Pension Sonnenschein

Privacy

Dated: 9 November 2026

This notice explains clearly and fully how Pension Sonnenschein processes personal data when you visit this website, contact us or submit a reservation request.

1. Controller and contact details

Pension Sonnenschein
Operator: Franziska Winkler
Alte Stollberger Straße 2
09387 Jahnsdorf/Erzgebirge
Germany

hallo@pension-sonnenschein-jahnsdorf.de
+49 3721 22360

Please send privacy requests directly to the operator named above.

2. Website access and server logs

When you access the website, the web server processes connection data required for technical operation. This may include your IP address, date and time, the page or file requested, the amount of data transferred, referrer, browser, operating system, language and access status. We use this data to deliver the website, diagnose faults and protect it against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interests are a secure and functioning website.

Log data is deleted once it is no longer needed for secure and reliable operation. If a specific security incident occurs, affected data may be retained while needed to investigate and defend against the incident or to establish, exercise or defend legal claims. A shorter fixed period will be published only once it is technically and contractually verified for this hosting plan.

3. Storage strictly necessary in your browser

The website uses a strictly necessary encrypted session to protect forms against misuse, retain entries after validation errors and operate the protected administration area. A session cookie is set for this purpose. The administration area may also use the browser’s session storage to restore scroll and focus positions after navigation. This information is not used for advertising, audience measurement or profiling. Under section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG), this storage is strictly necessary to provide the functions you expressly request.

We do not use analytics, marketing or tracking cookies, nor do we load external analytics, advertising or map scripts. A cookie consent banner is therefore not required.

4. Contact by phone or email

If you call or email us, we process the contact details and content you provide in order to respond. For questions about a possible or existing stay, the legal basis is Article 6(1)(b) GDPR; for other matters it is Article 6(1)(f) GDPR, based on our legitimate interest in handling your message. The data is deleted once the matter is closed unless statutory retention duties or continuing legal claims require further retention.

5. Reservation request

When you submit the reservation form, you make a binding offer. The guesthouse reviews that offer personally. The technical receipt is not a booking confirmation, does not block a room and does not assign a room automatically. A contract is formed only when a separate booking confirmation is sent.

We process:

• travel and stay data: arrival and departure, number of adults, ages of accompanying children, parent-bed selection, room type, rate, breakfast request and preferred arrival time;
• identity, address and contact data: name, street, house number, postal code, city, country, email address and telephone number;
• your optional message and any information you choose to include in it;
• contract and evidence data: calculated price, selected services, request and processing status, timestamps, reference number, the terms version and snapshot, the version and time at which you acknowledged this privacy notice and, only if selected voluntarily, the text, version, time and any withdrawal of review consent;
• delivery status of emails relating to the request; technical delivery status is stored, but never your email password.

The purposes are to attribute your offer unambiguously, personally review dates, capacity, price and services, contact you with questions, administer the booking and, where necessary, issue an invoice. The legal basis is Article 6(1)(b) GDPR to the extent that the data is objectively necessary for these purposes. Article 6(1)(c) GDPR applies where individual records must be retained by law.

For a confirmed booking, we send a one-off arrival reminder with the booked stay details approximately 24 hours before regular check-in. This message serves to perform the accommodation contract and is based on Article 6(1)(b) GDPR. It contains no advertising and does not create a message subscription.

You may separately and optionally consent to receive one email 48 hours after departure inviting you to leave a voluntary review. The legal basis is Article 6(1)(a) GDPR. Consent is not required for your reservation or stay and may be withdrawn at any time before the message is sent, with effect for the future, by emailing the contact address above. We store the consent text displayed when you make your selection, its version and timestamp; any withdrawal is also recorded.

Your name, full postal address and email address are mandatory in the current reservation process. Providing a telephone number is optional; it is used only for short-notice questions about your request or arrival. Without the mandatory information, the offer cannot be submitted through the form; you may instead contact the guesthouse by phone or email. The form does not collect payment card or bank details.

Confirming that you have read this notice only records your acknowledgement. It is not consent under data protection law.

6. Recipients and service providers

Reservation data is accessible only to the operator and administration accounts authorised by her. The internal notification email includes the full address and the other details required for personal review. The receipt sent to the guest does not include the full address.

Hosting, database operation and email transport are technically provided by ALL-INKL.COM – Neue Medien Münnich, a provider established at Hauptstraße 68, 02742 Friedersdorf, Germany. Other recipients are involved only where required by law, instructed by you, or necessary to establish, exercise or defend legal claims.

7. International transfers and external links

The website and reservation process do not load third-party content or transfer reservation data to a third country. Links to WhatsApp, OpenStreetMap, WebCore Dresden or a review page are opened only if you click them. Your browser then connects to the relevant provider, whose own notice applies to its processing and any international transfers. You do not need to use any of these external links to make a reservation.

8. Retention periods and deletion criteria

Reservation data is initially retained while the offer is being reviewed and, if accepted, while needed to perform and settle the stay. It is then deleted or irreversibly anonymised once its purpose has ended, unless a specifically applicable statutory retention duty or a continuing need to establish, exercise or defend a legal claim requires further retention. There is no blanket statutory retention period for the complete operational reservation record.

Where an individual record actually qualifies as an accounting voucher or commercial/business letter, sections 257 HGB and 147 AO may require retention for eight or six years respectively, calculated from the end of the relevant calendar year. These periods are not applied indiscriminately to every form field. Special registration-form data for foreign guests is processed separately from the reservation form and only in connection with arrival; section 30(4) BMG provides for one year from departure and destruction within three months after that period ends.

9. Your rights

Subject to the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. These rights may be limited by statutory duties or the rights of other people. To exercise them, contact us using the details above.

Under Article 7(3) GDPR, you may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before it.

10. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for the guesthouse’s place of establishment is:

Saxon Data Protection and Transparency Commissioner
Postfach 11 01 32
01330 Dresden
post@sdtb.sachsen.de
www.datenschutz.sachsen.de

11. No automated decision-making

No decision based solely on automated processing, including profiling, is made within the meaning of Article 22 GDPR. Reservation requests are reviewed personally; there is no automatic booking confirmation or room assignment.