Privacy Policy

This English version is provided for your convenience. As our operator is based in Germany, the German version is the legally authoritative one and prevails in case of any discrepancy.

1. Controller

Peer Kramer, c/o Postflex #8731, Emsdettener Str. 10, 48268 Greven, Deutschland.
E-mail: info@deservedstays.com

2. Hosting (Cloudflare Pages)

This website is hosted on „Cloudflare Pages“ by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary server log data (including a truncated IP address, date/time, the requested page and the user agent) to deliver the site securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional, secure service). A data processing agreement is in place; Cloudflare is certified under the EU-US Data Privacy Framework. To protect the e-mail address shown on the site from automated harvesting by bots, Cloudflare also runs a technically necessary e-mail obfuscation script („Scrape Shield“); no personal data about you is processed in doing so.

3. Consent, cookies & web analytics (§ 25 TDDDG)

On your first visit we ask for your consent through a Google-certified consent tool (Consent Management Platform, IAB TCF v2.2). Analytics and advertising services are loaded only after your consent (Google Consent Mode v2); without consent they stay disabled and the website remains fully usable (Cloudflare's reach measurement is cookieless). You can change or withdraw your choice at any time with effect for the future via the privacy settings of the consent banner.

a) Technically necessary storage (no consent required, § 25(2) TDDDG)

To operate the website we use technically necessary local storage in your browser: your language choice (localStorage, „deserved_lang“), your local shortlist, the concierge chat history of the current session (sessionStorage) and the storage of your cookie decision in the consent tool. This data is not transmitted to us; under § 25(2) TDDDG no consent is required for it.

b) Google Analytics 4 (only with consent)

For reach and usage analysis we use Google Analytics 4 (measurement ID G-8VGLW2QDR9). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Pseudonymous usage data is processed (e.g. pages visited, time on page, approximate origin, truncated IP address, device/browser type) to improve our service. Any transfer to Google LLC in the USA is based on the EU-US Data Privacy Framework. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

c) Microsoft Clarity (only with consent)

To improve usability we use Microsoft Clarity. Provider: Microsoft Ireland Operations Limited (Microsoft Corporation, USA). Clarity produces pseudonymous usage analyses (e.g. heatmaps and aggregated session analysis). Any transfer to the USA is based on the EU-US Data Privacy Framework. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

d) Google AdSense (only with consent)

On individual pages we embed advertising via Google AdSense (publisher ID ca-pub-4778511354199481; provider Google Ireland Limited). Depending on your consent, personalised or non-personalised ads are delivered; cookies for ad delivery and measurement may be set for this purpose. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

e) Pinterest tag (only with consent)

To measure the success of our Pinterest content, the Pinterest tag is integrated (provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; Pinterest Inc., USA). It only becomes active after your consent and then processes pseudonymous usage data. Any transfer to the USA is based on the EU-US Data Privacy Framework. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

4. Fonts

Fonts are served locally from our own server. There is no request to Google Fonts and no transfer of your IP address to Google.

5. Images & interactive map

All photos on this site are served directly from our own server (same domain, in WebP format). No images are loaded from third-party CDNs and no IP address is transmitted to external services for this.

Only on the map page (/map) an interactive map is loaded via the Leaflet library (unpkg.com) with map tiles from CARTO (basemaps.cartocdn.com) based on OpenStreetMap data. In doing so, your IP address is necessarily transmitted to these map services (Art. 6(1)(f) GDPR — display of the map). No tracking cookies are set.

6. Affiliate links & redirects

When you click an affiliate link marked as „Anzeige“ (advertisement) (e.g. Booking.com, GetYourGuide, Mr & Mrs Smith, Airalo, travel insurers, travel credit cards), you are redirected to the respective partner's website. Only there — after your click — may the partner set cookies to attribute a possible commission. The privacy policy of the respective provider then applies. We ourselves receive no personal data about you in this process.

7. Newsletter

If you subscribe to our newsletter, we process your e-mail address and your chosen language (EN/DE) in order to send you the requested e-mails. Registration uses the double opt-in procedure: after you enter your address we send you a confirmation e-mail; only after you click the confirmation link it contains are you added to the list. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future — for example via the unsubscribe link at the end of every e-mail. The lawfulness of processing carried out up to the withdrawal remains unaffected.

For sending and recipient management we use the service provider Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany). Brevo processes the data exclusively on our behalf on the basis of a data processing agreement (Art. 28 GDPR) on servers within the EU. To document your consent we store the double opt-in confirmation. Your data is stored for as long as you are subscribed to the newsletter and is deleted after unsubscribing, or kept in restricted form as proof of your earlier consent.

8. AI concierge (chat assistant)

This website offers you an optional AI-powered concierge chat that gives recommendations from our collection. Processing only takes place if you actively use the chat. The chat messages you enter and your language choice are processed; please do not enter any sensitive personal data in the chat. To generate a reply, your messages are transmitted to Google's Gemini API (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; where applicable transferred to Google LLC, USA — safeguarded under the EU-US Data Privacy Framework) and processed there to create the answer. The legal basis is our legitimate interest in an interactive advisory function and/or the initiation of your enquiry (Art. 6(1)(f)/(b) GDPR).

We do not store chat histories permanently: the history is held solely in your browser's sessionStorage and ends with the session. To protect against misuse, your IP address is processed briefly (max. 1 hour) for technical rate limiting. Replies are machine-generated and may contain errors — they are non-binding inspiration, not an assurance of prices or availability.

9. Contact by e-mail

If you contact us by e-mail, we process your details solely to handle your enquiry (Art. 6(1)(b)/(f) GDPR). The data is deleted as soon as it is no longer needed.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to lodge a complaint with a supervisory authority.

Last updated: July 2026.