Privacy Policy
Atlantic Vacation Rentals
1. Data controller
The controller responsible for processing personal data on this website and in connection with our bookings is:
Atlantic Ferienhausvermietung, owner Christel Jürgens, Breisgauer Straße 18a, 14129 Berlin, Germany
Telephone: (030) 803 50 23 · Email: atlantic@feriendomizile.de
You can also contact us using these details with any questions about data protection or exercising your rights.
2. Overview
We process personal data when you visit our website, contact us with an enquiry, book accommodation with us, or book with us through a booking portal. Below, we explain what data is collected, how we use it, who we share it with and what rights you have.
3. Legal Bases
We process personal data on the following legal bases:
● Art. 6(1)(b) GDPR — for the performance of the contract and pre-contractual measures (enquiry, booking, stay, processing);
● Art. 6(1)(c) GDPR — to comply with legal obligations, in particular statutory retention requirements under commercial and tax law, and the collection and remittance of the tourist tax;
● Art. 6 para. 1 lit. f GDPR — to protect legitimate interests, particularly the secure operation of the website, marketing to existing customers, and the assertion and defense of legal claims;
● Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG — where you have given your consent, in particular for analytics and advertising services and embedded third-party content.
4. Website Provision, Booking System and Property Management
This website and our booking system are provided by Guesty. The provider is Guesty, Inc., United States, together with its affiliates. Guesty acts as our data processor under an agreement pursuant to Article 28 GDPR and processes data solely in accordance with our instructions.
When you visit the website, access data is automatically processed: IP address, date and time of the visit, page visited, access status, amount of data transferred, referrer URL, and information about your browser, operating system and language settings. This data is technically necessary to deliver the website and ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer needed for these purposes.
When handling enquiries, bookings and your stay, we process the following information in particular via the same system: title, first and last name, address, email address, telephone number, number and, where applicable, names of fellow travellers, travel dates, property booked, your messages and correspondence with us, as well as booking and payment status. The legal basis is Art. 6(1)(b) GDPR; for data retention, it is Art. 6(1)(c) GDPR.
Guesty processes data in, among other places, the United States and Israel; see Section 8 for details.
5. Payment Processing
We process payments through Guesty Pay. Our technical payment service provider is Stripe (Stripe Payments Europe, Limited, The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland, or the Stripe entity specified for the relevant payment). Payment by bank transfer is also available; in that case, your payment details are processed by the banks involved.
The information you enter during checkout, especially your card details, is transmitted directly to and processed by the payment service provider. We do not receive your full card details, only information about the payment status and transaction data required for our accounting.
The legal basis is Article 6(1)(b) GDPR and, for data retention, Article 6(1)(c) GDPR. The payment service provider is independently responsible for processing data for its own purposes—in particular, fraud prevention and compliance with regulatory obligations.
6. Bookings through portals
If you book accommodation through a booking platform such as Airbnb, Vrbo or Booking.com, we receive your data from that platform. This usually includes your name, contact details—sometimes in the form of an anonymized forwarding address—travel dates, number of travelers, and booking and payment information.
We process this data to fulfil your booking on the basis of Art. 6(1)(b) GDPR. The respective portal operator is responsible for processing your data on the platform itself; please refer to its privacy policy for details.
7. Recipients of your data
We share personal data with:
● the owners of the booked accommodation and the local service providers we engage (cleaning, key handover, maintenance), limited in each case to the information required to fulfill the booking, such as name, arrival and departure dates, number of guests and a contact method (Article 6(1)(b) GDPR);
● the relevant French municipalities or the French tax authorities for the assessment and collection of the tourist tax (taxe de séjour), limited to the length of stay, number of guests and property details (Art. 6 (1) (c) GDPR);
● Payment service providers and credit institutions for processing payments (Art. 6(1)(b) GDPR);
● our tax advisor and, where required by law, the tax authorities (Art. 6 (1) (c) GDPR);
● IT and software service providers who act as processors on our behalf under Art. 28 GDPR;
● Lawyers, insurance companies or courts, where necessary to assert or defend legal claims (Article 6(1)(f) GDPR).
We will not share your data for any purposes other than those stated. In particular, we do not sell your data.
8. Transfers to third countries
As part of our use of Guesty, data is also processed in the United States and Israel. The European Commission has issued an adequacy decision for Israel, which it upheld following a review in January 2024. For transfers to the United States, we rely on the adequacy decision on the EU-US Data Privacy Framework of 10 July 2023, where the recipient company is certified, and otherwise on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
When using the services listed in sections 10 to 14, data may also be transferred to companies in the United States. The transfers are based on the same legal grounds.
9. Cookies and Consent Management
We use cookies and similar technologies on our website. We set technically necessary cookies required for the operation of the website and the booking process without your consent, pursuant to Section 25(2)(2) TDDDG; the associated data processing is based on Article 6(1)(f) GDPR.
We only use all other cookies and technologies — in particular for audience measurement, advertising purposes and embedded third-party content — with your prior consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Your consent is voluntary; refusing consent will not put you at any disadvantage when using our services.
You may withdraw your consent at any time, with effect for the future. To do so, simply open the cookie notice on this website or send us an informal message. The lawfulness of processing carried out before withdrawal remains unaffected.
10. Google Analytics
If you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and similar technologies to analyse how you use the website. This includes, in particular, your truncated IP address, device and browser information, approximate location, pages viewed, time spent on the site and interactions, as well as pseudonymous identifiers. We use this analysis to improve our services and assess the effectiveness of our advertising. We do not combine this data with data from other sources.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. We have entered into a data processing agreement with Google. Usage data is automatically deleted after 14 months. For more information, visit policies.google.com/privacy.
11. Google Ads, Conversion Tracking and Remarketing
Where you have given your consent, we use Google Ads, including conversion tracking and remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you reach our website through a Google ad, a cookie will be set. This allows us to track whether an ad led to an inquiry or booking, and to show you interest-based advertising on other websites. We receive statistical reports, but no information that could personally identify you.
The sole legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
12. Google Maps
If you have given your consent, we embed maps from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. The map will not load without your consent; in that case, we will provide the accommodation address in text form.
13. Fonts
If you have given your consent, we embed fonts from Google Fonts (Google Ireland Limited, Dublin). This establishes a connection to Google’s servers and transmits your IP address. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Without your consent, a standard font available on your device will be used.
14. WhatsApp Business
We use WhatsApp Business, a service provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, to communicate with prospective guests and guests. Messages are transmitted using end-to-end encryption. Connection data such as your phone number and the time and frequency of communications are accessible to the provider and may be transferred to Meta Platforms, Inc. in the United States.
The legal basis is Art. 6(1)(b) GDPR insofar as the communication serves to initiate or fulfil a contract, and otherwise Art. 6(1)(f) GDPR. If you do not wish to use this method, you can contact us at any time by email or telephone.
15. Our social media presence
We maintain profiles on Facebook and Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit these profiles, Meta processes your usage data for its own purposes, in particular for market research and advertising. We and Meta are joint controllers of the resulting statistics under Art. 26 GDPR; details of the agreement are available at facebook.com/legal/controller_addendum.
The legal basis for our online presence is Art. 6(1)(f) GDPR. We have no influence over processing carried out by Meta itself.
16. Contact and Inquiries
If you contact us via the contact form, by email, by phone, or through a messenger service, we process the information you provide to handle your inquiry. The legal basis is Article 6(1)(b) GDPR if your inquiry relates to a contract; otherwise, it is Article 6(1)(f) GDPR. We delete inquiries that do not result in a booking once they have been fully handled, provided no retention obligations apply.
Our email inboxes and domain administration are operated by ALL-INKL.COM — Neue Medien Münnich, René Münnich, Hauptstraße 68, 02742 Friedersdorf. The provider processes the contents and metadata of our email correspondence as a data processor pursuant to Art. 28 GDPR.
17. Marketing to existing customers
We use our guests’ contact details to occasionally share similar offers of our own and send New Year’s greetings. The legal basis is Art. 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG).
You may object to this use at any time at no cost beyond the transmission fees at the basic rates. An informal message to us is sufficient; every email also includes an unsubscribe link.
18. Data retention period
We store personal data only for as long as necessary for the purposes stated. We retain booking and billing data for up to ten years as required by commercial and tax law (Section 147 AO, Section 257 HGB). Data processed on the basis of consent is deleted when consent is withdrawn, unless another legal basis applies.
19. Your rights
You have the following rights:
● Information about the personal data we hold about you (Art. 15 GDPR);
● Correction of inaccurate data (Art. 16 GDPR);
● Erasure (Art. 17 GDPR), provided there are no statutory retention requirements;
● Restriction of processing (Art. 18 GDPR);
● Data portability (Art. 20 GDPR);
● Right to object to processing based on legitimate interests (Art. 21 GDPR);
● Withdrawal of consent with effect for the future (Art. 7(3) GDPR).
To exercise your rights, simply send an informal message to the contact details listed in section 1.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.
20. Encryption
For security reasons, this website uses SSL or TLS encryption. You can tell that a connection is encrypted by the browser address bar beginning with “https://”. When encryption is active, data you send to us cannot be read by third parties.
21. Changes to this Privacy Policy
We will update this privacy policy if the services we use or the legal requirements change. The version published on this page at any given time applies.
As of September 18, 2026