Privacy Policy

1. Responsible Party

Apartments und Pension Tokus 

Nejla Tokus 

Hintere Cramergasse 13 

90478 Nuremberg 

Germany 

Phone: +49 911 2538 4027 

Mobile: +49 176 2153 6130 

Email: info@apartments-tokus.de

2. Collection and Storage of Personal Data and the Nature and Purpose of their Use

a) When Visiting the Website

When you visit our website www.tokus-apartments.de, information such as IP address, date and time of access, retrieved file, referrer URL, browser used, and operating system is automatically collected. This data is technically necessary to display the website correctly and to ensure its stability and security. The legal basis is Art. 6 para. 1 lit. f GDPR.

b) When Using Our Contact Form

We collect the following data: name, email address, phone number, and the content of the message. This data is stored solely for the purpose of processing your inquiry and any follow-up questions. The legal basis is Art. 6 para. 1 lit. a GDPR.

 c) For Booking Inquiries

We collect and process personal data to handle booking inquiries. This data includes name, email address, phone number, address, and any other information necessary for processing the booking. The data is stored for the duration of the statutory retention period. The legal basis is Art. 6 para. 1 lit. b GDPR.

3. Data Disclosure

Your personal data is only transmitted to third parties for the following purposes:

• You have given your explicit consent according to Art. 6 para. 1 lit. a GDPR,
• the disclosure is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not having your data disclosed according to Art. 6 para. 1 lit. f GDPR,
• there is a legal obligation for the disclosure according to Art. 6 para. 1 lit. c GDPR, and
• it is legally permissible and necessary for the performance of a contract with you according to Art. 6 para. 1 lit. b GDPR.

4. Tools and Plugins

a) Canva

Our website uses Canva to display content, a service of Canva Pty Ltd, 110 Kippax St, Surry Hills, NSW 2010, Australia. When you visit one of our pages equipped with a Canva plugin, a connection to Canva's servers is established. This informs the Canva server which of our pages you have visited. Canva also obtains your IP address. The use of Canva is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the handling of user data can be found in Canva's privacy policy at: https://www.canva.com/policies/privacy-policy/

b) Google Maps

This site uses the Google Maps map service via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the USA. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an attractive presentation of our online offers and easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. More information on the handling of user data can be found in Google's privacy policy at: https://policies.google.com/privacy?hl=en

c) Booking.com Review Widget

Our website includes a widget to display reviews provided by Elfsight. The provider is Elfsight, 300 Broadway St, San Francisco, CA 94133, USA. This widget shows reviews from guests who have posted on Booking.com. When using the widget, data such as your IP address is transmitted to Elfsight's servers. The integration of the widget is in the interest of transparent presentation of our reviews. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information can be found in Elfsight's privacy policy at: https://elfsight.com/privacy-policy/

d) IONOS WebAnalytics

This website uses the services of IONOS WebAnalytics to statistically record and evaluate the use of our website. The provider is 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS WebAnalytics stores, among other things, the referrer URL, the requested web page or file, browser type and version, operating system used, time of access, and the IP address in anonymized form. The data is collected exclusively for statistical evaluation and technical optimization of the web offering and stored anonymously. Further information can be found in IONOS's privacy policy at: https://www.ionos.com/terms-gtc/privacy-policy/

e) Website Translator

Description of Service 

This is a website translation tool.

Processing Company

Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Usage 

This list represents the usage of the collected data and its purposes. Consent is only valid for the listed purposes. The collected data may not be used or stored for any other purpose than those listed.

• Provision of fonts
• Analytics

Technologies Used 

This list includes all technologies used by this service to collect data. Typical technologies are cookies and pixels that are placed in the browser.

Collected Data 

This list includes all (personal) data collected through the use of this service.

• IP address

Legal Basis 

The following is the legal basis for the processing of personal data, as required by Art. 6 para. 1 GDPR.

• Art. 6 para. 1 lit. a GDPR

Processing Location 

European Union

Retention Period 

Data is deleted as soon as it is no longer needed for processing purposes.

Transfer to Third Countries 

Worldwide

Data Recipients

Alphabet Inc., Google LLC, Google Ireland Limited

You can find the data processor's privacy policy here: https://policies.google.com/privacy?hl=en

You can find the data processor's cookie policy here: https://policies.google.com/technologies/cookies?hl=en

You can find the option to object to data processing by this processor here: https://safety.google/privacy/privacy-controls/

5. Rights of Data Subjects

You have the right to:

• Request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if not collected from us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof;
• Request the immediate rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR;
• Request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• Request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;
• Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transfer to another responsible party in accordance with Art. 20 GDPR;
• Withdraw your consent given to us at any time in accordance with Art. 7 para. 3 GDPR. This means that we may no longer continue the data processing based on this consent for the future and
• Lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your habitual residence or workplace or our company headquarters.

6. Right to Object

If your personal data is processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object that will be implemented by us without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@apartments-tokus.de.

7. Data Security

We use the common SSL (Secure Socket Layer) procedure within the website visit in conjunction with the highest encryption level supported by your browser. Generally, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

8. Timeliness and Amendment of this Privacy Policy

This privacy policy is currently valid and has the status of May 2024.

Due to the further development of our website and offers above or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy can be accessed and printed out at any time on the website at https://www.tokus-apartments.de/datenschutz.