Privacy Policy

General information

This privacy policy describes how Winter+Winter GmbH protects and uses all information provided via

Winter+Winter GmbH takes the protection of user privacy seriously. Should ask you (the user) to provide certain identifying information when using this website, please be assured that it will only be used in accordance with this privacy statement.

Please read the following information carefully to understand our views and practices regarding personal data and how we will process it.

Our website,, may contain links to other websites of interest. Note that we have no control over your data use on these websites once you leave our website via these links. Therefore, Winter+Winter GmbH cannot be held responsible for the protection and security of any information which you provide whilst visiting such websites. These are not covered by this privacy policy. Please be careful and consult the data protection declarations of the websites concerned.

Winter+Winter GmbH reserves the right to pass on information and data if requested by the authorities, police or other authorities.

Type and extent of data processing

On the website of Winter+Winter GmbH, data about you or data that can be used to determine your identity may be collected and processed.
- Your IP address and browser information are collected so that the website can be displayed at all; we access this data to improve our website.
- Winter+Winter GmbH reserves the right to view your browsing history, length of stay on pages and interaction activities on and, if necessary, to retrieve information on error messages in order to improve your user experience. When you enter the site, you can use cookies to restrict these rights.
- When you contact us with enquiries or bookings, we also process your name and e-mail address and, if applicable, your address. This data is then used to contact you or for the rental. The data is essential for the aforementioned actions in order to provide the desired service.
- Your data will be stored and used after you have given your consent in order to improve the user experience and to reuse the data on future visits.

Recipients of personal data

Winter+Winter GmbH, you, and some third-party providers with whom we work have access to your personal data. Third-party companies provide services for Winter+Winter GmbH to ensure the functionality of the website and the services offered. We will only pass on your data within the framework of the statutory provisions.
The following third-party providers may have access to your data:
Lodgify is our booking agent and has access to your booking data, including your name and address if applicable. The data may only be used for display purposes and cannot be stored for internal use by Lodgify. Payments are processed by a third-party provider through Lodgify, and the data is not temporarily stored.
Bookings are also processed through and Airbnb, which also have access to your booking data and name. The privacy policies for and Airbnb can be found at and, respectively.
Please note that when using the map on our website for directions, Google may have access to your IP address and location, depending on your settings.
Additionally, some personal data may be stored in or transferred to countries outside the EU. Your data may also be processed by Winter+Winter GmbH staff or our business partners and service providers located outside the EU. By using our services, you acknowledge and agree that your data may be transferred, stored, and processed outside your country of residence. will take all reasonable steps to ensure the security of your data. may disclose personal information if required by law or to protect our rights, the safety of our users or others, investigate fraud, or respond to a government request.

Data security

At Winter+Winter GmbH, we attach great importance to the protection of our guests' personal data and have therefore taken technical and organizational measures to ensure that your data is safe and secure. We use the following security measures to prevent the loss, misuse or alteration of personal data. These include:

  • The use of secure servers and firewalls
  • The use of encryption technologies (SSL encryption of the website)
  • Limited access to personal data only for authorized employees who need this data to provide services
  • Cooperation only with partners who act in compliance with the DSGVO

Data storage

In principle, the data is only stored for the respective processing purpose for as long as is absolutely necessary and then deleted immediately, unless there is consent to the contrary. If you make a booking via the website, personal data will be stored for as long as the contractual relationship exists and deleted after the expiry of the limitation period. In all other cases, after consent, the personal data provided will be retained for as long as the user has not requested the deletion of the data. The data will be used in accordance with legal, tax and accounting standards and will be kept for the established legal period of 10 years.

Rights of the data subject

Every user has the following rights in relation to their data:

  • The right of consent: The user has the right to insist on consenting in advance to the processing of personal data. In addition, there is the right to request confirmation from Winter+Winter GmbH at any time as to whether and how the personal data has been used. If a data subject wishes to exercise this right, they can contact our data protection officer (see below) at any time.
  • The right of access: The right to receive free information from the controller at any time about the personal data stored and a copy of this information.
  • The right to rectification: The right to obtain from the controller without undue delay the rectification of personal data concerning him or her.
  • The right to erasure: The right to obtain from the controller the erasure of personal data concerning him or her without undue delay. Winter+Winter GmbH has the obligation to erase personal data without undue delay if the data is no longer necessary and one of the reasons applies:
  1. The personal data are no longer necessary for the purposes for which they were collected.
  2. The data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing.
  3. The data subject objects to the processing in accordance with the GDPR.
  4. The personal data has been processed unlawfully.
  5. The personal data must be erased for compliance with a legal obligation.
  6. The personal data have been collected in relation to information society services offered in accordance with the GDPR
  7. Right to restriction: The data subject has the right to obtain from the controller restriction of processing where one of the following applies
  8. The accuracy of the personal data is contested by the data subject
  9. the processing is unlawful, but the data subject opposes the erasure of the personal data and requests the restriction of their use instead
  10. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject
  11. The data subject has lodged an objection to the processing in accordance with the GDPR, but the judgment is still pending
  • Right to data portability: The data subject may request to receive the personal data in a structured, commonly used and machine-readable format in order to transmit it to another company. They may also request that the data be transferred directly from the controller of Winter+Winter Gmbh to the other company if this is technically feasible and does not affect other persons.
  • Right to object: The data subject may object at any time to the processing of their personal data based on the DSGVO. This also applies to profiling of the person.
  • Right to withdraw consent: The data subject may withdraw their consent to the processing of their personal data at any time. If the data subject wishes to exercise one of the aforementioned rights, they can contact Winter+Winter GmbH directly at any time and send the corresponding request to the following addresses

Winter+Winter GmbH
Fraunhoferstraße 20, 88131 Lindau, Germany

Every data subject has the right to lodge a complaint with the competent data protection authority.

Validity and changes

Winter+Winter GmbH has the right to change the data protection declaration partially or completely, whereby the changes must be published to the same extent as the current data protection declaration. Otherwise, Winter+Winter GmbH must contact you directly. During the modification, the previous data protection declaration applies until the data protection declaration has been changed at all publication locations.


The privacy policy applies between you and

Winter+Winter GmbH
Fraunhoferstraße 20, 88131 Lindau, Germany

The data protection officer is
Klaus Winter
+49 8382 2737992

If you wish to restrict, correct or delete your data, you can contact us here:
Klaus Winter
+49 8382 2737992