Privacy information
Last updated: October 2026
1. Controller and contact
Denny Heim · DH Ferientraum Thüringen
Wasserwerkstraße 10, 98553 Schleusingen
Telephone: +49 (0) 36704 80284
Email:
Accommodation: Haus Rosenbaum, Hiftenberg 3, 98724 Neuhaus am Rennweg, Siegmundsburg district.
For questions about data protection or to exercise your rights, please contact the controller named above.
2. Visiting the website and hosting
Our website is hosted in Germany by ALL-INKL.COM – Neue Medien Münnich. Technically necessary connection data is processed when you visit. This includes, in particular, your IP address, the date and time of access, pages and files requested, the amount of data transferred, status messages and information about your browser, operating system and, where applicable, the previously visited page (referrer).
This processing serves to provide the website, analyse errors and protect against misuse and attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of our website.
Log data is retained only for as long as necessary for these purposes; longer retention may be required to investigate specific security incidents.
Information from the hosting provider is available in the ALL-INKL.COM privacy information.
3. Cookies and local storage
Our website uses technically necessary Joomla sessions, particularly for the contact form and its protection against misuse. You can delete or block cookies in your browser settings. This may restrict individual functions.
We store your analytics choice in your browser’s local storage (“hr_matomo_consent_v1”) for a maximum of 180 days. Only your decision and its expiry time are stored, without a visitor identifier. This allows us to respect your choice on subsequent page visits. You can change it at any time via “Analytics settings” or delete it in your browser.
4. Matomo analytics and external services
With your voluntary consent, we use Matomo to analyse visits to Haus Rosenbaum. These statistics use a separate website assignment, distinct from Ferientraum. Matomo runs on our own analytics installation at analytics.ferientraum-thueringen.de. The purpose is to understand how our pages are used and to improve our services. The legal basis is your consent under Article 6(1)(a) GDPR.
We collect pages visited and page titles, the timing and sequence of visits, and technical information about the browser, device, operating system, language and screen size. The IP address is shortened by two bytes before storage; the shortened address is used for location analyses. Only the domain of referring pages is considered. Our integration does not send URL additions or form content to Matomo as part of the page address. We do not set analytics cookies or use a browser visitor identifier across sessions.
Matomo loads only after you select “Allow analytics”. Without your consent, this web analytics service remains disabled. We respect an enabled “Do Not Track” signal from your browser. You can withdraw your consent for future processing at any time through “Analytics settings” and “Without analytics”. You can use the website and make an enquiry or booking without analytics.
Individual visit logs are deleted automatically after 180 days. Aggregated statistical reports may be retained for longer. Processing is carried out by us and our hosting provider; the integration does not transmit visit data to an external Matomo cloud service.
Regardless of your analytics choice, the external availability calendar and Baude online booking load only after you click the relevant button. This permission is not stored permanently; you choose again when you return to the page.
5. Contact, offers and bookings
When you contact us by email, telephone, WhatsApp or form, we process your information to handle your enquiry.
This may include your name, contact details, organisation, travel dates, number of participants, catering preferences and the content of your message.
For a booking, this also includes the data necessary to perform the contract, process payment and issue invoices.
The legal basis is Article 6(1)(b) GDPR where processing concerns pre-contractual steps or performance of a contract.
We handle other enquiries based on our legitimate interest in communication under Article 6(1)(f) GDPR.
We fulfil statutory retention and documentation obligations on the basis of Article 6(1)(c) GDPR.
Required fields in forms are marked; without the information necessary for processing, we may be unable to handle your enquiry or booking.
Contact via WhatsApp
You can choose to contact us using the “Enquire via WhatsApp” button. The button is an external link; simply displaying it does not load WhatsApp scripts or chat content. WhatsApp opens only when you click. The prepared message text with the accommodation name and public page address, together with technical connection data, is then transmitted to WhatsApp. The button does not include form entries or URL additions. You can edit the message before sending it; it is not sent to us automatically.
If you write to us, we process your message, telephone number and the profile information visible to us to handle your enquiry. Alternatively, you can contact us at any time by telephone, email or contact form. For processing by WhatsApp Ireland Limited and possible transfers outside the European Economic Area, please refer to the WhatsApp privacy policy.
6. External availability calendar and online booking
The availability calendar for Haus Rosenbaum is provided by gruppenhaus.de (Verlag Klaus Ludwig, Zeppelinstraße 34, 14612 Falkensee). It loads only when you click “Load Haus Rosenbaum availability calendar”. The provider then receives, in particular, your IP address and technical browser and connection data. Further information: gruppenhaus.de privacy information.
For direct online bookings of Baude Steinheid, we use the booking system from Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany. Loading it transmits, in particular, your IP address, browser information and the page visited to Smoobu. It is embedded only after you click the button to load the booking view. When you book, the contact, travel and booking details you enter there are processed to handle your stay. Further information: Smoobu privacy information.
External content is loaded voluntarily with your consent on the basis of Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG. A specific booking enquiry is processed under Article 6(1)(b) GDPR. You can close embedded content by reloading or leaving the page. Alternatively, you can contact us directly by email, telephone or our contact form.
Smoobu uses subprocessors; this may also involve transfers of data outside the European Economic Area. Information about these service providers and the envisaged data protection safeguards is provided in the Smoobu data processing agreement. Booking data is subject to the purposes and retention periods explained below.
Our contact form uses the “Proof of Work” spam protection built into Joomla. Your browser performs a short computational task; no external CAPTCHA service is embedded for this purpose.
7. External links
Our website contains links to external services, such as Facebook and YouTube.
Opening such a link takes you away from our website. The relevant provider processes the data generated by the visit under its own responsibility.
This may also involve processing outside the European Union or the European Economic Area.
Please consult the privacy information of the relevant provider.
8. Recipients and retention periods
Only persons and service providers who need personal data for the stated purposes are given access, in particular hosting and IT providers and parties involved in performing the contract.
Data is disclosed to authorities or other recipients where we are legally obliged to do so or where another legal basis exists.
We retain personal data for as long as necessary to handle the enquiry, perform the contract or fulfil legal obligations.
The data is then deleted unless statutory retention periods or legitimate grounds, in particular the establishment, exercise or defence of legal claims, prevent this.
Invoice and booking records are subject to the applicable retention periods under tax and commercial law.
9. Your rights
Subject to the statutory conditions, you have the right to:
access under Article 15 GDPR,
rectification under Article 16 GDPR,
erasure under Article 17 GDPR,
restriction of processing under Article 18 GDPR,
data portability under Article 20 GDPR.
You may withdraw consent at any time with effect for the future.
Right to object: where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation.
For direct marketing, this right applies at any time without giving reasons.
In other cases, after an objection we will no longer process your data unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You may also lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement.
For Thuringia:
Thuringian State Commissioner for Data Protection and Freedom of Information
10. Transmission security and changes
Our website uses HTTPS for encrypted transmission.
We update this privacy information when the nature of data processing, the services used or legal requirements change.