Responsible Party (Controller)

KeyForest Homes – Owner: Pierre Dreyer

Hirschbergweg 7

79540 Lörrach, Germany

Contact:
Phone: +49 163 6996128
Email: welcome@keyforest-homes.de

1. Data Protection at a Glance

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to the sections below.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the contact details in the "Responsible Party" section above.

How do we collect your data?
Some data is collected when you provide it to us, for example through the contact form. Other data is collected automatically by our IT systems when you visit the website, such as server log files.

What do we use your data for?
Part of the data is collected to ensure the website functions correctly. Other data may be used to analyze how visitors use the site (using anonymized, cookieless analytics) and to process booking requests.

2. Your Rights under GDPR

You have the right to receive information about the origin, recipients, and purpose of your stored personal data at any time free of charge. You also have the right to request correction, blocking, or deletion of this data. If you have given consent, you may revoke it at any time. You also have the right to data portability under certain conditions. If you believe that your data is being processed unlawfully, you may lodge a complaint with the competent supervisory authority.

The exact rights under the GDPR include:
Right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

3. Data Collection on Our Website

Server Log Files

The provider of the website automatically collects and stores information in server log files, which your browser transmits to us automatically. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address (anonymized, if stored)

This data is not merged with other data sources. The data is collected on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in ensuring the technical error-free operation of the website.

Self-Hosted Fonts (Local Google Fonts)

We use Google Fonts on our website. However, these fonts are hosted locally on our own server. No connection to Google or any US servers is established when you visit our website. Local hosting ensures that no personal data is transmitted to third parties. This serves to protect your privacy and is based on our legitimate interest in a consistent and visually appealing presentation of our website (Art. 6(1)(f) GDPR).

Contact Form

When you send us an inquiry via the contact form, your details from the inquiry form, including the contact details you provide, are stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time. Your data will be deleted once we have fully processed your inquiry, provided no statutory retention obligations prevent deletion.

4. Booking Systems & Payment Services

Smoobu PMS (Property Management System)

For reservation management and booking administration, we use the property management system Smoobu provided by Smoobu GmbH, Boxhagener Str. 76, 10245 Berlin, Germany.

When you make a booking inquiry or complete a reservation, the data you provide (such as name, address, email address, phone number, arrival and departure dates, and number of guests) is transmitted to and processed by Smoobu for the purpose of managing your booking.

The legal basis for this processing is Art. 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures. For more information, please refer to Smoobu's privacy policy at https://www.smoobu.com/en/privacy/.

Stripe Payments

For processing payments in connection with direct bookings, we use the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).

When you make a payment, your payment data (such as credit card information, bank details, and amount) is transmitted to Stripe for the purpose of payment processing. Stripe may transfer your data to other Stripe group companies and subcontractors to the extent necessary for service provision.

The legal basis for this processing is Art. 6(1)(b) GDPR, as the processing is necessary for the performance of a contract. For more information, please refer to Stripe's privacy policy at https://stripe.com/privacy.

5. Web Analytics (Umami Analytics – Self-Hosted)

This website uses Umami Analytics, a self-hosted, privacy-friendly web analytics solution. Umami is deployed on our own server infrastructure, ensuring full control over your data.

Key Privacy Features

• Cookieless tracking: Umami does not use cookies or any form of persistent tracking technology.
• No cross-website tracking: Your browsing behavior is not tracked across different websites.
• Fully anonymized IP addresses: IP addresses are anonymized immediately upon collection and are not stored.
• No personal data collection: Umami collects only aggregated, non-personal data such as page views, referrer sources, browser types, and device categories.

Purpose and Legal Basis

We use Umami to analyze website usage patterns in order to continuously improve our website and tailor it to visitor needs. Since this analytics solution does not collect personal data, no user consent is required. The processing is based on our legitimate interest in improving the functionality and user experience of our website (Art. 6(1)(f) GDPR).

As Umami is fully self-hosted and all data remains exclusively on our servers in Germany, there is no data transfer to third countries.