STAYSITES
Privacy policy
As of 17 September 2026.
1. Controller
Nathan Page, StaySites, Grete-Unrein-Str. 2, 07745 Jena, Germany. Email: info@staysites.org. Telephone: +49 162 5314466.
2. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit, technically necessary connection data such as your IP address, the time and the requested file are processed. STRATO processes hosting data to provide the service and to detect and prevent attacks.
Processing serves our legitimate interest in a secure, reliably accessible website (Article 6(1)(f) GDPR). According to STRATO, visitors’ IP addresses are stored for attack detection and prevention for no more than seven days. IP addresses are anonymised in the access logs made available to website operators.
Provider information: STRATO on data processing and hosting data.
3. Enquiries by email or telephone
When you contact us, we use your contact details and the information you provide to handle your enquiry. Our email mailbox is also hosted by STRATO. Messages may additionally be processed in our email applications and on the devices used for this purpose.
For enquiries relating to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries on the basis of our legitimate interest in appropriate communication (Article 6(1)(f) GDPR).
We delete enquiry data once it is no longer required for its purpose. Statutory retention obligations and retention necessary to establish, exercise or defend legal claims remain reserved. Providing your data is voluntary; without sufficient information or a way to contact you, we may be unable to answer your enquiry.
4. Cookies, embedded content and links
We store your cookie choice in local storage for up to 180 days and an explicitly selected language and currency for up to 90 days. These settings are used only to remember your choices. The legal bases are section 25(2)(2) TDDDG for necessary browser storage and Article 6(1)(f) GDPR for respecting and managing your preferences. You can change your choice using “Cookie settings” in the footer. Optional analytics is blocked until you consent; rejecting it does not affect use of the website.
Country and currency: our hosting server estimates your country from your IP address using a local DB-IP country database. Your IP address is not sent to DB-IP, and this lookup does not create a visitor profile or an additional IP log. The legal basis is our legitimate interest in displaying relevant regional prices (Article 6(1)(f) GDPR). Country estimates may be inaccurate, for example when using a VPN; you can select a currency yourself. IP Geolocation by DB-IP (https://db-ip.com), CC BY 4.0; data converted to a local lookup format.
Optional Google Analytics 4: when configured and only with your consent, we use Google Analytics to measure visits, page usage and approximate countries of visitors. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes online identifiers, browser/device information, page and referral information and IP-derived location. According to Google, GA4 does not log or store individual IP addresses. Analytics cookies (_ga and _ga_*) are limited by this integration to 180 days. Google Signals and advertising personalisation are disabled in the site integration; no advertising services are embedded. Query strings and URL fragments are excluded from our page-view configuration.
The legal bases for optional analytics are Article 6(1)(a) GDPR and section 25(1) TDDDG. Data may also be processed by Google LLC in the USA. Google provides information about its transfer safeguards at https://policies.google.com/privacy/frameworks and its processing at https://policies.google.com/privacy. Consent is voluntary and may be withdrawn at any time through “Cookie settings”; withdrawal stops future analytics and deletes the accessible analytics cookies. It does not affect the lawfulness of earlier processing. If analytics is not configured, no Google analytics requests are made. Browser settings or extensions may also block measurement.
The email-copy function writes our address to your clipboard only after you click it and does not read its contents. The email link opens your email application, and the telephone link opens your telephone application. Clicking an email link alone does not send a message. The WhatsApp link opens the external WhatsApp service only after you click; that service’s privacy terms then apply. No WhatsApp widget is embedded. A linked website, such as the demo, is opened only after you click, and its own privacy information applies there.
5. Your rights
Under the conditions set out in the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may complain to a data protection supervisory authority, in particular in the place of your residence, work or an alleged infringement.
Right to object: Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
If processing is based on your consent, you may withdraw that consent with effect for the future. No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place through this website. To exercise your rights, please use the contact details above.