Privacy Policy

PRIVACY AT A GLANCE

This section explains which personal data is processed when you use our website or make enquiries about Villa Noho. Personal data is any information relating to an identified or identifiable person. You can visit our website without providing your name. However, technical connection data is collected as soon as you access the website.

​

1. DATA CONTROLLER AND CONTACT DETAILS

The controller responsible for processing your personal data is:

Martin Matthaes

Uferstraße 27 88149 Nonnenhorn · Germany

Phone: +49 173 5853707

Email: info@villanoho.de

 

2. WEBSITE, HOSTING AND SECURITY

This website is provided through Wix. Wix and its service providers process technical data, in particular IP addresses, browser and device information, pages visited, access times and connection details. This enables the website to be delivered, errors to be detected and misuse to be prevented.

The legal basis for the secure and reliable operation of the website is Article 6(1)(f) GDPR. Our legitimate interest is to provide a functional and secure online service. Where processing is necessary to manage a booking, Article 6(1)(b) GDPR applies.

Wix uses affiliated companies and subcontractors worldwide. Personal data may therefore also be processed outside the European Union (EU) and the European Economic Area (EEA). Where data is transferred internationally, the applicable safeguards under Articles 44 et seq. GDPR may apply, in particular adequacy decisions or the European Commission's Standard Contractual Clauses.

Further information about data processing and the service providers involved can be found in the Wix Privacy Policy and Wix's list of subprocessors.

The website is provided via an encrypted HTTPS connection.

 

3. COOKIES AND SIMILAR TECHNOLOGIES

Cookies and similar technologies may be used on this website. These technologies store information on your device or access information already stored on it. Session cookies remain active for the duration of a session; other cookies remain stored until they expire or are deleted by you.

The exemption under Section 25(2), No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies to storage and access operations that are strictly necessary to provide a digital service expressly requested by you. Where personal data is processed in this context, the legal basis is, in particular, Article 6(1)(f) GDPR or, for contractual services, Article 6(1)(b) GDPR.

For storage or access operations that are not technically necessary, your consent is generally required under Section 25(1) TDDDG. Any subsequent processing of personal data is based on Article 6(1)(a) GDPR, insofar as it is covered by your consent. You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

​​

4. ENQUIRIES, PRICE CALCULATOR AND BOOKINGS

When you contact us by email, telephone or through an online input function, we process your contact details and the content of your enquiry. To prepare offers and manage bookings, we require, in particular, information about your travel dates, the number of guests, and the contact and booking details necessary to fulfil the contract.

Where your enquiry relates to a potential booking or an existing contract, the legal basis is Article 6(1)(b) GDPR. We process other enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest is to ensure reliable communication with prospective and existing guests. Processing required by law is carried out in accordance with Article 6(1)(c) GDPR.

Contacting us is voluntary. Without the information required in each case, we may not be able to respond to your enquiry or process a booking. Data is shared with the service providers we use only to the extent necessary for the respective purpose and permitted by law.

 

5. CHAT ON THE WEBSITE

The website includes a chat function provided by Wix, which may also offer automated or AI-assisted responses. When you use the chat, your messages, any contact details you voluntarily provide, and technical connection data are processed to answer your questions and enable the conversation.

For enquiries relating to bookings, the legal basis is Article 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in providing accessible and efficient communication with guests, pursuant to Article 6(1)(f) GDPR. Where consent is required for additional functions, Article 6(1)(a) GDPR applies.

Please do not share sensitive information in the chat unless it is necessary for your enquiry. The information provided in Section 2 also applies to data processing by Wix.

 

6. GOOGLE ANALYTICS AND TAG MANAGER

Google Analytics and Google Tag Manager are integrated into this website. The service provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to analyse website usage statistics. In this context, data such as page views, interactions, session data, device and browser characteristics, approximate location information and identifiers may be processed.

Google Tag Manager manages the tags integrated into the website. Any further data processing depends on the services activated by these tags. Simply shortening an IP address or not storing it does not mean that all usage data is anonymous.

For analytics activities requiring consent, the legal basis is Article 6(1)(a) GDPR. Where such activities involve accessing information on users' devices, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies. Data may be transferred to Google companies and service providers outside the European Union, particularly in the United States. Such transfers are subject to the applicable legal grounds and safeguards under Articles 44 et seq. GDPR.

Further information is available in Google's Privacy Policy. 

​

7. TWIPLA AND VISITOR COUNTER

The website uses TWIPLA, formerly known as Visitor Analytics. The service provider is Visitor Analytics GmbH, Siemensstraße 20, 85521 Ottobrunn, Germany. This service is used to measure website traffic and analyse website usage.

In addition, a visitor counter provided by POWR is integrated into the website. When the external widget loads, data such as your IP address, browser information and access time may be transmitted to POWR and its service providers. The counter is used to display visitor numbers.

 

8. TREE-NATION

We integrate Tree-Nation widgets to display the number of trees planted and our contribution to climate protection. The service provider is Neovee Solutions S.L., Calle Álaba 100, 08018 Barcelona, Spain. When the widgets are loaded, a connection to Tree-Nation is established. Technical connection data, particularly IP addresses and browser information, may be processed in this context.

Displaying our environmental commitment constitutes our legitimate interest under Article 6(1)(f) GDPR, insofar as this processing can be based on that legal ground. For additional processing activities or access to information on users' devices requiring consent, Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) apply.

Further information: Tree-Nation Privacy Policy.

​

9. EXTERNAL LINKS AND GOOGLE MAPS

The directions links and the linked photo in the footer lead to Google Maps. When you click on these links, you leave our website or open an external service. Any data processing carried out there is governed by Google's Privacy Policy. The linked photo itself is not an embedded interactive Google Map.

The same applies to links to Instagram, Facebook, YouTube and other external services. An external link must be distinguished from a directly embedded service: embedded content may transmit data to third parties as soon as it is loaded.

 

10. DATA RETENTION PERIOD

We retain personal data only for as long as necessary to fulfil the respective purpose of processing or to comply with legal obligations. Enquiries are deleted once they have been fully processed, unless further contractual procedures, statutory retention requirements or legitimate legal claims require longer storage. Contractual and accounting documents are subject, in particular, to the applicable commercial and tax law requirements.

For technical data and external services, retention periods also depend on the functionality, respective configuration, contractual provisions and legal requirements. You can obtain information about the personal data relating to you and the applicable retention periods by contacting us using the contact details provided above.

 

11. YOUR RIGHTS

Subject to the applicable legal requirements, you have the right to request access to your personal data, the correction of inaccurate information, the erasure of your data or the restriction of its processing. You also have the right to data portability where the legal requirements are met. You may withdraw any consent you have given at any time with effect for the future.

Right to object to processing based on legitimate interests: If processing is based on Article 6(1)(f) GDPR, you may object to it on grounds relating to your particular situation. We will then cease processing your data unless there are compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary for the establishment, exercise or defence of legal claims. You may object to the processing of your personal data for direct marketing purposes at any time, without giving reasons. This also applies to profiling related to such direct marketing.

You have the right to lodge a complaint with a data protection supervisory authority. For private-sector organisations in Bavaria, the competent authority is, in particular, the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht – BayLDA), Promenade 18, 91522 Ansbach, Germany. You may also contact another competent supervisory authority.

​

12. UPDATES

This Privacy Policy applies to the Villa Noho website. It will be updated if our services or applicable legal requirements change.

Last updated: 18 October 2026.