Legal & Data Protection
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data Controller
The party responsible for data processing on this website is:
Hosting Services
This website is hosted by external service providers: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (for florida-strandhaus.de) and IONOS Inc., 2 Logan Square, Suite 100, Philadelphia, PA 19103, USA (for florida-beachhouse.com). Personal data collected on this website is stored on the host's servers. Data processing by IONOS SE is based on Art. 6 (1) (f) GDPR (legitimate interest in secure website operation). For data transfers to IONOS Inc. (USA), the transfer is based on Art. 46 (2) (c) GDPR (Standard Contractual Clauses). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with IONOS.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content — such as inquiries or bookings you send to us — this site uses SSL or TLS encryption.
Server Log Files
The provider of the pages automatically collects and stores information in "server log files," which your browser automatically transmits to us. This data is used solely for technical purposes to ensure a smooth and secure website experience. Legal basis: Art. 6 (1) (f) GDPR – legitimate interest in operating a secure and stable website.
OwnerRez (CRM & Booking System)
To manage our bookings, inquiries, and rental agreements, we use the CRM system OwnerRez (OwnerRez Inc., 230 Kingsbury Grade, Suite 202, Stateline, NV 89449, USA).
Purpose & Legal Basis: Processing reservations, managing rental contracts, and guest communication based on Art. 6 (1) (b) GDPR (contract performance / pre-contractual measures). The processing necessary for booking does not require separate consent via cookie banner.
Data Transfer: Data is processed on servers in the USA. We have entered into a Data Processing Addendum (DPA) with OwnerRez, which includes Standard Contractual Clauses (SCCs) to ensure a level of data protection that complies with European standards.
Stripe (Payment Processing)
For secure payment handling, we use the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland / Stripe Inc., USA).
Purpose & Legal Basis: Processing of payments for your booking based on Art. 6 (1) (b) GDPR. Your credit card and payment data are processed directly by Stripe via an encrypted interface.
Data Transfer: Stripe may transfer data to Stripe Inc. in the USA. Stripe Inc. is certified under the EU-US Data Privacy Framework. Stripe also utilizes Standard Contractual Clauses as a guarantee of compliance with European data protection levels. For details, see: stripe.com/privacy.
We store your personal data only for as long as necessary for the respective purpose or as required by law:
This website uses the typefaces Cormorant Garamond and Jost. The font files are served exclusively from our own web server (IONOS). No connection to Google servers is established and no data is transmitted to third parties. Legal basis: Art. 6 (1) (f) GDPR – legitimate interest in a consistent and technically optimized presentation of the website.
Legal basis and purpose
When you first visit this website, a cookie consent banner is displayed. External services — in particular the OwnerRez booking calendar — are only loaded after you have actively given your consent. The legal basis for consent-based data processing is Art. 6 (1) (a) GDPR.
Categories and services used
WStrictly necessary / Essential (always active): These services are required for the secure operation of the website and to store your privacy preferences. No consent is required. Functional & Booking Process – OwnerRez (consent required): Enables the display of the booking calendar, availability, and the secure completion of your reservation directly on our site. Online booking is not available without this consent. Provider: OwnerRez Inc., 230 Kingsbury Grade, Suite 202, Stateline, NV 89449, USA. Data transfer to the USA is covered by EU Standard Contractual Clauses.
Consent logging (documentation obligation pursuant to Art. 7 (1) GDPR)
Your consent decision is logged in an audit-proof manner. Each log entry contains the date and time of the decision (UTC timestamp), the categories selected, the banner version used, and an anonymized session ID. This data is stored solely to fulfill our statutory documentation obligations and is not used for any other purpose.
Withdrawing your consent (Art. 7 (3) GDPR)
You may withdraw your consent at any time with effect for the future. Withdrawal is as straightforward as giving consent: click the “Cookie Settings” link in the footer of any page on our website. The banner will reopen showing your current selections, which you may modify or withdraw entirely. The lawfulness of any processing carried out prior to withdrawal is not affected.
If you are a resident of the European Union, you have the following rights under the GDPR: right of access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and the right to lodge a complaint with the competent supervisory authority.
Right to Know / Access & Delete:
Right to Object (Art. 21 GDPR): Where we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object to such processing at any time. Please contact us at: welcome@florida-beachhouse.com
Competent Supervisory Authority:
Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg Königstraße 10a, 70173 Stuttgart, Germany Phone: +49 711 615541-0 | Email: poststelle@lfdi.bwl.de Website: www.baden-wuerttemberg.datenschutz.de
Non-Discrimination:
We will not discriminate against you for exercising any of your privacy rights.
SMS / Text Communication:
If you provide your phone number, we may use it to send you transaction-related texts (e.g., booking confirmations). We do not use your number for automated marketing texts without your explicit opt-in.
If you are a resident of the United States (e.g., California or Florida), you have specific rights regarding your personal information under regulations like the California Consumer Privacy Act (CCPA) and the Florida Digital Bill of Rights (FDBR):
Right to Know / Access & Delete:
You can request detailed information about the categories of personal data we collect and request its deletion, subject to legal and fiscal retention obligations (such as completed financial transaction records). To exercise your rights, please submit a request with the subject line "Data Privacy Request" to our contact email below.
No Sale or Sharing of Data:
We do not sell your personal information to third parties for monetary or other valuable consideration. We only share data with trusted service providers (like OwnerRez or Stripe) strictly necessary to process and fulfill your vacation rental booking.
Non-Discrimination:
We will not discriminate against you in any way for exercising your privacy rights.
SMS / Text Communication Policy (TCPA Compliant):
If you provide your phone number during the inquiry or booking process, we or our automated CRM provider (OwnerRez) may use it to send you transaction-related text messages (e.g., booking confirmations, payment reminders, or essential check-in instructions). We do not use your phone number for automated marketing campaigns without your explicit opt-in. You can opt-out of receiving text messages at any time by replying "STOP" to any text message received from us.
For any questions regarding this privacy policy or to exercise your rights, please contact us: