Privacy Policy

1. Privacy Policy at a Glance

General Information

The protection of your personal data is a matter of great importance to us. With this privacy policy, we inform you about which personal data is collected when using our website www.lacasabonita.boutique and for what purposes this is done, as well as what rights you have under the General Data Protection Regulation (GDPR)

Personal data is any information that relates to an identified or identifiable natural person.

Data Collection on Our Website

Your personal data is collected, on the one hand, by the fact that you actively provide it to us. This can be, for example, in the context of a contact or booking inquiry, by e-mail, telephone, or via WhatsApp.

Furthermore, when you visit our website, certain technical information is automatically recorded by our IT systems. This may include, in particular, your IP address, browser type and browser version, the operating system used, the referrer URL, and the date and time of the page access.

Purpose of Processing

We process your personal data, in particular, for the following purposes:
-- for the technical provision and secure operation of our website,
-- for the processing of contact and booking inquiries,
-- for the preparation and execution of accommodation contracts,
-- for communication with our guests and interested parties,
-- for the fulfillment of legal obligations,
-- to ensure the security and functionality of our website,
-- as well as, if you have given your consent, for the analysis and improvement of our internet offer.

Your Rights

You have the right, at any time, to:
-- information about the personal data stored about you,
-- correction of incorrect or incomplete data,
-- deletion of your personal data,
-- restriction of processing,
-- data portability,
-- objection to certain processing,
-- as well as the revocation of a given consent with effect for the future.

2. Hosting

This website is hosted by the following provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When you visit our website, the hosting provider may process technical data and server log files. This may include your IP address.

The processing is done to ensure the secure, stable, and technically flawless provision of our website.

3. General Information and Mandatory Information

Controller

The controller within the meaning of the GDPR is:

Halima Taoumi
La Casa Bonita
Am Born 4
59821 Arnsberg
Germany
Phone: +49 (0) 152 01815895
E-mail: info@lacasabonita.boutique

Storage Duration

Unless a more specific storage period is mentioned in this privacy policy, we store personal data only as long as necessary to fulfill the respective purpose.

When the purpose of storage no longer applies, the data will be deleted, unless statutory retention obligations or other legally permissible reasons for further storage exist.

Revocation of Consent

If the processing is based on your consent, you can revoke it at any time with effect for the future.

The lawfulness of the processing carried out until the revocation remains unaffected.

Right to Object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, as long as the processing is based on Article 6(1)(e) or (f) GDPR.

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract in a common, machine-readable format or, if technically feasible, to have it transferred to another controller.

Information, Correction, and Deletion

You have the right to free information about your stored personal data, as well as the right to correction or deletion of this data.

4. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the browser line.

Through encryption, data transmitted via this website cannot be read by third parties without great effort.

5. Data Collection on This Website

Cookies

Our website uses cookies and similar technologies.

Cookies are small data sets that can be stored on your device. They can be used to ensure the technical functionality of the website or to provide certain functions.

Technically necessary cookies and similar technologies may be used if they are absolutely necessary for the provision of a service expressly requested by you.

For all other cookies or access to information on your device, we will obtain your consent in advance, if required by law.

Cookie Consent Management

A consent mechanism may be used on our website, with which you can decide whether certain optional services and technologies may be used.

Your selection will be documented so that we can prove that consent has been given or not.

Server Log Files

The hosting provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

This information may include:

-- browser type and browser version,
-- operating system used,
-- referrer URL,
-- hostname of the accessing computer,
-- time of the server request,
-- IP address.

6. Contact Form

If you contact us using the contact form, we will process the data you enter into the form, including your contact information and the content of your message.

The processing is done to handle your inquiry and for the case of follow-up questions.

7. Contact via E-mail or Phone

If you contact us by e-mail or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed for the purpose of handling your inquiry.

8. Contact via WhatsApp

On our website, a link to WhatsApp may be available.

When you click on this link, you will be redirected to WhatsApp. The provider is:

WhatsApp Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

9. Google Tag Manager

Google Tag Manager is used on this website to manage and technically integrate other web services.

10. Google Analytics

Google Analytics is used to analyze website usage.

11. Google Fonts

This website uses Google Fonts locally on our web server.

12. Google reCAPTCHA

Google reCAPTCHA is used to protect our forms from abusive automated usage and spam.

13. Booking System and Channel Manager Smoobu

Smoobu is used for booking inquiries and bookings via our website, as well as for managing our bookings (also from booking portals like Airbnb and Booking.com).

14. Booking and Accommodation

If you book an apartment with us, we will process the personal data required for the preparation and execution of the accommodation contract.

15. Mandatory Registration for Accommodation

As the operator of an accommodation establishment, we are obligated to comply with the legal requirements of the Federal Registration Act.

16. Intermediary and Booking Platforms

If bookings are made via external intermediary or booking platforms, we may receive the personal data required for the execution of the booking from the respective platform.

17. Social Media

On our website, links to our profiles on social networks, especially Instagram and LinkedIn, may be available.

18. Newsletter

If you subscribe to our newsletter, we will use your e-mail address and first name to send you information about free dates, offers, and excursion tips once a month. The legal basis is your consent (Article 6(1)(a) GDPR).

19. Affiliate links

In the "Day trips" section we use affiliate links from the Travelpayouts partner programme (Go Travel Un Limited, Hong Kong) to offers from Tiqets. They are marked as advertising. If you book through such a link, we earn a commission; the price stays the same for you.

Loading our website does not transfer any data to these providers. Only when you click a link are you forwarded to the provider via Travelpayouts. Your IP address and information about the click and your browser may then be processed and cookies may be set, including outside the EU. The respective providers are responsible for this and their privacy notices apply.

We include these links on the basis of our legitimate interest in funding our website (Art. 6(1)(f) GDPR).

20. Data Security

We take appropriate technical and organizational measures to protect your personal data from loss, destruction, manipulation, unauthorized access, or other unauthorized processing.

21. Validity and Changes to this Privacy Policy

This privacy policy is current as of September 2026.

Due to the development of our website, our offers, or due to changed legal or official requirements, it may become necessary to adjust this privacy policy.

The current version is published on this website.

La Casa Bonita
Halima Taoumi
Am Born 4
59821 Arnsberg
Stand: September 2026