How we handle your data – openly and as sparingly as possible.
Please note: This is a courtesy translation. Only the German version is legally binding.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR, DSGVO) is:
Daniyar Shintassov
Wohnungen an der Uniklinik (Apartments an der Uniklinik)
Friedrich-Ebert-Platz 2
79106 Freiburg im Breisgau, Germany
E-mail: info@rentapartment-freiburg.com
We have not appointed a data protection officer, as there is no legal obligation to do so.
This website is purely informational and does not store any form entries. Without your consent it sets no cookies – the only thing stored is your choice in the cookie banner. Only if you choose “Accept all” in the banner do we use Google Analytics 4 and Google Ads conversion tracking (see section 10). Personal data are also processed where this is technically necessary to run the website, when you contact us, or when you use content or services from third-party providers (e.g. the map, online booking). Each type of processing is explained below.
We process personal data on the basis of Art. 6(1) GDPR, in particular:
This website is hosted by: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
When you visit the website, the web server automatically records information transmitted by your browser in so-called server log files: IP address, date and time of access, page/file requested, amount of data transferred, referrer URL, browser type and version, and operating system. These data are technically necessary to display the website and to ensure its stability and security (Art. 6(1)(f) GDPR). They are not combined with other data sources. IP addresses are stored in the log files only in shortened form: the last two blocks are removed (e.g. 11.22.33.44 → 11.22.0.0). The log files are automatically deleted after 7 days.
A data processing agreement in accordance with Art. 28 GDPR is in place with the host.
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar.
For a consistent appearance, we use the fonts “Inter” and “Merriweather” (on the Arabic version additionally “Noto Sans Arabic” and “Noto Naskh Arabic”) from the Google Fonts library. The fonts are stored locally on our web server and are loaded from there when you open a page. No connection to Google servers is established; no data is transmitted to Google and no cookies are set.
Retrieving the font files only generates the server log files with our host described in section 4. The legal basis is Art. 6(1)(f) GDPR (consistent, easily readable presentation). The fonts are licensed under the SIL Open Font License.
On our contact page you can display a Google Maps map (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is not loaded automatically (2-click solution): at first you only see a placeholder, and no data is transmitted to Google before you click. Only when you click “Load map” is the map loaded from Google servers. In the process, data such as your IP address, date/time and the page visited are transmitted to Google; Google may set cookies and also process the data in the USA. We have no influence on this processing.
We use Google Maps to show you clearly where we are and how to get here. The legal basis is your consent, which you give by clicking “Load map” (Art. 6(1)(a) GDPR and § 25(1) TDDDG); it applies only to the current page view and is not stored. The link “Open in Google Maps” takes you directly to Google Maps, where Google’s privacy policy applies. Google LLC is certified under the EU-US Data Privacy Framework. Details: policies.google.com/privacy.
If you write to us by e-mail, we process the data you provide (e.g. name, e-mail address, travel dates, message) in order to answer your enquiry. The contact form on this website does not transmit any data to our server: when you submit it, it simply opens your own e-mail program with a pre-filled message, which you send yourself.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a booking, otherwise Art. 6(1)(f) GDPR. We use Gmail (Google Ireland Limited) for our mailbox, so e-mails are stored on Google servers. We delete enquiries once they have been dealt with, unless statutory retention obligations require otherwise.
Our booking buttons take you to the booking page booking.roomraccoon.de. It is operated by RoomRaccoon B.V., Keizerstraat 15, 4811 HL Breda, Netherlands, which acts as our hotel software and booking service provider. When you book, it processes in particular your name, contact details, address, travel dates, number of guests, payment information and, where applicable, the details required for guest registration.
Payment data: Online payments in the RoomRaccoon booking engine are processed via RaccoonPay, powered by Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands. You enter your card details directly with this payment service provider; they remain with that provider. We ourselves do not receive or store any payment card data – we only receive the payout of the booking amount. The respective provider is responsible for processing the payment data; we have no access to full card details.
Where RoomRaccoon processes booking data on our behalf, this is done on the basis of a data processing agreement (Art. 28 GDPR). RoomRaccoon is itself responsible for the technical operation of the booking page; RoomRaccoon’s privacy policy, available on the booking page, also applies. Legal bases: Art. 6(1)(b) GDPR (booking) and Art. 6(1)(c) GDPR (guest registration requirement, tax record-keeping).
On your first visit, a banner asks whether you allow analytics and advertising cookies (“Accept all”) or only want to use the technically necessary functions (“Necessary only”). We store your choice in your browser’s local storage (entry fewo_consent: choice and time) so that the banner does not appear on every page; after 12 months we ask again. This storage is technically necessary (§ 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). You can change your choice at any time via the “Cookie settings” link in the footer of every page.
The Google tag (gtag.js) is loaded when you open a page, but without your consent it sets no cookies and stores no identifiers on your device (Google Consent Mode v2, “advanced mode”). Until you choose “Accept all”, the tag only sends cookieless signals without a user identifier to Google (e.g. page visited, time, browser and device type, consent status, where applicable the ad-click identifier). Google uses these signals to model visits and bookings statistically; they are not linked to you as a person and no cross-site tracking takes place. The legal basis is our legitimate interest in measuring the success of our advertising (Art. 6(1)(f) GDPR). Cookies are only set after “Accept all”. We pass your consent choice (analytics_storage, ad_storage, ad_user_data, ad_personalization) to Google via Consent Mode v2.
With your consent, we use Google Analytics 4 (measurement ID G-24M70HF3PT) on this website and on the booking page. We use it to analyse how our pages are used (e.g. pages viewed, time spent, clicks on “Book now”, completed bookings, approximate location, device/browser). Google Analytics 4 does not store IP addresses. So that a visit that starts here and ends on booking.roomraccoon.de is recognised as one visit, we use cross-domain measurement: links to the booking page then carry an additional parameter (_gl). Cookies: _ga and _ga_24M70HF3PT (lifetime up to 2 years).
We advertise with Google Ads (tag ID AW-971800995). With your consent, we measure whether visitors who arrive via one of our ads go on to book: after a completed booking, a conversion (booking value, currency, booking number) is sent to Google from the confirmation page. This lets us measure how well our ads perform. Cookie: _gcl_au (lifetime 90 days); Google may also use its own cookies on Google domains.
The provider of both services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Processing only takes place with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page (choose “Necessary only”); this website’s Google cookies are then deleted. On the booking page, its own cookie settings also apply. More information: How Google uses information from sites that use its services, Google Privacy Policy, Google ad settings.
If you book via portals such as Booking.com or Airbnb, the respective portal operator is itself responsible for data processing on its platform. We receive from the portal the data required to carry out your stay (Art. 6(1)(b) and (c) GDPR).
Payment is handled by the respective portal (e.g. Booking.com, Airbnb, Agoda): you enter your card details directly there, and they remain with the portal or its payment service provider. We do not receive or store any payment card data; the portal simply transfers the payment amount to us, usually after your departure. The respective provider is responsible for processing the payment data; we have no access to full card details.
We only store personal data for as long as necessary for the respective purpose. We keep booking and invoice data in line with the statutory retention periods (in particular § 147 AO, § 257 HGB). Under § 30(4) of the Federal Registration Act (Bundesmeldegesetz), registration data are kept for one year from the day of departure and destroyed within three months thereafter. Enquiries that do not lead to a booking are deleted once they have been dealt with.
Your data are only passed on to third parties where this is necessary to perform the contract (e.g. to our cleaning team, booking and payment service providers), where we are legally obliged to do so (e.g. to authorities), or where this is expressly provided for in our terms & conditions (e.g. § 4.4 and § 8.4 of the terms).
You have the right at any time to:
An informal message to info@rentapartment-freiburg.com is all it takes.
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
We update this privacy policy when the website or the legal requirements change. The version published here applies. You can also find information on cookies in our cookie policy.
Last updated: October 2026