Privacy policy
This notice explains how personal data is processed when you visit this website or contact us.
1. Controllers and contact
Katharina Roeckl-Burow and Gregor Burow
Möllner Landstraße 20
21465 Reinbek
Germany
Phone: +49 174 33 11 9 11
Email: gregor.buro@gmail.com
You can contact both controllers at the email address above about privacy or to exercise your rights.
2. Hosting and access data
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you access the site, technically necessary data is processed. This may include your IP address, date and time, requested page or file, request status, amount of data transferred, browser and operating system information and, where applicable, the previous page visited (referrer).
Processing is necessary to deliver the website, maintain its stability and security, and investigate technical faults or misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website. IONOS receives this data as part of the hosting service.
Technical data is retained in identifiable form only for as long as necessary for delivery, troubleshooting and security, after which it is deleted or anonymised. IONOS log retention depends on the hosting plan. See IONOS information about server logs.
3. Contact and booking enquiries
If you contact us by email or phone, we process the contact details and information you provide, such as your name, email address or phone number and details about your requested stay. We use this information to answer your enquiry and, where relevant, to prepare or carry out a booking.
For contract-related enquiries, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries under Article 6(1)(f) GDPR; our legitimate interest is responding appropriately. Providing details is voluntary, although we may be unable to respond or make a booking without the necessary contact and stay information.
Enquiries are deleted after they have been handled unless statutory retention duties or legitimate reasons to retain them, such as establishing or defending legal claims, apply. Contract and accounting documents are kept for the applicable statutory periods. Where retention is required by law, processing is restricted; the legal basis is Article 6(1)(c) GDPR.
4. Gmail
We use Gmail from Google for the contact email address listed above. Google Ireland Limited, Ireland, is generally responsible for users in the European Economic Area. Email communications may involve processing sender and recipient addresses, message content, attachments and technical connection data. Google companies or service providers outside the European Economic Area, including in the United States, may process data.
Google describes transfer mechanisms, including adequacy decisions and standard contractual clauses, in its data transfer framework information. More information is available in Google’s privacy policy. Please do not send sensitive information that is unnecessary for your enquiry.
5. Airbnb photos and fonts
Photos displayed on this website are loaded from Airbnb’s image service at a0.muscache.com. Your browser therefore connects to that service when the page loads. Your IP address and technical connection data may be transmitted to Airbnb and its service providers. Further processing is covered by Airbnb’s privacy policy. If you wish to avoid this, do not visit the site or disable external images in your browser.
The DM Sans and Gloock fonts are served from our own webspace; no connection to Google Fonts is made. The website does not use analytics or marketing cookies and does not store information in local or session storage. Navigation and the photo gallery operate within the page.
6. External links
The website includes links to Airbnb, Google Maps and other external services. These are links, not embedded booking or map services. The external provider is contacted only if you follow a link. Its privacy notice then applies. We have no control over its subsequent processing.
7. Your rights
Subject to the applicable legal requirements, you may have the right to access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may withdraw consent at any time with effect for the future; this does not affect processing carried out lawfully before withdrawal.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). We will stop processing unless compelling legitimate grounds override your interests or the processing is needed to establish, exercise or defend legal claims.
You may lodge a complaint with a data protection authority, especially in the place where you live, work or where an alleged infringement occurred. For our place of residence in Schleswig-Holstein, the competent authority is the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany: www.datenschutzzentrum.de.
8. Last updated
6 October 2026. This notice will be updated if the website or our data processing changes.