Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
A.J. Wirth Services UG (haftungsbeschränkt)
Managing Director: Andreas Wirth
Hauptstraße 28/1
74354 Besigheim
Germany
Email: info@besighomes.com
2. General Information
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), as well as this Privacy Policy.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, IP address, as well as booking, stay and payment data.
This Privacy Policy explains which personal data may be processed when you visit our website, contact us, make an enquiry or booking, or stay at BESIGHOMES.
3. Provision of the Website and Server Log Files
When you access our website, information transmitted by your browser may automatically be processed by the service provider responsible for the technical provision of the website.
This may include, in particular:
- IP address
- date and time of access
- page or file accessed
- referrer URL
- browser type and browser version
- operating system used
- amount of data transferred
- technical status information
This data is processed to ensure the technically correct and secure provision of the website and to ensure the stability and security of the systems used.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable and technically functional online service.
4. Smoobu – Website, Booking System and Reservation Management
For the provision and administration of our website as well as the management and processing of bookings and reservations, we use services provided by:
Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany
Smoobu provides us with technical functions for our website and for managing availability, booking enquiries, reservations and guest data.
Where Smoobu processes personal data on our behalf, such processing is carried out on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR.
In connection with an enquiry or booking, the following data in particular may be processed via Smoobu:
- first and last name
- address, where provided or required
- email address
- telephone number, where provided
- arrival and departure dates
- number of guests
- accommodation booked
- booking and contractual data
- communication data
- where applicable, billing and payment-related information
- other information voluntarily provided in connection with the booking
The data is processed in particular for handling booking enquiries, processing and managing reservations, communicating with our guests and fulfilling our contractual obligations.
The legal basis for this processing is Art. 6(1)(b) GDPR. Where legal obligations require further processing or retention, such processing is carried out on the basis of Art. 6(1)(c) GDPR.
Further information about data processing by Smoobu can be found in Smoobu's Privacy Policy: https://www.smoobu.com/en/privacy-policy/
5. Contact and Contact Form
If you contact us via the contact form on our website, by email, telephone or by other means, we process the information you provide in order to handle your enquiry and, where necessary, to respond to any follow-up questions.
The data processed may include in particular:
- name
- email address
- telephone number, where provided
- content of your message
- requested dates of stay, where provided
- other information voluntarily provided by you
If your enquiry relates to a potential booking or an existing stay, the processing is based on Art. 6(1)(b) GDPR for the purpose of taking steps prior to entering into a contract or performing a contract.
For other enquiries, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the appropriate handling and response to your enquiry.
6. Bookings and Reservations
If you submit a booking enquiry or make a booking through our website, we process the personal data required to process your booking and your stay.
The processing serves in particular:
- to process your enquiry,
- to conclude and perform the accommodation contract,
- to manage your reservation,
- to communicate with you before, during and after your stay,
- to issue invoices and process payments, and
- to comply with legal obligations.
The legal basis for this processing is Art. 6(1)(b) GDPR. Where we are legally required to process or retain certain information, the additional legal basis is Art. 6(1)(c) GDPR.
7. Payment Processing
Depending on the individual booking, various payment methods are available for paying for your stay.
Online Payments via Stripe
For processing online payments in connection with direct bookings, we use the payment service provider Stripe. Stripe is integrated into the Smoobu booking system we use via “Stripe Connect”.
If you select a payment method offered via Stripe, the personal data required to process the payment will be transmitted to and processed by Stripe.
This may include in particular:
- name and contact details
- booking and transaction data
- payment amount
- credit card or bank details
- other payment information depending on the payment method selected
- technical information required to process and secure the transaction
The data is processed for the purpose of carrying out and processing the payment initiated by you and, where applicable, for authentication, fraud prevention, refunds and handling payment disputes.
The legal basis for processing required for payment purposes is Art. 6(1)(b) GDPR.
Depending on the payment method selected, other payment service providers, banks, card networks or financial institutions may also be involved in processing the payment.
Stripe may also process personal data outside the European Economic Area in connection with its services. Where personal data is transferred to third countries, such transfers are made in accordance with the legal requirements of Art. 44 et seq. GDPR.
Further information about the processing of personal data by Stripe can be found in Stripe's Privacy Policy: https://stripe.com/en-de/privacy
On-Site Payments via SumUp
For payments made on site, we offer cash payments as well as cashless payment options via the payment service provider SumUp.
SumUp is used independently of our website and the Smoobu booking system to process payments on site.
When making a cashless payment via SumUp, the payment and transaction data required to process the payment will be processed. Depending on the payment method used, this may include in particular:
- payment amount
- card or payment information
- date and time of the transaction
- technical transaction data
- other information required to process the payment
The data is processed for the purpose of carrying out and processing the payment initiated by you.
The legal basis for the processing initiated by us is Art. 6(1)(b) GDPR.
Further information about the processing of personal data can be found in SumUp's Privacy Policy:
https://www.sumup.com/en-ie/privacy
Cash Payments on Site
If you pay in cash, no payment data will be transmitted to Stripe or SumUp for electronic payment processing.
Where the payment is documented for accounting, invoicing or tax purposes, the necessary booking and billing information will be processed and retained in accordance with applicable legal requirements.
8. Cookies and Technically Necessary Technologies
Our website may use cookies and comparable technologies. Cookies are small data files stored on your device or containing information required for certain website functions.
Technically necessary cookies may be used in particular to ensure the functionality and security of the website and the booking system.
Where the use of technically necessary technologies involves the processing of personal data, such processing is based on Art. 6(1)(f) GDPR or, where required for the processing of a booking, on Art. 6(1)(b) GDPR.
We currently do not use Google Analytics or any comparable proprietary analytics or marketing tracking system on this website.
9. Instagram
Our website contains an external link to our Instagram profile. Instagram content is not embedded in our website.
Simply displaying the link on our website does not cause Instagram content to be loaded. Only when you actively click on the Instagram link will you leave our website and be redirected to Instagram.
The privacy policy of the respective platform operator applies to any subsequent processing of personal data on Instagram.
Instagram is provided to users in the European Union by Meta Platforms Ireland Limited.
10. External Links
Our website may contain links to external websites. Merely visiting our website does not cause content from the external destination website to be loaded via such links. Only when you actively click on the link will you access the service offered by the respective external provider.
We have no influence on the nature and extent of data processing carried out on such external websites. The respective provider is responsible for data processing on its website.
This also applies, for example, to links to locations on Google Maps that we may send to you as part of individual communication by email. Google Maps is not embedded in our website.
11. Recipients of Personal Data
Personal data is generally only disclosed where this is necessary for the performance of a contract, where we are subject to a legal obligation, where another legal basis permits the disclosure, or where you have given your consent.
Depending on the processing activity, recipients may include in particular:
- Smoobu as our technical service provider and processor,
- Stripe for online payment processing,
- SumUp for cashless payments made on site,
- banks, card networks and other payment service providers involved in processing the selected payment method, where applicable,
- tax advisers and other professional advisers, where necessary,
- public authorities and other public bodies where disclosure is required by law.
Where a service provider processes personal data exclusively on our behalf, such processing is carried out on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR, where legally required.
12. Retention Period
We retain personal data only for as long as necessary for the respective processing purpose or for as long as statutory retention obligations apply.
Data relating to general enquiries will generally be deleted once the enquiry has been fully dealt with and there are no statutory requirements or legitimate reasons for further retention.
Data relating to bookings and contractual relationships will be retained for the duration of the contractual relationship and thereafter in accordance with applicable statutory retention obligations.
Different statutory retention periods apply depending on the type of document concerned under German commercial and tax law. Accounting vouchers are generally required to be retained for eight years. Certain other business records may be subject to statutory retention periods of six or ten years.
Once the applicable retention period has expired, the data will be deleted unless another legal basis permits or requires further retention.
13. Your Rights
Subject to the applicable statutory requirements, you have in particular the following rights:
- right of access to your personal data pursuant to Art. 15 GDPR,
- right to rectification of inaccurate data or completion of incomplete data pursuant to Art. 16 GDPR,
- right to erasure pursuant to Art. 17 GDPR,
- right to restriction of processing pursuant to Art. 18 GDPR,
- right to data portability pursuant to Art. 20 GDPR,
- right to object to processing pursuant to Art. 21 GDPR.
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future pursuant to Art. 7(3) GDPR.
The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.
To exercise your rights, you may contact us at any time:
14. Right to Object
Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, in accordance with Art. 21 GDPR, to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes.
15. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for our registered office is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg – LfDI Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart
Germany
Email: poststelle@lfdi.bwl.de
16. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unauthorised disclosure.
Our website uses an encrypted SSL/TLS connection. This protects data transmitted between your browser and our website during transmission.
17. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the services we use, the technical features of our website or applicable legal requirements change.
Last updated: September 2026
Language Notice
This English version of the Privacy Policy is provided for the convenience of our international guests.
In the event of any discrepancy, inconsistency or difference in interpretation between the German and English versions of this Privacy Policy, the German version shall prevail.