Privacy

Controller and contact

+4915510132266

Send privacy requests, objections or consent withdrawals to the operator at the address above or through the published contact details.

Website delivery and hosting

Hostinger hosts this website. Requests involve your IP address, time, requested URL and technical browser information to deliver pages and detect attacks. The legal basis is GDPR Article 6(1)(f), our legitimate interest in secure operation. Technical logs are retained according to their necessity for operation and security investigations. Hostinger and its subprocessors may process technical data. Processing outside the European Economic Area requires the safeguards of GDPR Articles 44 et seq., such as an adequacy decision or appropriate guarantees.

Hostinger: data processing information

Necessary cookies

After confirmation, lw_age stores only the age confirmation as a session cookie, without your date of birth or identity documents. The application session cookie and XSRF-TOKEN manage sessions and protect forms against forged requests. lw_admin_locale remembers the administration language. These functions rely on Section 25(2)(2) TDDDG and GDPR Article 6(1)(f). Age confirmation does not verify identity. No analytics or marketing trackers are integrated. Fonts, images and scripts are served locally. The lw_admin_locale cookie is stored for up to one year.

The application session expires after 120 minutes of inactivity. You can delete cookies in your browser at any time; you may then need to sign in or confirm your age again.

Contact and room enquiries

We process the information you provide to handle your enquiry. Specific rental enquiries rely on GDPR Article 6(1)(b); general enquiries rely on Article 6(1)(f), our interest in answering your questions. Where offered, the online form requires explicit consent under Article 6(1)(a) and, for information about sex life, Article 9(2)(a). A name or pseudonym, message and at least one contact method are necessary for a reply. Age, identity documents and health information are not requested. Enquiries are private and available only to authorised persons. Delete them when the purpose ends, subject to legal duties or legal claims; contractual records may be stored separately. The form does not send automatic emails.

Profiles and photographs

Public profiles may contain names or pseudonyms, photographs, age, presence and information about independent providers. Personal publication requires a suitable legal basis; information about sex life also requires compliance with GDPR Article 9. Approval must cover the specific content and public accessibility. Affected persons can request correction, removal or withdraw consent by contacting the operator. Third parties may copy public content; complete removal of their copies cannot be guaranteed.

Administration and security

The protected administration processes account data, roles, login times and change logs for access control and accountability under GDPR Article 6(1)(f). Passwords are hashed. Failed login identifiers are pseudonymised; lockout checks cover 15 minutes and attempts older than one day are removed on the next login or during scheduled cleanup. Logs are needed only while security purposes, specific incidents or evidence duties justify them. There are no automated decisions with legal or similarly significant effects and no visitor profiling.

Optional OpenStreetMap map

The map is blocked until you select “Load map”. This connects to the OpenStreetMap Foundation and transmits your IP address and browser information to the service and its worldwide map server network. Activation is voluntary, based on GDPR Article 6(1)(a) and, where terminal storage or access occurs, Section 25(1) TDDDG. “Disable map” removes the embed for this page visit; data already transmitted cannot be recalled. Permission is not stored permanently; the next visit requires a new activation. The address is usable without the map.

OpenStreetMap Foundation privacy notice

External links

Route and profile links lead to separate services. A connection is established only when you open the link. This website does not transmit a referrer. The destination provider’s privacy notice applies there.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing under Article 6(1)(f) on grounds relating to your particular situation, and to direct marketing at any time. Consent can be withdrawn for the future without affecting previous lawful processing. Use the contact details above. You may complain to a supervisory authority, particularly where you live or to the Bavarian State Office for Data Protection Supervision.

Complain to the Bavarian data protection authority