Privacy Policy
Last updated: October 2026
Protecting your personal data is important to us. The following information explains which personal data may be processed when you visit our website or contact us in connection with an enquiry or booking.
Personal data means any information relating to an identified or identifiable individual, such as name, address, email address, telephone number or IP address.
1. Data Controller
The controller responsible for processing personal data on this website is:
Urlaubsnesterl – Renate and Hans Karletz
Jochbergstrasse 1
83671 Benediktbeuern
Germany
Telephone: +49 8857 89940
Email: dein@urlaubsnesterl.de
2. Hosting and Server Log Files
Our website is hosted by:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany
When you access our website, the web server automatically records certain technical data required to provide the website. This may include:
- IP address
- date and time of access
- page or file requested
- referrer URL
- browser and browser version used
- operating system
- amount of data transferred
- HTTP status code
This information is required to provide our website technically and to ensure its stability and security.
The processing is based on our legitimate interest in maintaining a secure and reliable website.
According to our hosting provider, IP addresses stored in access logs are anonymised and the anonymised log data is retained for a limited period.
The hosting provider processes this data on our behalf.
3. Cookies and Local Storage
Our website does not use cookies. We also do not use sessionStorage or IndexedDB.
Our accessibility tool uses only your browser’s local storage (localStorage). The key a11yState stores the accessibility settings you have selected.
This storage is used solely to retain your chosen settings when you visit further pages on our website. The stored information is not used for analytics, marketing or tracking purposes and is not transferred to third parties.
The storage is technically necessary in order to provide the accessibility settings you have expressly chosen. Prior consent is therefore not required.
You can reset the stored settings at any time using the corresponding function in the accessibility tool or by clearing your browser’s local storage.
We do not use analytics or marketing services and do not create personal user profiles.
4. Encrypted Data Transmission
Our website uses SSL/TLS encryption.
This protects data transmitted between your browser and our server against access by third parties.
An encrypted connection can usually be recognised by the padlock symbol in your browser’s address bar and by the website address beginning with “https://”.
5. Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide in order to respond to your enquiry.
This may include:
- name
- email address
- telephone number
- content of your enquiry
- requested travel dates
- number of guests
- any other information you voluntarily provide
If your enquiry concerns a possible booking or an existing stay, the data is processed in order to take steps prior to entering into a contract or to fulfil the accommodation contract.
For other enquiries, processing is based on our legitimate interest in responding to your request.
The data will be deleted once it is no longer required for handling your enquiry, unless statutory retention obligations or contractual reasons require us to retain it for longer.
6. Booking and Your Stay
If you book one of our holiday apartments, we process the information required to prepare and provide your stay.
This may include:
- first and last name
- address
- contact details
- arrival and departure dates
- number and, where relevant, age of accompanying guests
- information about dogs travelling with you
- payment information
- any further information required for your stay
The data is processed for the preparation and fulfilment of the accommodation contract concluded with you.
Where we are legally required to retain certain booking, billing or payment information, processing also takes place in order to comply with these legal obligations.
After the applicable statutory retention periods have expired, the data will be deleted unless it is still required for the performance of the contract or for the establishment, exercise or defence of legal claims.
7. Visitor’s Tax and Guest Registration
A municipal visitor’s tax is payable for stays in Benediktbeuern.
Where we are required to register our guests or account for the visitor’s tax, we process the information required for this purpose and, where necessary, transfer it to the responsible municipality or tourism authority.
The processing takes place in order to comply with statutory or municipal obligations.
8. KÖNIGSCARD
As a guest at Urlaubsnesterl, you receive the KÖNIGSCARD for the duration of your stay.
The KÖNIGSCARD is issued personally and is not transferable. To issue and use the card, the required guest information must therefore be processed and transferred to:
KÖNIGSCARD Gästekarten GmbH
Hauptstraße 8
87663 Lengenwang
Germany
The data is processed in order to provide the KÖNIGSCARD services included with your booking.
Any further processing of your data by KÖNIGSCARD Gästekarten GmbH is subject to its own privacy policy.
9. Availability Calendar
The availability calendar displayed on our website is used solely to show the availability of our holiday apartments.
No names or other personal information relating to guests who have already booked are published.
Bookings cannot be made directly through the availability calendar. Please contact us personally to make a booking.
10. Payment
Depending on the arrangement, different payment methods are available for your stay.
Bank Transfer
When paying by bank transfer, payment data is processed by the banks involved in the transaction.
We process the information required to allocate and record your payment in order to fulfil the accommodation contract and comply with statutory retention obligations.
PayPal
Payments can also be made via PayPal on request.
PayPal is not integrated into our website as a payment module or plugin. Simply visiting our website therefore does not establish a connection to PayPal.
If you choose to pay via PayPal, the payment will be processed by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
PayPal processes personal data independently in accordance with its own privacy policy.
We receive the transaction information required to allocate and document your payment.
11. External Links
Our website contains links to websites operated by other providers, for example:
- KÖNIGSCARD
- leisure activities and attractions
- Google Maps or another external route planner
- travel insurance providers
- other tourism-related services
These are standard external links only.
Simply visiting our website does not establish a connection to the linked website.
Only when you click on a link do you leave our website. The respective provider may then process information such as your IP address and technical information about your browser.
The respective provider is solely responsible for the processing of personal data on the linked website.
12. Links to Facebook, Instagram and Bluesky
Our website may contain icons or links to our profiles on social networks, in particular:
- Bluesky
These are standard external links only.
We do not use social-media plugins, embedded social-media feeds, Like buttons or Share buttons that transmit data to the respective networks simply by loading our website.
Only when you click on the relevant link do you leave our website and access the respective social network.
From that point onwards, your data is processed by the respective provider in accordance with its own privacy policy.
Facebook and Instagram are operated by companies within the Meta group. Bluesky is operated by Bluesky Social, PBC.
If you are already logged into one of these services, the provider may be able to associate your visit with your user account.
13. No Web Analytics or Marketing Tracking
We currently do not use services such as Google Analytics, Google Ads, Meta Pixel or comparable analytics or marketing services.
We do not create personal user profiles and do not track visitors to our website across other websites for advertising purposes.
If we introduce such services in the future, we will update this privacy policy accordingly and, where required, obtain your consent before activating them.
14. Data Retention
We store personal data only for as long as it is required for the relevant purpose.
Data may be retained for longer where:
- statutory retention obligations apply,
- the data is required to fulfil a contract,
- outstanding payments remain due, or
- the data is required for the establishment, exercise or defence of legal claims.
Once the relevant purpose no longer applies and any statutory retention periods have expired, the data will be deleted.
15. Disclosure of Personal Data
Personal data is only disclosed where this is:
- necessary to fulfil your booking,
- required to issue and use the KÖNIGSCARD,
- necessary to comply with legal obligations,
- required for payment processing,
- carried out by a service provider processing data on our behalf, or
- based on your prior consent.
Your personal data will not otherwise be disclosed or sold.
16. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, you may contact us at any time:
Urlaubsnesterl – Renate and Hans Karletz
Jochbergstrasse 1
83671 Benediktbeuern
Germany
Email: dein@urlaubsnesterl.de
17. Right to Object to Processing Based on Legitimate Interests
Where we process personal data on the basis of a legitimate interest, you have the right to object to such processing at any time for reasons arising from your particular situation.
We will then no longer process the personal data concerned unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.
18. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The authority particularly responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Telephone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
You may also contact any other data protection supervisory authority responsible for you.
19. Automated Decision-Making and Profiling
We do not use exclusively automated decision-making or profiling.
20. Updates to this Privacy Policy
We may update this privacy policy if our website, the services we use or the applicable legal requirements change.
The version currently published on this website applies.
Last updated: October 2026