Privacy Policy
We take the protection of your personal data seriously and treat your personal data confidentially in accordance with the EU General Data Protection Regulation (GDPR) and this privacy policy.
1. Data controller
stayFritz GmbH
Seestraße 9a
83727 Schliersee
Germany
Phone: +49 8026 9264100
Email: thomas.langenberg@stayfritz.com
2. Hosting and EU data residency
This website and the associated application are hosted in a German data centre (Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany; DPA in place; Nürnberg location). All processing of personal data takes place exclusively within the EU.
3. Collection of general data and information
When you visit this site, your browser automatically transmits information to our server. This information is temporarily stored in a log file. The following data is collected and stored until automated deletion:
- IP address of the requesting computer (anonymised after 7 days)
- Date and time of access
- Name and URL of the retrieved file
- Website from which access was made (referrer URL)
- Browser used and operating system
Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in functionality, security and error analysis). Logs are deleted after 14 days.
4. Cookies
This marketing page sets no tracking cookies, no analytics, no pixel tracking. Only strictly necessary cookies are used (legal basis: § 25 (2) no. 2 TTDSG):
- session / fc_user — set exclusively when you log in to the internal dashboard at /login. They contain no plaintext personal data and are deleted on logout.
5. Contact via email
When you contact us by email, your request including your contact data is stored for the purpose of processing and for follow-up questions. We do not pass on this data without your consent. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR. We delete the data as soon as it is no longer required, at the latest after statutory retention periods have expired.
6. Recipients and data processors
We only share personal data with processors with whom we have a contract under Art. 28 GDPR. Current processors:
- Hetzner Online GmbH (hosting, Nürnberg)
- Cloudflare Inc. (CDN / DDoS protection, EU configuration)
7. Your rights
Under the GDPR you have the right to:
- Access to your data we hold (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
To exercise these rights or for any data protection questions, please contact thomas.langenberg@stayfritz.com.
8. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. Competent for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from "http://" to "https://".