Privacy policy

Controller

Server log data

When you access the website, technically necessary access data may be processed, including your IP address, the date and time of access, the file requested, browser and operating-system information, and the referrer. This processing is necessary to provide the website and ensure its stability and security.

Bookings

Online bookings process your name, email address, optional phone number, selected rental period, number of SUPs, selected extras, price information and optional notes. This data is required to check and save the booking, forward it by email, and allow it to be viewed or cancelled later using the booking number.

Contact form and email

When you use the contact form, your name, email address, optional phone number and message are processed. The data is sent to the operator by SMTP email in order to respond to your enquiry. It is not passed on for other purposes unless required by law.

OpenStreetMap

The home page embeds a map from OpenStreetMap to show our location. When the map loads, your browser connects to services provided by the OpenStreetMap Foundation. This may process information including your IP address, browser and device information, referrer, access time and requested content. The Leaflet map library used for presentation is also loaded from unpkg.com, which establishes an additional connection to that provider. For further details about OpenStreetMap, please see the OpenStreetMap Foundation privacy policy.

Cookies and the admin area

We do not use tracking of our own for public visitors. After a successful login to the admin area, a technically necessary session cookie is set so that the login remains active during the session.

Legal bases and retention period

Depending on the purpose, data is processed to take steps prior to entering into a contract or to perform a contract, respond to enquiries, comply with legal obligations, or on the basis of legitimate interests in providing a secure and functional website. Personal data is retained only for as long as required for its purpose or for any statutory retention period.

Your rights

Subject to the applicable legal requirements, data subjects have rights of access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with the competent data protection supervisory authority.