Privacy policy
1. Data controller
The data controller for this website is:
Kirsten & Malcolm Crowson
Marienstraße 55, 99817 Eisenach, Germany
Email: info@crowson.de
Phone: +49 176 21513936
2. Overview of data processing
This privacy policy explains which personal data we collect and how we process it.
3. Booking enquiries
What data is collected?
When you send an enquiry through our booking form, we collect the following data:
Required information:
- First and last name
- Email address
- Check-in and check-out dates
- Number of guests
Optional information:
- Phone number
- Message or special requests
- Number of pets
Purpose of processing:
The data is used solely to process your booking enquiry.
Legal basis:
Processing is based on Art. 6(1)(b) GDPR (contract initiation).
Storage:
Your data is sent to us by email. We do not store it in a database. Emails are kept for the duration of the business relationship or in line with statutory retention periods.
Recipients:
Your data is sent to us by email through our email service provider (IONOS SE).
4. Third-party services
Map display (CARTO)
We embed an interactive map to show our location. When the page loads, map tiles are retrieved directly from servers operated by CartoDB Inc. (307 Fifth Avenue, Floor 9, New York, NY 10016, USA; trading as “CARTO”) at basemaps.cartocdn.com. The underlying map data comes from OpenStreetMap. Your IP address is transmitted to CARTO in the process. Requests are made using an API key issued to us. This involves a transfer of data to the USA; CARTO is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in displaying our location).
Website analytics (Umami)
We use Umami to understand how our pages are used. The software runs on our own server and is served through our own web server; no data is passed to third parties. Umami sets no cookies and stores no identifier in your browser. It records the page visited, the referring source, an approximate location (country, region and town, derived from the IP address), and browser and device type. Your IP address is processed only to derive those values and is not stored; it is not combined into a personal profile and there is no cross-site recognition. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly website analytics).
5. Cookies and browser storage
This website uses no cookies and stores no data in your browser. The language follows from the address you open; the German version is at the address without /en.
6. Your rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your rights, please contact:
Kirsten & Malcolm Crowson
Marienstraße 55, 99817 Eisenach, Germany
Email: info@crowson.de
Phone: +49 176 21513936
7. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
Competent supervisory authority:
Thuringia State Commissioner for Data Protection and Freedom of Information
Häßlerstraße 8, 99096 Erfurt, Germany
https://www.tlfdi.de8. Changes to this privacy policy
We reserve the right to amend this privacy policy if the law or our data processing changes.
Last updated: September 2026