Privacy Policy** for the Rental of a Holiday Apartment in Würzburg

1. Controller** Gold GmbH represented by Peter Gold Am Fuchsberg 13, 97340 Marktbreit Phone: +49 9332 8889737 Email: [mail@a-am.de]

2. Collection and Storage of Personal Data** We process personal data that we receive in the course of booking, communication, and your stay. Additionally, when visiting our website, server log files are automatically collected (IP address, timestamp, browser data, referrer). If booking platforms (e.g., Airbnb, Booking.com, FeWo-direkt) are used, data is processed by their systems. The respective platforms provide their own information regarding this.

3. Purpose of Data Processing** * Execution of the booking * Communication with guests * Fulfillment of legal obligations * Provision of digital access systems Technical logs of the smart locks are used exclusively for security monitoring.

4. Legal Bases** * Art. 6(1)(b) GDPR * Art. 6(1)(c) GDPR * Art. 6(1)(f) GDPR

5. Disclosure of Personal Data** Data is not sold. Data may only be transferred where necessary, for example to: * payment service providers * hosting providers * smart lock providers * providers of the digital guest map Transfers to third countries (e.g., the USA) may occur. These are based on EU Standard Contractual Clauses or adequacy decisions.

6. Smart Lock System (e.g., Bold App)** Processed data includes email address, access codes, and technical logs. Storage duration: max. 30 days, followed by automatic deletion. Any third-country data transfer is regulated by the provider.

7. Online Check-in** Processed data includes booking and identification data as well as technical log data. If the check-in is carried out via an external provider, a data processing agreement is concluded.

8. Digital Guest Map** Technical data is processed to ensure functionality. The provider is named explicitly; international data transfers may occur.

9. Storage Periods** * Booking data: 10 years (tax regulations) * Registration forms (Meldeschein): 1 year (§ 30 BMG) * Smart lock data: max. 30 days * Communication: up to 6 months

10. Your Rights** You have the right to access, rectification, erasure, restriction of processing, objection, and data portability under the GDPR.

11. Right to Lodge a Complaint** Supervisory Authority: Bavarian Data Protection Authority (BayLDA) Promenade 27, 91522 Ansbach

12. Data Security** We implement technical and organizational measures to protect your data.

13. Changes** We reserve the right to amend this policy to comply with legal requirements or to reflect changes in our internal processes.