Privacy Policy
1. General Information
Protecting your personal data is very important to us.
Red Line Holiday Rentals processes personal data responsibly, transparently, and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the applicable data protection laws of the Federal Republic of Germany.
This Privacy Policy explains what personal data we collect when you visit our websites, submit an inquiry, or use our booking services, how and why we process such data, and what rights you have regarding your personal information.
This Privacy Policy applies to the websites and online services operated by Red Line Holiday Rentals, unless a separate privacy policy applies to a particular service.
2. Data Controller
The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Ferienwohnung Ferienhaus Kanaren | Red Line Holiday Rentals
An der Schmiede 35
48432 Rheine
Germany
Email: p.kutsch@ferienwohnung-ferienhaus-kanaren.de
The controller determines the purposes and means of processing personal data through our websites and online services.
3. Personal Data
Personal data means any information relating to an identified or identifiable natural person.
Depending on how you use our website and services, this may include, in particular:
- First and last name
- Postal address
- Email address
- Telephone number
- Booking and travel information
- Requested travel dates
- Number of travelers
- Information provided as part of an accommodation inquiry
- Communication and correspondence with us
- IP address
- Browser and device information
- Technical usage and log data
- Cookie and consent information
We process personal data only where there is a valid legal basis for doing so.
4. Legal Bases for Processing
Depending on the particular processing activity, we process personal data on one or more of the following legal bases:
Article 6(1)(a) GDPR – Consent
Where you have given us your consent to process personal data for a specific purpose.
Article 6(1)(b) GDPR – Contract and Pre-Contractual Measures
Where processing is necessary to respond to an accommodation or booking inquiry, prepare an offer, process a booking, or perform a contract.
Article 6(1)(c) GDPR – Legal Obligation
Where processing is necessary to comply with legal obligations.
Article 6(1)(f) GDPR – Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided that your interests, fundamental rights, and freedoms do not override those interests.
Where consent is required for storing information on, or accessing information from, your device, such processing is carried out only after the required consent has been obtained, unless the storage or access is strictly necessary to provide a service expressly requested by you.
5. Visiting Our Websites
When you visit our websites, certain technical information may automatically be transmitted by your browser to the server hosting our website.
This may include:
- IP address
- Date and time of access
- Requested page or file
- Referrer URL
- Browser type and version
- Operating system
- Device information
- HTTP status code
- Amount of data transferred
This information may be processed in server log files to ensure the secure, stable, and technically reliable operation of our websites.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our websites and the prevention and investigation of misuse or security incidents.
6. Cookies and Similar Technologies
Our websites use cookies and, where applicable, similar technologies.
Cookies are small data files stored on your device by your browser. They may be necessary for the technical operation of a website or may be used for analytics and other purposes.
Technically Necessary Cookies
Technically necessary cookies may be used without separate consent where they are required to provide functions or services expressly requested by the user.
These cookies may be necessary, for example, for:
- Website security
- Session management
- Booking functionality
- Saving technical preferences
- Cookie consent management
- Proper operation of forms and website functions
Optional Cookies and Technologies
Technologies that are not technically necessary, particularly analytics or marketing technologies, are activated only where legally required after you have provided your consent through the website’s consent management system.
You may withdraw your consent at any time with effect for the future through the cookie or privacy settings provided on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Consent Management
Where consent is required for analytics, external media, maps, or similar services, these services should only be activated after the corresponding consent has been provided.
Your consent decision may itself be stored in order to document and respect your privacy preferences.
You can change or withdraw your consent at any time through the privacy or cookie settings available on our website.
8. Booking Inquiries
You can use our website to submit inquiries regarding vacation homes, villas, apartments, and other vacation accommodations.
When you submit a booking inquiry, we process the information you provide in order to respond to your request, check availability, prepare an offer, communicate with you, and, where applicable, prepare a booking.
Depending on the inquiry, the information processed may include:
- Name
- Email address
- Telephone number
- Requested accommodation
- Travel dates
- Number and composition of travelers
- Special requests
- Message content
- Other information voluntarily provided by you
The legal basis for this processing is generally Article 6(1)(b) GDPR because the processing is necessary to take steps at your request prior to entering into a contract.
Where information is provided voluntarily and is not necessary for the requested service, processing may also be based on your consent or our legitimate interest in responding appropriately to your inquiry.
Please do not submit sensitive personal information through an inquiry form unless it is necessary for your request.
9. Booking System
Red Line Holiday Rentals uses its own booking system to process accommodation inquiries, booking requests, booking options, and reservations.
When you use the booking system, we process the information necessary to manage your inquiry or booking.
This may include:
- Customer and contact information
- Accommodation information
- Arrival and departure dates
- Number of guests
- Booking status
- Price and billing information
- Communication relating to the booking
- Information required to fulfill the accommodation contract
The legal basis for this processing is Article 6(1)(b) GDPR.
Where certain records must be retained to comply with tax, commercial, accounting, or other statutory requirements, the legal basis for such retention is Article 6(1)(c) GDPR.
10. Contact and Inquiry Forms
When you contact us through a contact form or booking inquiry form, the information you provide will be processed for the purpose of handling and responding to your request.
Depending on the nature of your request, processing is based on Article 6(1)(b) GDPR where the inquiry concerns a possible or existing contractual relationship.
For general inquiries that are not directly related to a contract, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is to respond efficiently to communications addressed to us.
11. Disclosure of Data to Accommodation Providers and Service Providers
Where necessary to process an inquiry or booking, we may forward relevant personal data to the respective accommodation provider, property owner, property manager, tour operator, or other service provider involved in fulfilling your requested booking.
Only information necessary for processing and fulfilling the relevant booking or service will be disclosed.
The legal basis is generally Article 6(1)(b) GDPR.
Personal data may also be disclosed where we are legally required to do so or where disclosure is necessary to establish, exercise, or defend legal claims.
12. Google Analytics 4
Subject to your consent, our websites may use Google Analytics 4, a web analytics service provided by Google.
Google Analytics enables us to obtain statistical information about how visitors use our websites. This helps us understand which pages and content are of particular interest and how our websites can be improved.
Depending on the configuration and your consent, information processed may include:
- Pages viewed
- Approximate geographic information
- Browser and device information
- Operating system
- Referrer information
- Interactions with website content
- Session information
- Technical identifiers
Google Analytics 4 is activated only after you have provided the required consent where such consent is legally required.
The legal basis for processing based on consent is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.
Google may process data on servers outside the European Economic Area, including in the United States. Where personal data is transferred internationally, the transfer must be based on an applicable legal transfer mechanism and appropriate safeguards.
Further information regarding Google’s processing of personal data can be found in Google’s privacy information.
13. Google Maps
Our websites may use Google Maps to display interactive maps and provide geographical information about accommodations, destinations, and other relevant locations.
When Google Maps is activated, information may be transmitted to Google. This may include your IP address, device and browser information, and information about your interaction with the map.
Where required by law, Google Maps is loaded only after you have provided your consent.
The legal basis is Article 6(1)(a) GDPR.
If you do not consent, the interactive Google Maps content may not be displayed. Other parts of the website should generally remain available.
You may withdraw your consent at any time with effect for the future through the website’s cookie or privacy settings.
Google may process data outside the European Economic Area, including in the United States. Appropriate legal safeguards must apply to any international transfer of personal data.
14. Meta / Facebook
Our websites may contain links to or integrations with services provided by Meta, including Facebook.
If Meta technologies that process user or device information are integrated into our websites for analytics, marketing, social media, or similar purposes, they are activated only after the legally required consent has been obtained.
Depending on the technology used, Meta may receive information such as:
- IP address
- Browser and device information
- Pages visited
- Interactions with website content
- Cookie or device identifiers
Where processing is based on your consent, the legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the cookie or privacy settings available on our website.
If our website merely contains a standard link to our Facebook presence and no Meta content or tracking technology is loaded before the link is clicked, no data is transmitted to Meta solely because the link is displayed.
When you leave our website and use Facebook or another Meta service, Meta’s own privacy terms and policies apply.
15. International Data Transfers
Some of the service providers used on our websites may be based outside the European Union or European Economic Area or may process personal data in third countries, including the United States.
Where personal data is transferred to a country outside the European Economic Area, we ensure, where required, that an appropriate legal basis for the transfer is available.
Depending on the recipient and destination country, this may include:
- An adequacy decision by the European Commission
- Participation in an applicable EU-approved data transfer framework
- Standard Contractual Clauses approved by the European Commission
- Other safeguards permitted under Articles 44 et seq. GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
16. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by applicable law.
Booking and contractual information may be retained for the duration of the contractual relationship and thereafter in accordance with applicable statutory retention requirements.
Inquiry data that does not result in a booking will be deleted when it is no longer required for handling the inquiry, unless legal obligations, legitimate interests, or another lawful basis require or permit longer retention.
Server log data is retained only for the period necessary to ensure website security and technical operation unless longer retention is required in connection with a security incident.
Where processing is based exclusively on consent, the relevant processing will cease when consent is withdrawn, unless another legal basis permits or requires continued processing.
17. Data Security
We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Our websites should use encrypted transmission via HTTPS/TLS to protect information transmitted between your browser and our servers.
However, no method of electronic transmission or storage can provide absolute security.
18. Your Rights Under the GDPR
Subject to the applicable statutory requirements, you have the following rights regarding your personal data:
Right of access – Article 15 GDPR
You have the right to request information about the personal data we process about you.
Right to rectification – Article 16 GDPR
You have the right to request correction of inaccurate or incomplete personal data.
Right to erasure – Article 17 GDPR
You may request deletion of your personal data where the applicable legal requirements are met.
Right to restriction of processing – Article 18 GDPR
You may request that processing of your personal data be restricted under certain circumstances.
Right to data portability – Article 20 GDPR
Where the statutory requirements are met, you may have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format or request its transfer to another controller.
Right to object – Article 21 GDPR
Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may have the right to object to the processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Right to withdraw consent – Article 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
19. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Article 77 GDPR.
You may generally contact the supervisory authority responsible for your place of residence, place of work, or the location of the alleged infringement.
You may also contact the data protection supervisory authority responsible for the controller.
20. Automated Decision-Making
Unless expressly stated otherwise in connection with a particular service, we do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.
21. External Links
Our websites may contain links to third-party websites.
When you follow an external link, you leave our area of responsibility. The respective third-party provider is responsible for the processing of personal data on its website.
We recommend reviewing the privacy policy of the respective provider before submitting personal information.
22. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy where necessary due to changes in legal requirements, our services, or the technologies used on our websites.
The version currently published on our website applies.
Last updated: August 2026
23. Contact Regarding Data Protection
If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise your rights under the GDPR, please contact:
Ferienwohnung Ferienhaus Kanaren | Red Line Holiday Rentals
An der Schmiede 35
48432 Rheine
Germany
Email: p.kutsch@ferienwohnung-ferienhaus-kanaren.de
24. Google reCAPTCHA
Our websites may use Google reCAPTCHA, a service provided by Google, to protect contact forms, booking inquiry forms, and other website functions against spam, automated submissions, and abusive activity.
reCAPTCHA is designed to determine whether information entered on our website is being submitted by a natural person or by an automated program or bot.
For this purpose, reCAPTCHA may analyze various technical and behavioral information. Depending on the configuration, this may include:
- IP address
- Browser and device information
- Operating system
- Referrer URL
- Date and duration of the website visit
- Mouse movements and keyboard interactions
- Cookies and similar identifiers
- Information regarding user interactions with the website
The information collected in connection with reCAPTCHA may be transmitted to Google and processed on Google’s servers.
Where legally required, Google reCAPTCHA will only be activated after you have provided the appropriate consent through our consent management system.
Where processing is based on your consent, the legal basis is Article 6(1)(a) GDPR.
Depending on the specific technical implementation, processing may also be necessary to protect our websites and online forms against spam, misuse, and automated attacks. In such cases, our legitimate interest is the security and integrity of our websites and communication systems, subject to the applicable legal requirements.
Google may process personal data outside the European Economic Area, including in the United States. Where personal data is transferred internationally, the transfer is subject to the applicable requirements of Articles 44 et seq. GDPR.
Further information about Google’s processing of personal data is available in Google’s privacy information.
25. YouTube
Our websites may contain videos embedded through YouTube, a video platform operated by Google.
Embedded YouTube videos allow us to provide visitors with multimedia content relating to vacation accommodations, destinations, travel information, activities, and other services.
When a YouTube video is loaded or played, information may be transmitted to Google and YouTube. Depending on your browser settings, device, Google account status, and the technical configuration of the embedded video, this information may include:
- IP address
- Browser and device information
- Operating system
- Pages visited
- Referrer information
- Date and time of access
- Information about the video viewed
- Interactions with the video
- Cookie or device identifiers
If you are logged into your Google or YouTube account while viewing an embedded video, Google may associate your interaction with your account.
Where required by law, YouTube content will not be loaded until you have provided your consent.
Instead, you may initially see a placeholder indicating that external YouTube content has been blocked for privacy reasons. The video will be loaded only after you provide the appropriate consent.
The legal basis for processing based on consent is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the cookie or privacy settings available on our website.
Google may process personal data outside the European Economic Area, including in the United States. Any such transfer is subject to the applicable requirements for international data transfers under Articles 44 et seq. GDPR.
Further information about Google’s processing of personal data is available in Google’s privacy information.
26. WhatsApp
We may offer you the option to contact Red Line Holiday Rentals via WhatsApp.
WhatsApp is a communication service provided by a company of the Meta group.
If you contact us through WhatsApp, the information you provide will be processed for the purpose of communicating with you and responding to your inquiry.
Depending on the content of your communication, this may include:
- Name
- Telephone number
- WhatsApp profile information
- Message content
- Images, documents, or other files you voluntarily send
- Booking and travel information
- Date and time of communication
If your WhatsApp communication concerns a booking inquiry, an existing booking, or other pre-contractual or contractual matters, the legal basis for processing is generally Article 6(1)(b) GDPR.
For general communication, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is to provide convenient and efficient communication channels for customers and prospective customers.
Where processing requires your consent, the legal basis is Article 6(1)(a) GDPR.
Please note that when you use WhatsApp, personal data may also be processed independently by WhatsApp or Meta. This processing is subject to the privacy policies and terms of the respective provider.
Depending on the service configuration, data may be processed outside the European Economic Area, including in the United States.
We recommend that you do not send particularly sensitive personal information through WhatsApp unless this is necessary for your inquiry.
Using WhatsApp to contact us is voluntary. You may alternatively contact us using the other communication methods provided on our website.
27. Newsletter
If you subscribe to our newsletter, we process the information required to send you news, travel inspiration, accommodation recommendations, special offers, destination information, and other information relating to Red Line Holiday Rentals and our services.
The information processed may include:
- Email address
- Name, where provided
- Date and time of registration
- Confirmation of registration
- Technical information required to document consent
- Newsletter preferences, where applicable
Newsletter subscriptions are voluntary.
Where required, we use a double opt-in procedure. After registering for the newsletter, you will receive an email asking you to confirm your subscription. Your subscription becomes active only after you complete this confirmation.
The double opt-in procedure helps us verify that the email address was submitted by its owner and enables us to document the consent provided.
The legal basis for sending our newsletter is your consent pursuant to Article 6(1)(a) GDPR.
Where applicable, information relating to the registration and confirmation process may also be retained on the basis of our legitimate interest in demonstrating compliance with applicable data protection requirements.
You may withdraw your consent and unsubscribe from the newsletter at any time with effect for the future.
You can unsubscribe by using the unsubscribe link provided in each newsletter or by contacting us using the contact information provided in this Privacy Policy.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
After you unsubscribe, your email address will no longer be used to send the newsletter. Information may, however, be retained where necessary to document a previous consent or where statutory retention requirements apply.
Newsletter Analytics
If our newsletter service includes technologies that allow us to measure newsletter openings, link clicks, or similar interactions, such tracking will only be used where permitted under applicable law and, where required, after you have provided the necessary consent.
Where newsletter analytics are based on consent, the legal basis is Article 6(1)(a) GDPR.
If no consent has been provided where consent is legally required, personalized newsletter tracking will not be performed.
28. Cookie Consent and Consent Management Tool
Our websites use a cookie consent and consent management tool to obtain, manage, document, and store your privacy preferences.
When you first visit our website, you may be presented with a consent banner that allows you to decide which optional cookies, external content, analytics technologies, and other services may be activated.
Technically necessary services may be activated without consent where they are strictly necessary for the operation of the website or to provide a service expressly requested by you.
Optional services, such as analytics, embedded external media, or other technologies requiring consent, are activated only after the appropriate consent has been provided.
The consent management tool may process information such as:
- Your consent or refusal
- Selected cookie categories
- Date and time of your consent decision
- Consent ID or similar identifier
- Website or domain
- Language settings
- Browser and device information
- Technical information required to document the consent decision
The purpose of this processing is to respect your privacy preferences and to demonstrate that legally required consent has been obtained.
The processing of consent information is based on Article 6(1)(c) GDPR where necessary to comply with legal obligations and, where applicable, Article 6(1)(f) GDPR based on our legitimate interest in efficiently managing and documenting privacy preferences.
Cookies or similar technologies that are strictly necessary to store your consent preferences may be used without separate consent where permitted under applicable law.
Changing or Withdrawing Your Consent
You may change your privacy preferences or withdraw consent previously provided at any time with effect for the future.
A link or button for Cookie Settings, Privacy Settings, or a comparable consent-management function should be available on our website.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent for a particular service, that service will no longer be activated on subsequent visits unless you provide consent again.
Please note that certain external content, such as Google Maps or YouTube videos, may not be displayed if you do not consent to the associated data processing.
