Below, we explain how we process personal data on this website and in connection with our services.
The controller within the meaning of the GDPR is:
Fabian Nusser e.K
Martinstr. 7G
77855 Achern
Germany
Telephone: +49 171 7841 201
Email: info@maison-talmuehle.de
Web: www.maison-talmuehle.de
The data we process includes in particular:
- Your first and last name
- Your email address
- Your telephone number
- the information you provide when making a booking, enquiry or newsletter subscription
- technical usage and access data generated when you visit our website
Personal data is processed for the following purposes:
- Processing booking enquiries
- Managing and processing online bookings
- Communicating with guests and prospective guests
- Newsletter subscription and distribution
- General contact
- Ensuring the stability, security and optimisation of our website
- Performance of an accommodation contract or implementation of pre-contractual measures
We delete personal data as soon as it is no longer necessary to store it for the relevant purpose, or restrict processing where statutory retention obligations apply.
Disclosure of data
We disclose your personal data to third parties only where this is necessary to fulfil our contractual and legal obligations, where we engage service providers as processors, or where you have given us your express consent. Recipients of your data may include, in particular, technical service providers, service providers involved in fulfilling the contract, marketing and analytics service providers, and public authorities and government institutions where we are legally required to disclose it.
Security measures and transfers to third countries
We have implemented appropriate organisational and technical measures to protect your data against unauthorised access, loss or misuse. Our service providers are contractually obliged to process personal data solely in accordance with our instructions and to implement appropriate security measures.
If personal data is transferred to recipients outside the European Union (EU) or the European Economic Area (EEA), we ensure that an adequate level of data protection is in place, for example through an adequacy decision by the European Commission, EU Standard Contractual Clauses or comparable appropriate safeguards.
Rights of data subjects
As a data subject, you have the right of access, rectification or erasure, restriction of processing, objection to processing and data portability. Where you have given us consent, you may withdraw it at any time with effect for the future. Please send any requests, objections or withdrawals informally to the email address given above.
Questions about data protection
If you have any questions or concerns about the processing of your personal data, please use the contact details given above. We will deal with your enquiry as quickly as possible.
You also have the right to lodge a complaint with a data-protection supervisory authority. The competent authority for Baden-Württemberg is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Telephone: 0711/61 55 41-0
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
Online booking and enquiries via the website
On our website, you can enquire about suites, packages and offers or book through linked booking pages. If you use this option, the data entered in the form is transmitted to us and stored for processing. This may include in particular:
- Title, first name and last name
- Email address, telephone number and postal address
- Travel dates, duration of stay and number of accompanying guests
- Selected suite, offers, services and pricing information
- Special requests or voluntary information
To process online bookings and enquiries, we use the reservation and booking system provided by our technical service provider, Websline GmbH, Sägewerkstraße 24, 83395 Freilassing, Germany. Websline processes booking data on our behalf and under a data-processing agreement pursuant to Art. 28 GDPR.
Data is disclosed to other third parties only where this is necessary to process your booking, fulfil the accommodation contract, process payment or comply with statutory obligations.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract or implementation of pre-contractual measures), Art. 6 para. 1 lit. c GDPR (statutory retention obligations) and Art. 6 para. 1 lit. a GDPR where you give express consent.
Retention period: We retain your data only for as long as is necessary to process your enquiry, perform the contract and comply with statutory obligations. Statutory retention periods under commercial and tax law may be up to 10 years.
Contact forms
If you contact us using a form on this website, we process the data you enter in order to deal with your enquiry. Depending on the form, this may include your name, email address, telephone number, title, message, selected services and technical metadata relating to the form submission.
Processing is based on Art. 6 para. 1 lit. b GDPR where your enquiry concerns the conclusion or performance of a contract; otherwise, it is based on our legitimate interest in dealing with your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. Where you give consent, processing is based on Art. 6 para. 1 lit. a GDPR.
We use Contact Form 7 for the technical provision of the forms. Form submissions may also be stored in our WordPress system to support traceability and processing.
Cookiebot
We use the Cookiebot consent-management service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot enables us to obtain, document and manage website visitors’ consent to data processing.
Processing is necessary for compliance with a legal obligation to which we are subject (Art. 6 para. 1 lit. c GDPR). The data processed may include your truncated IP address, the date and time of consent, browser information, the URL from which consent was submitted, an anonymous encrypted key and your consent status.
The key and consent status are generally stored in the browser for 12 months. Further information is available at https://www.cookiebot.com/de/privacy-policy/.
Hosting & Content Delivery Network
When you visit our website, the web server automatically processes technical access data in server log files. This includes, in particular, your IP address, the date and time of the request, the time-zone difference from Greenwich Mean Time, the content requested, the HTTP status code, the volume of data transferred, the referrer URL, and information about your browser and operating system.
This processing is necessary to deliver the website and ensure its stability, security and performance. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
We use Kinsta Inc., Attn: Privacy and Data Protection Team, 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA, to provide our website. Kinsta uses Google Cloud Platform services in particular for its infrastructure. Kinsta acts as a processor on our behalf. Where configured for this website, the server location is Germany.
Further information is available at https://kinsta.com/legal/privacy-policy/. Log-file data is deleted after 30 days unless longer retention is necessary to investigate security incidents.
Cloudflare
We use the content delivery network and security services provided by Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany. Cloudflare helps us improve the security, stability and delivery speed of our website.
Cloudflare may process personal data, particularly technical access data and IP addresses. The legal basis is our legitimate interest in providing the website securely and efficiently pursuant to Art. 6 para. 1 lit. f GDPR.
Cloudflare acts as a processor on our behalf. Further information is available at https://www.cloudflare.com/de-de/cloudflare-customer-dpa/.
Google Fonts
Our website may load fonts from Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access the website, your browser may connect to Google’s servers for this purpose. In particular, your IP address may be transmitted to Google.
Google Fonts is used to present our website in a consistent and appealing manner. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Where consent is required for integration, processing takes place exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.
Further information is available at https://policies.google.com/privacy.
Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage and deploy website tags. It does not itself create user profiles, perform independent analysis or store cookies on your device. However, as part of its technical provision, your IP address may be transmitted to Google.
Google Tag Manager can be used to integrate other services such as Google Analytics, Google Ads or Meta Pixel. Where consent is required, these services are activated through our consent-management system only after you have given your consent.
The legal basis is our legitimate interest in the technically reliable and efficient management of the services used on our website pursuant to Art. 6 para. 1 lit. f GDPR. Further information is available at https://policies.google.com/privacy.
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies that enable analysis of how our website is used.
Google Analytics is activated only after you have given your consent through our consent-management system. We use Google Consent Mode v2. IP anonymisation is enabled.
Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings.
Further information is available at https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy.
Google Ads and Google conversion tracking
Our website may use Google Ads and Google conversion tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Conversion tracking enables us to determine whether certain actions were taken on our website after an advertisement was clicked.
Processing takes place only with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. Further information is available at https://policies.google.com/privacy.
Meta Pixel
We may use the Meta Pixel from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on our website. The Meta Pixel enables us to measure the effectiveness of advertising campaigns and gain a better understanding of target audiences for advertising.
Processing takes place only with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings.
Further information is available at https://www.facebook.com/privacy/policy/.
WP Statistics
We use WP Statistics to evaluate the use of our website statistically. This involves processing technical usage data such as pages viewed, referrers, browser and device information, and truncated or anonymised IP addresses. IP anonymisation and IP hashing are enabled in the settings.
Processing is based on our legitimate interest in measuring reach and optimising our website pursuant to Art. 6 para. 1 lit. f GDPR. The stored statistical data is regularly purged; the database is currently configured to be purged after 180 days.
Further information is available at https://wp-statistics.com/privacy-and-policy/.
Google reCAPTCHA
We use Google reCAPTCHA to protect our forms against misuse and automated submissions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA analyses technical information about use of the website in order to distinguish human users from automated access. The data processed may include the IP address, browser information, time spent on the website and interactions.
The legal basis is our legitimate interest in protecting our website and forms against spam and misuse pursuant to Art. 6 para. 1 lit. f GDPR. Further information is available at https://policies.google.com/privacy and https://policies.google.com/terms.
Newsletter via Campaign Monitor
We use Campaign Monitor, provided by Campaign Monitor Pty Ltd, 201 Elizabeth St, Sydney, NSW, Australia, to distribute our newsletter. This enables us to communicate directly with subscribers and improve what we offer.
For this purpose, we process your email address and, where provided, your first name, last name, title and other voluntary information. Our email communications may contain information that enables us to evaluate opens and clicks statistically.
Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time using the unsubscribe link in the newsletter or by sending us a message. Campaign Monitor acts as a service provider on our behalf. Appropriate safeguards, in particular EU Standard Contractual Clauses, are used for international data transfers. Further information is available at https://www.campaignmonitor.com/policies/.
Offer platform (tos.maison-resorts.app)
Processing enquiries and offers
When you send us an enquiry, we process your message in order to prepare a personalised offer for you. This includes, in particular, your name, email address, telephone number, travel dates, number of guests and any special requests.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures taken at the request of the data subject).
Retention period: 3 years after the last contact or stay, unless statutory retention obligations require otherwise.
Personalised offer page
If you receive an offer link from us, it leads to a personalised page on our offer platform. On this page, page views, click behaviour, suite options viewed, selected extras, and the time and frequency of page visits may be processed and associated with your offer. This enables us to provide you with a more suitable offer and better service.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in improving our offer and personalising the guest experience).
Right to object: You may object to processing at any time by contacting us at info@maison-talmuehle.de.
Email delivery via Resend
The Resend service (Plus Five Five, Inc., USA) may be used to send acknowledgements of receipt, offers, reminders and booking confirmations. Your email address, name and the email content are processed for this purpose. A Data Processing Agreement incorporating EU Standard Contractual Clauses is in place with Resend.
AI-assisted text personalisation
Selected enquiry content may be processed by AI services to assist in preparing personalised offer text. Processing takes place exclusively for the purpose of preparing offers and improving service. Where providers outside the EU are used, appropriate safeguards such as EU Standard Contractual Clauses are applied.
Guest profile
For the purpose of guest service, we may store information about previous enquiries, stays, booked services and preferences in a guest profile.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in guest retention and service quality).
Retention period: 3 years after the last stay, unless statutory retention obligations require otherwise.
Property Management System (apaleo)
We use the apaleo Property Management System from apaleo GmbH, Munich, Germany, to manage reservations and issue invoices. Stored data may include names, contact details, reservation details and payment information. According to the provider, the data is stored in the EU.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).
SSL or TLS encryption
Our website uses SSL/TLS encryption to transmit data securely. You can recognise an encrypted connection by the “https://” at the beginning of your browser’s address bar and the padlock icon.
Copyright: Gipfelgold GmbH
Last updated: 28 August 2026
