Last updated: 04.12.2025

This Privacy Policy explains how Elena Flat (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website elenaflat.de.

1. Data Controller

For the purposes of the GDPR, the Data Controller is:
[Your Company / Name of the Property Owner]
[Legal Address]
Email: grozman62@gmail.com

2. Information We Collect

2.1. Information Submitted via Contact Form

When you fill out our contact form, we collect the following personal data:

• Name

• Email address

• Message or inquiry details

This information is processed based on Article 6(1)(b) GDPR (performance of a contract / pre-contractual inquiries).

2.2. Booking and Payment Information via Smoobu

All booking-related data is processed directly through Smoobu GmbH, our booking and property management partner.

We do not store or have access to your payment details, ID documents, or sensitive booking data on our website.

Please refer to Smoobu’s GDPR-compliant Privacy Policy here: Smoobu Privacy Policy.

2.3. Automatically Collected Data (Server Logs & Cookies)

We may collect:

• IP address

• Browser type and device information

• Pages visited

• Time and date of visit

• Referring website

This data is used to ensure website security (Article 6(1)(f) GDPR – legitimate interest).

3. Cookies and Tracking Technologies

Our website uses cookies for functionality and analytics.

Under GDPR, users must be informed and have the ability to consent or decline non-essential cookies.

We use a cookie consent tool such as CookieYes.

4. Purpose of Processing

We process your data to:

• Respond to inquiries

• Provide booking-related services

• Improve website performance

• Ensure security

• Comply with legal obligations (Article 6(1)(c) GDPR)

5. Data Retention

• Contact form submissions: retained for 24 months or until your request for deletion

• Booking data (held by Smoobu): retained according to hotel/tourism law requirements in Germany

• Cookies: retained according to their technical lifetime

6. Data Sharing

We do not sell your data.
We only share data with trusted service providers:

• Smoobu GmbH (booking & payment processing)

• Website hosting provider (server logs)

• Email provider (for communication)

All partners operate under GDPR-compliant agreements (Data Processing Agreements).

7. Your GDPR Rights

As an EU resident, you have the right to:

• Access your personal data (Art. 15 GDPR)

• Rectify inaccurate data (Art. 16 GDPR)

• Request deletion (“right to be forgotten”) (Art. 17 GDPR)

• Restrict processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object to processing (Art. 21 GDPR)

• Withdraw consent at any time (Art. 7 GDPR)

To exercise these rights, email us at: grozman62@gmail.com

8. International Data Transfers

If any service provider processes data outside the EU, this is done only under:
Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Security

We use appropriate technical and organisational measures to protect your data.
However, no method of online transmission is fully secure.

10. Contact Information

For questions about this Privacy Policy or GDPR requests, contact:
[Your Company / Property Owner Name]
Email: grozman62@gmail.com
Address: [Your legal business address]