Privacy Policy
This is the English rendering of our German privacy policy. The legally binding version is the German Datenschutzerklärung.
1. Controller
The controller for data processing on this website is:
Alexander Knoedel
Schachenstraße 1
82467 Garmisch-Partenkirchen
Germany
Phone: +49 8821 7302097
Email: contact@stube-stories.de
2. Data protection officer
We are not legally required to appoint a data protection officer. For any data protection question, please contact us at the address above.
3. Hosting and server logs
This website is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany, on servers located in Germany. When you open a page, access data (IP address, date and time, page requested, volume of data transferred, browser type) is processed in server log files. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. A data processing agreement under Art. 28 GDPR is in place with IONOS. No transfer to third countries takes place.
4. Encryption
For security reasons this website uses TLS encryption, recognizable by “https://” and the padlock symbol in your browser's address bar. Data you send us cannot be read by third parties.
5. Contact form, email, phone or WhatsApp
If you write to us via the contact form, we process the details you provide (name, email address, optionally phone number, travel dates, number of guests and pets, and your message) in order to answer your enquiry. The data is processed on our IONOS webspace and forwarded to our mailbox by email; it is not stored permanently on the web server.
If you contact us by email, phone or WhatsApp, we process the details you share (such as your name, contact details, travel dates and message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR.
6. Bookings
For availability checks and bookings we use our own booking page at book.stube-stories-garmisch.de. When you book there, we process your first and last name, email address and phone number, the dates of your stay, the number of guests, the selected rate and price, and the time you accepted the booking terms. We need this information to create and confirm your booking and to arrange arrival and payment with you. The legal basis is Art. 6(1)(b) GDPR (contract and pre-contractual steps). Without this information we cannot accept a booking.
Hosting of the booking page. The booking page is operated by Fly.io, Inc. (USA); the servers are located in Frankfurt am Main, Germany. When you open the page, technically necessary data such as your IP address is processed to deliver the page and protect it against misuse (Art. 6(1)(f) GDPR). For bookings we log only the confirmation code, the dates and the rate, no contact details. The booking page loads no third-party content, including no fonts from Google.
Booking system and notification. Your booking is stored in our booking and property management system Guesty (Guesty Inc., USA). So that we see new bookings immediately, the booking details are forwarded to us as an email notification via the Airtable service (Formagrid Inc., USA). We have data processing agreements with Fly.io, Guesty and Airtable under Art. 28 GDPR. As these providers are based in the USA, access from the USA cannot be ruled out; transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Registration form and online check-in. Under the German Federal Registration Act (Sections 29 and 30 BMG) a registration form (Meldeschein) must be completed for every stay, and the municipality of Garmisch-Partenkirchen charges a tourist tax (Kurbeitrag). For this we send you a link to the online check-in before arrival. It runs on the registration system of the municipality of Garmisch-Partenkirchen (Deskline, operated by feratel media technologies AG, Innsbruck, Austria, on behalf of the municipality), not on a system of our own. The legal basis is Art. 6(1)(c) GDPR in conjunction with Sections 29 and 30 BMG and the tourist tax bylaws of the municipality. The municipality of Garmisch-Partenkirchen is the controller for the processing in this system. Registration forms are kept for one year from the day of departure and deleted within three months after that (Section 30(4) BMG).
7. WhatsApp and Google Maps
The WhatsApp button and the Google Maps link are plain links. No data is transmitted to WhatsApp or Google until you actively click them; the privacy terms of those providers then apply. No map or other third-party content is embedded on this website.
8. Fonts and cookies
All fonts are served locally from our own server, with no connection to Google Fonts. We do not use analytics, tracking or marketing cookies.
9. Storage period
Unless stated otherwise in this policy, we process personal data only for as long as the respective purpose requires. Enquiries are deleted once they have been dealt with, provided no statutory retention periods apply. Booking records are subject to the commercial and tax retention periods of six and ten years respectively.
10. Withdrawal of consent
You can withdraw consent you have already given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.
11. Your rights
With regard to your personal data you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). Please contact contact@stube-stories.de. You also have the right to lodge a complaint with a data protection supervisory authority; for us this is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Last updated: October 2026. We update this policy whenever the website or the legal framework changes.