Skip to content
Boje20
Back to homepage

Privacy policy

Last updated: September 2026

This is a translation for your convenience. The German version is legally binding.

1. Summary

Protecting your personal data matters to us. This privacy policy explains which data is processed when you visit this website, for what purpose, and what rights you have.

  • This website sets no cookies for analytics or advertising and embeds no social media plugins or external fonts.
  • Visitor statistics are collected without cookies and without us being able to identify you personally.
  • Enquiries are sent via your own email program. The enquiry form itself does not store or transmit any data.

2. Controller

The controller responsible for data processing on this website is:

Brigitte Jimenez-Guder Wählingsweg 3, 22459 Hamburg, Germany Email: brigittejimenez [at] web [dot] de

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes information transmitted by your browser (so-called server log files), in particular:

  • IP address
  • date and time of access
  • requested page or file
  • referrer URL (the previously visited page)
  • browser type, browser version and operating system

This data is technically necessary to display the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and reliably. Log files are automatically deleted after a short period.

We have concluded a data processing agreement (Data Processing Addendum) with Vercel. Processing in the USA is possible. Vercel is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR); in addition, the EU Standard Contractual Clauses apply. You can find more information in Vercel's privacy policy.

4. Visitor statistics with Vercel Web Analytics

To understand how our website is used, we use Vercel Web Analytics. No cookies are set. Information such as the page visited, referrer URL, country, device type, operating system and browser is collected. To distinguish visits, a hash value is generated from the request and discarded after 24 hours; it does not allow us to identify you personally.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the statistical analysis and improvement of our website. You can object to this processing at any time (see section 9).

5. Performance measurement with Vercel Speed Insights

To optimise loading speed, we use Vercel Speed Insights. Technical performance values (e.g. loading times), the page visited, device type and browser are collected – without cookies and without being linked to you as a person. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a fast and error-free website.

6. Contact by email

If you contact us by email – for example via the enquiry form, which merely opens a prepared message in your email program – we process the information you provide (e.g. name, email address, travel dates, number of guests and your message) in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a booking, and otherwise Art. 6(1)(f) GDPR. We delete your data as soon as it is no longer required for processing your enquiry, unless statutory retention obligations (e.g. under commercial or tax law) apply.

Please note: emails are sent via your own email provider. They are usually encrypted in transit but not end-to-end encrypted.

7. Cookies

This website does not set any cookies for visitors. Only in the non-public administration area is a technically necessary cookie set after login to secure the session (§ 25(2) no. 2 TDDDG).

8. Fonts

The fonts used on this website are served locally from our server. No connection is made to servers of Google or other third parties.

9. Your rights

You have the right at any time to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

Simply contact us by email at brigittejimenez [at] web [dot] de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Hamburg Commissioner for Data Protection and Freedom of Information.

10. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol and "https://" in your browser's address bar.

11. Changes

We will update this privacy policy whenever the website or the legal framework changes. The version published here applies.