this is done for payment processing, invoicing, and compliance with statutory retention and documentation obligations.

The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.

10. Legal Obligations in Connection with Accommodation

Where we are legally obligated to collect or retain guest or identification data, we process this data to fulfill legal obligations.

The legal basis is Art. 6(1)(c) GDPR.

11. Recipients of Personal Data

Personal data is only disclosed where permitted by law or necessary for contract performance.

Recipients may include in particular:

  • Hosting and infrastructure service providers
  • Technical service providers
  • Booking and management software providers
  • Payment service providers
  • Tax advisors / accounting service providers
  • Authorities or public bodies in case of legal obligation

12. Data Retention

We store personal data only as long as necessary for the respective purposes.

Where statutory retention periods apply, data is stored for the duration of these periods. Commercial and tax retention periods may regularly be up to 6 or 10 years.

13. Your Rights

You have the following rights under applicable law:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent with effect for the future

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

15. Obligation to Provide Data

The provision of personal data may be required for the conclusion of a contract, the processing of a booking, or due to legal obligations. Without the required information, we may not be able to process inquiries or bookings.

16. Automated Decision-Making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place, unless expressly stated otherwise in this Privacy Policy.

17. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if required due to changes in legislation, technical changes, or changes to our services. The version published on this website shall apply.

18. Communication via WhatsApp

We offer you the possibility to contact us via the messaging service WhatsApp (operated by: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland).

When you contact us via WhatsApp, your message content, your mobile phone number, and possibly further metadata (e.g. time of communication) will be processed. WhatsApp also transfers data to servers of Meta Platforms Inc. in the USA. For data transfers to the USA, Meta relies on the EU-U.S. Data Privacy Framework (DPF).

The use of WhatsApp is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by ending WhatsApp communication with us. Where your inquiry is aimed at concluding a contract or making a booking, Art. 6(1)(b) GDPR is an additional legal basis.

Further information on data protection at WhatsApp can be found at: https://www.whatsapp.com/legal/privacy-policy

19. Google Maps

We use the mapping service Google Maps on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the map is loaded, your IP address and other technical data are transmitted to Google servers. This may also include a transfer to Google LLC in the USA.

The integration is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Further information: https://policies.google.com/privacy

Last updated: March 2026