Informativa sulla Privacy

1. Controller (Data Processor)

Ioannis Mitrou
Friedrichstr. 28
73249 Wernau
Germany
Email: contact@villa-baboo.com

2. General Information on Data Processing

We take the protection of your personal data very seriously. This privacy policy informs you about what personal data is collected, processed, and stored when you use this website, and what rights you have in this regard.

The processing of personal data is always carried out in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection regulations. Personal data is only collected to the extent necessary to provide the website or to process your inquiries, and on the basis of one of the legal grounds set out in Art. 6 GDPR.

3. Hosting and Server Log Files

This website is hosted by an external hosting provider (Strato AG). When you access this website, the server automatically stores information in server log files, which your browser transmits automatically:

• IP address of the requesting computer
• Date and time of the request
• URL accessed and data volume transferred
• Browser type and version
• Operating system
• Referrer URL (previously visited page)

These data are not merged with other data sources and are used solely for the technically correct provision and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after at most 7 days unless security incidents require longer retention.

4. Contact and Contact Form

You can contact us by email or via the contact form on this website. When doing so, we process the following data:

• Name
• Email address
• Phone number (optional, if provided by you)
• Travel dates and number of guests (if provided)
• Content of your message

This data is used solely to process your inquiry. If your inquiry is directed towards the conclusion of a rental agreement, the processing is based on Art. 6(1)(b) GDPR (pre-contractual measures). For general information requests, the legal basis is Art. 6(1)(f) GDPR (legitimate interest). The data will not be passed on to third parties and will be deleted after your inquiry has been fully processed and after the expiry of any applicable statutory retention periods.

5. Cookies and Local Storage

This website does not use tracking or marketing cookies. Technically necessary browser storage mechanisms (e.g. for session management) may be used as required for the proper operation of the website. This data is not used for profiling or user tracking.

Web analytics services (e.g. Google Analytics, Matomo, or similar) are not used on this website.

6. OpenStreetMap

The location page of this website embeds a map from the OpenStreetMap service. The operator is the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. When the map loads, your IP address is transmitted to the servers of the OpenStreetMap Foundation. This is technically necessary to display the map content in your browser, and is based on our legitimate interest in providing a clear location overview (Art. 6(1)(f) GDPR).

For more information on data processing by OpenStreetMap, see the OSMF privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy.

7. Your Rights as a Data Subject

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR): You may request information about the data stored about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): Under certain conditions, you may request the deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): You may request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You may request that we provide your data in a common, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data where this is based on Art. 6(1)(f) GDPR.

To exercise your rights, please contact: contact@villa-baboo.com

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

8. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the padlock symbol in the browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Last updated: March 2026