Privacy Policy for My Pension Duisburg 1. Data Controller The responsible party specifically regarding the General Data Protection Regulation (GDPR) is: My Pension Duisburg Thi Thu Huyen Tong Rheinpreußenstr. 56, 47198 Duisburg, Germany Email: [Insert your email address here] 2. General Data Processing We process personal data of our users only to the extent necessary to provide a functioning website and our content and services (accommodation). 3. Website Hosting (Smoobu) Our website and booking engine are hosted by Smoobu GmbH, Falckensteinstr. 48, 10997 Berlin, Germany. When you visit our website, technically necessary data (IP address, browser, timestamp) is transmitted to Smoobu. This is necessary to ensure the secure operation of the site (Art. 6 (1) lit. f GDPR). 4. Booking and Contract Execution When you make a booking, we collect master data (name, address), communication data (email, phone), and payment data. Legal Basis: Processing constitutes a necessity for the performance of the accommodation contract (Art. 6 (1) lit. b GDPR). We cannot process your booking without this data. 5. Data Transfer / Technical Partners To manage your stay, we use specialized service providers: Payment: To process payments, we pass payment data on to the relevant service providers (e.g., PayPal, Stripe, or banks). Access System (WeLock): For automated check-in (generating your access code), necessary data (stay duration) may be processed in our electronic locking system. This serves contract fulfillment and security purposes. Guest Registration: We are legally obliged to issue registration forms (Meldeschein) under German law (§ 29 BMG). For this purpose, we collect data such as ID numbers and nationality. This data may be transmitted to the relevant authorities of the City of Duisburg. 6. Storage Duration We store your personal data only as long as necessary for the fulfillment of the contract or as required by statutory retention periods (e.g., 10 years for tax purposes). 7. Your Rights You have the right to request information about your stored personal data, its origin, recipients, and the purpose of data processing at any time free of charge. Furthermore, you have a right to correction, blocking, or deletion of this data, provided that no statutory retention obligation prevents this.