Privacy Policy
1. Data Controller
Richard Jeroma
Theodor-Heuss-Allee 52, 53773 Hennef
Email: retreat@richardjeroma.com
2. Collection and Processing of Personal Data
When you send an application through this website, the details you enter are transmitted to us: your name, your email address, the date and room you are interested in, and your answers to the questions on the form. We use this data exclusively to process your application and to reply to you.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
3. Application Form
The form runs on our own server. Your data is not passed on to any third party, with one exception: the message is delivered to us by email through our hosting provider, Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, acting as a processor on our behalf.
To keep automated submissions out, the form checks how much time passed between opening and sending it and limits how many messages can be sent from one internet connection. For this purpose your IP address is processed and stored for a short time. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the form from misuse).
4. Retention
We keep your application for as long as it takes to deal with it and to stay in touch about the retreat you asked about. If no retreat comes of it, we delete it once the correspondence is closed. Where statutory retention periods apply, they take precedence.
5. Server Log Files
Our web server records every request in a log file: your IP address, the date and time, the page or file requested, the referring page and the browser and operating system you use. This is technically necessary to deliver the website and to detect faults and misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website). Log files are deleted automatically after 14 days and are not combined with any other data.
6. Fonts, Maps and Scripts
Everything this website needs in order to display is stored on our own server and loaded from there: the typefaces, the programs that run in your browser, and the map of Fuerteventura together with its map data, labels and icons. No content delivery network, font provider or map provider is contacted, so opening any page of this site, including the map, transmits no data about you to any third party.
7. Reach Measurement
To understand how this website is found and used, we run Umami, an open-source analytics program, on our own server. No data is sent to any third party, and none leaves this domain.
Umami sets no cookies and stores nothing on your device, so no consent is required. It records the page visited, the referring page, the approximate region derived from your IP address, and the type of device and browser. To recognise repeat requests within a day it forms a one-way hash from your IP address, your browser identification and a secret that changes daily; your IP address itself is not stored. It also counts anonymous events such as a click on a booking or contact button. None of this identifies you, and none of it is combined with the data you enter in the application form.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the reach of our website). You may object to this processing at any time using the contact details above.
8. WhatsApp
This website links to WhatsApp so you can write to us there. The link is an ordinary link: nothing is transmitted until you click it. Once you do, you leave this website and the privacy policy of WhatsApp Ireland Ltd. applies to what happens there. We have no influence over that and receive nothing beyond the message you choose to send us.
9. Your Rights
You have the right to access, rectify, erase and restrict the processing of your data, as well as the right to data portability. Where processing is based on legitimate interest, you have the right to object to it. Please contact the address above.
You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or of the alleged infringement (Art. 77 GDPR).