Privacy Policy
Data controller
Overview
We process personal data only where necessary to operate this regional portal. There are no booking forms or waitlists here — only information about trips and leisure.
Language preference
We store your chosen language in a cookie (bollenhut_locale, up to 10 years) so the site opens in the right language on your next visit. On your first visit we redirect based on your browser language. Legal basis: our legitimate interest in a user-friendly website (Art. 6 (1) (f) GDPR).
Hosting
This website is hosted on Cloudflare Pages. Technically necessary connection data (e.g. IP address, time, page requested) is processed to deliver and secure the site. Legal basis: our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). Details: Privacy at Cloudflare.
Website analytics
We use Cloudflare Web Analytics for reach measurement. No analytics cookies are set and no lasting user profiles are built. Page views and technical performance data may be collected. Legal basis: our legitimate interest in improving the website (Art. 6 (1) (f) GDPR). Details: Privacy at Cloudflare.
Google Maps
Discover cards may embed Google Maps preview images (Static Maps API). When loaded, data (e.g. IP address) may be transferred to Google Ireland Limited or Google LLC (USA). Legal basis: our legitimate interest in presenting destinations clearly (Art. 6 (1) (f) GDPR). Details: Privacy at Google.
Webcams
On the Webcams page we load snapshots via our own server (/api/webcam/…). The images still originate from the operators; our edge fetches them — your IP address is not sent to the operators’ servers. Legal basis: our legitimate interest in showing current weather and snow conditions (Art. 6 (1) (f) GDPR). The images are copyrighted; the original website remains the source.
Weather forecast
On the weather forecast page we load a forecast via our own server (/api/weather/forecast). The request to the weather service is server-side and cached — your IP address is not sent to the provider. Legal basis: our legitimate interest in a local weather overview (Art. 6 (1) (f) GDPR).
Events
On the events page we load dates via our own server (/api/events, /api/events.ics) from publicly available municipal and district calendars. Requests are server-side and cached — your IP address is not sent to the source servers. Legal basis: our legitimate interest in a regional events overview (Art. 6 (1) (f) GDPR).
Where to stay (link)
Links to accommodation on dasbollenhuthaus.de lead to a separate website with its own privacy policy — especially for bookings and guest contact. See Privacy at Das Bollenhuthaus.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Contact: . You may also lodge a complaint with the Baden-Württemberg Commissioner for Data Protection and Freedom of Information.