PRIVACY POLICY
1. Controller
Placer GmbH, Kollwitzstraße 76, 10435 Berlin, Germany, support@placertravel.com, is the controller for the processing described here.
We are not required to appoint a data protection officer. Any question about this policy, or any request under the rights below, reaches us at support@placertravel.com.
2. What we process, why, and on what legal basis
- Booking data - name, email, phone, address, dates, guest names, special requests. To arrange and administer your booking and to communicate about it. Article 6(1)(b) GDPR.
- Payment and transaction data - amounts, payment method, transaction and refund records. To take payment on the property's behalf and process refunds. Article 6(1)(b) and (c) GDPR.
- Accounting records - invoices and booking records, retained to meet tax and commercial law obligations. Article 6(1)(c) GDPR.
- Account data - if you create an account: credentials, saved stays, booking history. Article 6(1)(b) GDPR.
- Health, accessibility or dietary information - only if you tell us, and only to pass it to the property so it can accommodate you. Special category data; we rely on your explicit consent under Article 9(2)(a) GDPR, which you can withdraw at any time.
- Newsletter and marketing - email address and preferences, on the basis of your consent, withdrawable at any time via the link in every email. Article 6(1)(a) GDPR.
- Server logs - IP address, time, page requested, browser. To operate and secure the site. Article 6(1)(f) GDPR. Deleted after 7 days.
- Analytics and marketing cookies - only with your consent, given through the cookie banner. Section 25(1) TDDDG and Article 6(1)(a) GDPR.
- Fraud prevention - booking and payment patterns, device data. Our legitimate interest in preventing fraudulent bookings and chargebacks. Article 6(1)(f) GDPR.
Providing booking data is necessary to make a booking; without it we cannot arrange a stay. Everything else is voluntary.
3. Who receives your data
The property you book. It receives the data it needs to host you - name, dates, contact details, any requests you made. The property is a separate controller and processes that data under its own privacy policy.
Our service providers, acting as processors under Article 28 GDPR:
- Webflow, Inc. - website hosting and delivery
- Wized and Supabase - booking application logic and database
- Stripe Payments Europe, Ltd. - payment processing and fraud prevention
- Amazon Web Services and Resend - transactional email
- Make.com - internal workflow automation
- Channex - availability and reservation exchange with properties
- Microsoft Ireland Operations Ltd. - business email and office software
Beyond that we disclose data only where we are legally required to, or to our tax advisors, auditors and lawyers under professional confidentiality.
Delivering the site also involves content delivery networks and script providers whose servers receive your IP address when a page loads: Webflow CDN and Amazon CloudFront, jsDelivr, Google Fonts and Google Identity Services, Cookiebot, Wized, Stripe on the booking pages, and Mapbox where a map is shown. We use no analytics and no advertising tools.
4. Transfers outside the EEA
Some of the providers above are based in, or have parent companies in, the United States. Where data is transferred outside the EEA, we rely on the European Commission's standard contractual clauses under Article 46(2)(c) GDPR or, where the provider is certified, the EU-US Data Privacy Framework.
If you book a property outside the EEA, your booking data is transferred to that property so it can host you; that transfer is necessary for the performance of your contract under Article 49(1)(b) GDPR.
5. How long we keep it
- Booking and invoice records: 10 years from the end of the calendar year, as required by German tax and commercial law.
- Account data: until you delete your account.
- Newsletter data: until you withdraw consent, plus a suppression record so we do not email you again.
- Server logs: 7 days.
- Support correspondence: 3 years from the end of the year in which the matter was closed.
6. Your rights
You have the right to access your data (Article 15), to have it corrected (Article 16) or erased (Article 17), to restrict processing (Article 18), to receive it in a portable format (Article 20), and to object to processing based on legitimate interests (Article 21). Where we rely on consent, you may withdraw it at any time with effect for the future.
You can object to direct marketing at any time, with no reason given.
Write to support@placertravel.com. You also have the right to complain to a supervisory authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, mailbox@datenschutz-berlin.de.
7. Automated decisions and children
We do not use automated decision-making or profiling that produces legal effects for you. Our services are not directed at children; you must be 18 to book.
8. Changes
We update this policy when our processing changes. The current version is always the one published here.
Last updated: 14 September 2026.
