Privacy Policy

1. Responsible person

The controller within the meaning of the GDPR is:

Philipp Herrmann – DigElite digital agency
Kreuzstraße 16a, 49492 Westerkappeln, Germany
Telephone: +49 152 27950198 · Email: herrmann@digelite.de

For data protection inquiries, you can contact us using the contact details above.

2. General information, legal basis

We process personal data only on a valid legal basis.,
in particular:
- Article 6 paragraph 1 letter a — Consent,
- Article 6 paragraph 1 letter b — Contract/pre-contractual measures,
- Article 6 paragraph 1 letter c — legal obligation,
- Article 6 paragraph 1 letter f — legitimate interest.

We are mediation platformRental/booking contracts for accommodations
are exclusively between tenant and landlord (see
Booking conditions). We process the necessary data for the booking process.

3. Your rights

You have the right to Information (Art. 15), Correction (Art. 16),
deletion (Art. 17), restriction (Art. 18), Data portability
(Article 20) and Contradiction (Article 21). Granted Consent Can you
This right may be revoked at any time with effect for the future (Art. 7 para. 3).

Right to object (Art. 21): Insofar as we process data on the basis of legitimate interests
You may process your interests based on your particular situation.
contradict.

There is a Right to lodge a complaint with a supervisory authority (Art. 77). The for
Our responsible supervisory authority is the State Commissioner for Data Protection and
Freedom of Information North Rhine-Westphalia (LDI NRW).

To exercise your rights, simply send a message to the address listed under point 1.
Contact details. You can also manage your account details in your user account; to
To delete your account, simply send us a message.

4. Provision of the website & server log files

When you access the website, we process technically transmitted data.
(IP address, date/time, accessed resource, referrer, user agent) to
Delivery, stability and security. Legal basis: Art. 6 para. 1 lit. f.
Server logs are deleted or anonymized as soon as they are needed for the aforementioned purposes.
purposes are no longer required. The transmission is encrypted.
(TLS/HTTPS).

5. Hosting

The website is hosted by a service provider with servers in Germany
operated. A data processing agreement exists (Art. 28 GDPR). A
Transfer to a third country takes place during hosting. not instead of.

6. Cookies & Consent Management (§ 25 TDDDG)

We use technically necessary cookies (e.g. for registration/session and for
(Storage of your cookie decision) based on Section 25 Paragraph 2 TDDDG without
Give your consent. Do not set non-essential services (e.g., external map tiles).
we only after your consent via our consent tool. Your selection
You can change your cookie settings at any time. Details and the
You can find a list of trackers in our cookie policy.

7. User account / Registration

For certain functions (ratings, classifieds, advertisements, booking/
(Provider dashboard) requires a user account. We process the following data:
specified master data (e.g. name, email, password as hash, profile information).
Legal basis: Art. 6 para. 1 lit. b (user agreement) or lit. a. The data
Data will be stored until the account is deleted; statutory retention periods apply.
Obligations remain unaffected.

8. Booking requests & mediation

When you submit a booking request, we process the data required for this purpose.
(e.g., name, contact details, travel dates, message) and provide the information for
Transmission of the required data to the respective Landlord further, so that
This entity can conclude/process the contract with you. Legal basis:
Article 6 paragraph 1 letter b. Disclosure to other third parties only occurs to the extent necessary for
the mediation is necessary or legally required.

9. Listings / Provider Dashboard

Providers (property management companies or private landlords) process data when listing
Advertisements include property and contact information, as well as any images. This content will
Published; we process master/billing data for contract processing.
(Art. 6 para. 1 lit. b). An editorial review takes place before publication.

10. Shop, Order, Payment & Invoice (Subscription/Advertising Packages)

For paid services (e.g., advertising/subscription packages), we process
Order, invoice and payment data via WooCommerce and Germanized
for WooCommerce. Payment processing depends on the chosen payment method.
via a payment service provider; the funds required for payment are used for this purpose.
The necessary data is transmitted to this party. Legal basis: Art. 6 para. 1
lit. b and lit. c (tax/commercial law obligations). Invoice/
Booking data We maintain this due to legal obligations. 10 years on
(§ 147 AO, § 257 HGB).

11. Classified ads

To post classified ads, a Registration is mandatory., since
We need to know the identity of the person posting the job. We process account and
Ad data; ads are editorially reviewed before publication.
Legal basis: Art. 6 para. 1 lit. b/f.

12. User-generated content (places, events, experiences)

Submit content (e.g., locations, events, testimonials,
(Images) are processed and published after editorial review.
Legal basis: Art. 6 para. 1 lit. a/f. Image uploads: Please only download
Upload images to which you own the rights; respect privacy rights.
of people pictured. Please remove any unnecessary images before uploading.
Metadata (e.g. EXIF/geodata) if you do not wish to have it published.

13. Reviews

Reviews can only be viewed registered, logged in Users submit; they will
Verified before publication. Details regarding authenticity can be found on the page.
„Authenticity of reviews”. Legal basis: Art. 6 para. 1 lit. a/f.

14. Contact & Messages (Inbox)

When you contact us (via form, email, or internal mailbox), we process your data.
Information on processing the request or on communication between users and
Landlords. Legal basis: Art. 6 para. 1 lit. b/f. Deletion after completion.,
unless there are retention obligations.

15. Maps (OpenStreetMap)

On map pages, we bind map tiles from OpenStreetMap (OpenStreetMap
Foundation). When loading the map, your IP address an OSM
transmitted. The map will only be loaded after your consent.
We host our map library (Leaflet) ourselves (no third-party access). Legal basis:
Article 6 paragraph 1 letter a.

16. Chatbot (Flowise)

We are implementing a chatbot based on Flowise one. Your entries in the chat
Your data will be processed to answer your inquiry. Please do not provide sensitive information.
personal data is entered into the chat. Legal basis: Art. 6 para. 1 lit. a/f.

17. Sending emails

We use [method/service name] for sending notification and system emails. WP Mail
SMTP via a shipping service provider. Legal basis: Art. 6 para. 1 lit. b/f;
AVV according to Art. 28.

18. Data backup (backups)

For redundancy, we create backups with UpdraftPlus. The backups
They are stored with access protection. Legal basis: Art. 6 para. 1 lit. f.

19. Safety

To defend against attacks and abuse, we use All-in-One WP Security
one; this includes processing IP addresses and login events (Art. 6)
Paragraph 1 letter f). The data will be deleted as soon as it is no longer needed for security purposes.
are no longer required.

20. Search Engine Optimization

We use Yoast SEO for technical optimization. A transfer
Personal data is not regularly transferred to third parties as a result.

21. Fonts

Fonts used to display the website are, where possible, provided by our
delivered to our own servers.

22nd Newsletter

If we offer a newsletter, it will only be sent with your consent.
Consent via double opt-in procedure (Art. 6 para. 1 lit. a, § 7 UWG). We
The registration is logged; you can unsubscribe at any time via the
Unsubscribe link available.

22a. Kampagnen-Tracking im Partner-Outreach

Im Rahmen unserer Partneransprache (Partner-CRM) verwenden wir pseudonyme
Link-Weiterleitungen (/?nztrack=…), um auszuwerten, ob ein versendeter Link
angeklickt bzw. eine zugehörige Seite besucht wurde. Dabei wird serverseitig
Datum, Uhrzeit und die Tatsache des Klicks pseudonym gespeichert; ein Rückschluss
auf die kontaktierte Person ist nur über unsere interne CRM-Zuordnung möglich.

• Zweck: Erfolgsmessung der Partneransprache; Fortschreibung des
  Kontaktstatus im CRM.
• Legal basis: Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an
  der Erfolgsmessung eigener Geschäftsanbahnung gegenüber gewerblichen
  Empfängern).
• Kein Drittanbieter: Die Verarbeitung erfolgt ausschließlich auf unserem
  eigenen Server in Deutschland.
• Speicherdauer: Tracking-Ereignisse werden nach 12 Monaten seit dem
  letzten Kontakt-Ereignis anonymisiert oder gelöscht; bei Widerspruch sofort.
• Widerspruch: Sie können der Auswertung jederzeit über den Abmelde-Link in
  der jeweiligen E-Mail oder per Nachricht an herrmann@digelite.de widersprechen.

Wir setzen kein Öffnungs-Pixel in E-Mails ein.

23. Transfers to third countries

Insofar as services transfer data to a third country (outside the EU/EEA), they rely on
We base this on suitable guarantees in accordance with Articles 44 et seq. (e.g., EU Standard Contractual Clauses)
Clauses (possibly Data Privacy Framework). Which services are affected in each individual case.
are as follows from the preceding sections; hosting takes place in
Germany (no transfer).

24. No automated decision-making

A fully automated decision-making process, including profiling
The process with legal effect (Art. 22) does not take place.

25. Storage duration

We only store personal data for as long as is necessary for the respective purposes.
purposes are required or statutory retention periods exist
(especially 10 years for invoices/accounting documents). After that, the data will be deleted.
or anonymized.

26. Status & Changes

We will adapt this privacy policy if the legal situation or
Processing changes. Last updated: June 2026.