Privacy Policy

We generally process personal data only to the extent necessary to provide a functional website, our content, and our services. No tracking or analysis of user behavior takes place.

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are under no obligation to provide your personal data. Failure to provide such data will have no consequences. This applies only where no other information is provided for the individual processing activities described below.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log files

You may visit our website without providing any personal information.

Whenever you access our website, usage data is transmitted by your internet browser to us or to our web hosting provider / IT service provider and stored in log files (so-called server log files).

This stored data includes, for example: the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting internet service provider.

Processing is carried out on the basis of Article 6(1)(f) GDPR, based on our legitimate interest in ensuring the reliable operation of our website.

Hosting by Squarespace

Our website is hosted by Squarespace, a service provided by Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, Ireland.

As part of the hosting services, personal data of website visitors may be processed, in particular data generated through the use of the website (such as IP addresses, access data, and communication data).

Squarespace acts as a data processor within the meaning of Article 28 GDPR.

It cannot be ruled out that, in the course of providing its services, Squarespace transfers personal data to affiliated companies in third countries, particularly the United States.

For transfers to the United States, an adequacy decision of the European Commission exists under the EU–U.S. Data Privacy Framework. Squarespace is certified under this framework and therefore committed to complying with European data protection standards.

Further information can be found in Squarespace's Privacy Policy:

https://www.squarespace.com/privacyhttps://www.squarespace.com/privacy

Secure Data Transmission (SSL/TLS)

All data transmitted to us is protected using modern SSL/TLS encryption.

This ensures that your personal data is securely transmitted between your browser and our web server and is protected against unauthorized access by third parties.

Contact

Responsible

If you wish to contact us, the responsible for data processing is:

Susanne Stöckl and Andreas Stöckl
Finkenstr. 23
83417 Kirchanschöring
Germany
Email: info@burgvier.de

Contact by Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message content) only to the extent provided by you.

The processing of your data serves the purpose of handling and responding to your inquiry.

Where your inquiry relates to pre-contractual measures (for example, advice regarding a booking request or the preparation of an offer) or concerns an existing contractual relationship, processing is carried out pursuant to Article 6(1)(b) GDPR.

In all other cases, processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in handling and responding to your inquiry.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

Your email address will be used solely for the purpose of processing your inquiry.

Your data will subsequently be deleted in accordance with statutory retention periods unless you have expressly consented to further processing.

Contact Form

When you use our contact form, we collect your personal data (name, email address, message content) only to the extent provided by you.

The processing serves the purpose of contacting you.

Where the contact relates to pre-contractual measures or an existing contractual relationship, processing is carried out pursuant to Article 6(1)(b) GDPR.

In all other cases, processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in handling and responding to your inquiry.

You have the right to object to this processing at any time for reasons arising from your particular situation.

Your email address will be used solely for processing your inquiry and will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing.

External Links to PayPal, Airbnb and the Town of Tittmoning

By clicking the respective links or buttons, visitors are redirected to the following external websites:

• payment processing: paypal.com

• holiday apartment bookings: airbnb.de and booking.com

• tourist information: tittmoning.de

When accessing these external websites, personal data, including cookies, may be processed by the respective providers.

The operators of these services are solely responsible for the processing of such data. We have no influence over their data processing activities.

Technically Necessary Cookies

Our website uses only technically necessary cookies required for the operation of the website.

Cookies are small text files stored by your internet browser on your device.

They enable essential website functions such as the contact form and website navigation. These cookies do not create user profiles and are not used to track your behavior across other websites.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG.

The processing of personal data is carried out pursuant to Article 6(1)(f) GDPR, based on our legitimate interest in ensuring the optimal functionality of our website.

Data Retention & Rights of Data Subjects

Data Retention

Following the completion of a contractual relationship, personal data is retained in accordance with applicable statutory retention periods, particularly those under tax and commercial law, and deleted thereafter unless you have consented to further processing.

Server log files are generally retained for up to 30 days and are subsequently deleted or anonymized unless longer retention is required by law or for technical security reasons.

Rights of Data Subjects

Subject to the applicable legal requirements, you have the following rights under Articles 15–20 GDPR: Right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

You also have the right, pursuant to Article 21 GDPR, to object to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may contact the supervisory authority responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

Phone: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to Object

Where the processing of your personal data is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation.

Once an objection has been made, we will cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Upon receipt of your objection, we will cease processing your personal data for direct marketing purposes.

Last updated: April 5, 2026