1 Who is responsible
The controller responsible for processing your data on this website is Tempel & Tempel GmbH, Mühlenstraße 8a, 14167 Berlin, Germany. CityLuxx is our brand for holiday apartments in Berlin.
If you have questions about data protection, write to booking@cityluxx.com.
This notice covers the website cityluxx.com. It is as short as the website itself: for now the site shows information, free dates and prices, and you cannot book here yet.
2 Visiting the website
Each time you open a page, your browser sends the server the data it needs to deliver that page:
- your IP address
- the date and time of the request
- the address you opened and the page you came from
- the amount of data transferred and whether the request succeeded
- your browser and operating system
The server records these details in log files. We use them only to fix faults and to fend off attacks. We do not combine them with other data and do not build profiles from them. The logs are deleted as soon as they are no longer needed for this.
Our server fetches free dates and prices from our booking system. Only the chosen dates and the number of guests are sent there, nothing about you. To keep anyone from overloading this lookup, the website counts how often prices are requested from one IP address. For this it keeps a checksum of the address, not the address itself. The checksum is valid for one minute and is deleted by the following day at the latest.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is running the website securely and without disruption.
The website is hosted on servers in Germany by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data on our behalf (Art. 28 GDPR).
The connection to the website is encrypted. We use no analytics and no advertising services, and we embed no content from other providers. Fonts and images come from our own server.
3 Cookies
The website only sets cookies it needs in order to work. These do not require consent (section 25(2) no. 2 of the German TDDDG).
- website_locale remembers the language you click in the language menu. The cookie is only created by that click and is deleted after one year.
- website_preview is only given to people we invite to a preview before opening, through a personal link. It is deleted after 180 days.
Neither cookie contains information about you as a person. You can delete them in your browser at any time.
4 When you write to us
When you write to us, we process your email address, your name and the content of your message in order to answer you.
The legal basis is Art. 6(1)(b) GDPR where your message concerns a booking or a booking request, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest is answering enquiries.
Our mailboxes are hosted with Google Workspace. The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. It processes the data on our behalf. In the course of this, data may be transferred to Google LLC in the USA. This is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and on the Commission’s standard contractual clauses.
We keep your message for as long as we need it to deal with your request, and beyond that where the law requires it. For messages relating to a booking this is up to ten years (Art. 6(1)(c) GDPR).
5 Booking and payment
At present you can neither book nor pay through this website. Before that becomes possible, we will add everything it involves to this notice.
6 Your rights
You have the right to ask us for:
- access to your data (Art. 15 GDPR)
- correction (Art. 16 GDPR)
- deletion (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- your data in a commonly used format (Art. 20 GDPR)
Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object on grounds relating to your particular situation (Art. 21 GDPR).
For any of this, a message to booking@cityluxx.com is enough.
You can also lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.
You do not have to give us any data. Without your email address, however, we cannot reply to you. We make no decisions by automated means alone.
7 Changes
We update this notice when the website or the law changes. The version on this page applies; its date is at the top.