Privacy notice

Draft for internal review. This website has not yet been opened to the public. Hosting, international transfers and retention information remain subject to final verification.

Controllers and contact

Christina Woisin and Thilo Woisin, Ellerneck 24, 22045 Hamburg, Germany. Email: casa@woisin.com. Telephone: +49 170 1702787.

Booking enquiries

The form collects travel dates, adult and child counts, requested linen and towel packs, name and email address, plus optional phone number and message. We use these details to handle your enquiry and prepare a possible accommodation contract (Article 6(1)(b) GDPR). Required fields are needed to process an enquiry. An enquiry is not yet a confirmed booking.

Guest reviews

For confirmed, completed direct bookings, we can provide a personal review link. With express consent, we store your display name, rating, text and submission time, and internally link the review to the stay. After checking, the display name, rating and text may be published. Contact details and booking references are not published. Publication is based on Article 6(1)(a) GDPR. You may withdraw consent at any time by email, without affecting previous lawful processing. Reviews are voluntary.

Hosting and access

This website is provided through OpenAI Sites and uses Cloudflare infrastructure for delivery and its database. Access may involve processing IP addresses, timestamps, requested pages and browser information, for operation and security (Article 6(1)(f) GDPR). Recipients include technical providers and their subcontractors. Before public launch, the applicable agreements, recipients, retention periods and any international transfers and safeguards still require final verification.

Retention

Enquiries are retained as needed for handling, any resulting contract or resolving claims. Statutory retention duties may apply to contract and accounting records. Review data is processed for checking and, with consent, publication. Specific deletion and review periods and their technical implementation will be established before public launch.

External links and cookies

Airbnb, WhatsApp and Google Maps links lead to external services, which are loaded when you open the link and are covered by their own privacy notices. The application has no advertising or analytics tools of its own and no embedded maps or streaming videos. Platform cookies and access features are separate and will be checked before public operation.

Your rights

Subject to GDPR conditions, you have rights of access, correction, deletion, restriction and portability, and may object to processing based on legitimate interests. You may complain to a supervisory authority, including the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de). The application does not make automated decisions to accept bookings; we check enquiries personally.

Last updated: 13 October 2026