1. Controller

SB-Pension Berggasse, Berggasse 2, 09526 Olbernhau, Germany
E-Mail: pension.berggasse@gmail.com · Tel.: +49 (0)3736 0791135

2. Purposes & Legal Bases

We process personal data for the initiation and performance of accommodation contracts (Art. 6 para. 1 lit. b GDPR), for compliance with legal obligations (Art. 6 para. 1 lit. c GDPR; e.g. tax/record-keeping requirements), as well as on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR; e.g. IT security, fraud prevention).

3. Categories of Data

• Master data (name, address, contact details)
• Booking data (travel dates, room category, rate)
• Payment data (depending on the chosen payment method)
• Communication data (emails/requests)

4. Sources

Data is collected directly from you or via booking platforms (e.g. Booking.com, Airbnb) or channel manager/website builder (e.g. Smoobu), if you book through them.

5. Recipients / Processors

Where necessary, we transfer data to service providers (e.g. IT/hosting, channel manager/website builder [Smoobu], payment providers, cleaning service, tax advisor). Data processing agreements are in place with processors pursuant to Art. 28 GDPR.

6. Data Transfer to Third Countries

If providers outside the EU/EEA are used, data will only be transferred where an adequacy decision exists (Art. 45 GDPR) or appropriate safeguards are in place (Art. 46 GDPR), e.g. EU standard contractual clauses.

7. Storage Period

We process and store your data for the duration of contract performance and in accordance with statutory retention periods (usually 6–10 years for tax-relevant data).

8. Your Rights

• Right of access, rectification, erasure, restriction of processing
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory authority (e.g. Saxon Data Protection Commissioner)

9. Cookies & Tracking

If cookies/trackers are used on this website (e.g. statistics, maps, booking widgets), we will obtain your consent beforehand in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TTDSG (consent banner). Technically necessary cookies are set on the basis of Art. 6 para. 1 lit. f GDPR.

10. Security

We implement appropriate technical and organizational measures (TOM) to protect your data against loss, unauthorized access, or misuse (including encryption, access restrictions).

11. Contact Forms & Direct Booking

When using contact forms/direct booking, the information you provide will be processed for handling your request and booking. Mandatory fields are clearly marked.

12. Last Updated

Status: 09/2025. We reserve the right to update this statement if necessary.