Privacy
1. Controller
The parties responsible for the processing of personal data on the website hildeboldapartments.de are:
Friedrich und Andrea Hecker
Hildeboldplatz 9
50672 Köln
Germany
E-Mail: kontakt@hildeboldapartments.de
Phone: +49 1523 3551157
2. Hosting and server log files
Our website is hosted by Lovable. When the website is accessed, technical access data is automatically processed in server log files. This includes the IP address, the date and time of access and the browser type.
The processing serves the technical provision, stability and security of the website. The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is to offer a functional and secure website.
The technical access data is processed by the service providers used for the hosting. Its provision is technically necessary in order to display the website on your device.
The website is provided via the Lovable platform. The provider is Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111, USA. The provider publishes a data processing agreement including Standard Contractual Clauses; the current version and the list of sub-processors are available at lovable.dev/legal. The provider's data protection officer can be reached at dpo@lovable.dev.
As the provider is based in the USA, personal data may be transferred to a third country. According to the published data processing agreement, such transfers are based on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) pursuant to Art. 46 (2) lit. c GDPR. You may request a copy of these safeguards using the contact details in section 1.
Our website does not use cookies, tracking methods, analytics tools or social media plugins. There is no newsletter and no contact form.
3. Contact by email or telephone
When you contact us by email or telephone, we process the personal data you have provided to the extent necessary to handle your request. This may include your name, your email address, your telephone number and the content of your enquiry.
If your enquiry concerns the conclusion or performance of a contract, the processing is based on Art. 6 (1) lit. b GDPR. For other enquiries, Art. 6 (1) lit. f GDPR is the legal basis. Our legitimate interest is the handling and answering of your enquiry.
You decide which information you provide to us. Without the information required for your request, we may not be able to answer your enquiry or prepare a desired contract.
We retain enquiries and the related correspondence only for as long as is necessary to handle your request. Where statutory retention obligations apply, the storage period follows those provisions; depending on the type of document (for example commercial and business letters, accounting vouchers or books), different periods of six, eight or ten years apply (Sec. 257 HGB, Sec. 147 AO). Whether and to what extent these obligations apply to us in an individual case depends on the statutory requirements.
For receiving, sending and storing our emails, we use STRATO GmbH, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. A data processing agreement pursuant to Art. 28 (3) GDPR is in place with STRATO (version 3.6, concluded on 17 September 2026).
In this context, STRATO processes in particular email content, communication data and technical log files. For email log files, the agreement provides for a storage period of at most six months after their creation. For the email services, deletion is provided for at the latest 30 days after the end of the contract term. These contractual periods relate exclusively to STRATO's email services; they apply neither to the hosting of the website nor to the periods governing our own processing and retention of the correspondence.
For a period of time, incoming messages to our mailboxes were forwarded to an email account with Google (Gmail). These forwardings have been deactivated. Messages forwarded during that period may still be stored in that Google account. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; according to Google's own information, data is processed globally, so processing may also take place outside the European Union, in particular in the USA. Further information is available in Google's privacy policy.
4. External links: Mews and Google Maps
Mews
Our website contains a link to the external booking system Mews. The booking system is not embedded in our website. Simply visiting our website does not transfer any data to Mews via this link.
When you click on the link, you leave our website and access the booking system. In doing so, the connection data required for the access, in particular your IP address, is transmitted to the infrastructure that is accessed.
The processing of your data there is explained in the privacy notices provided for the booking system. This statement describes the link on our website; it does not replace the information on processing in the context of a booking.
Google Maps
Our website contains an external link to Google Maps with the label “Get directions”. A Google Maps map is not embedded. Simply visiting our website does not transfer any data to Google Maps via this link.
Only by clicking on the link is Google Maps accessed. In doing so, personal data, in particular your IP address and technical connection data, may be processed by the provider. The provider's privacy notices apply to this processing.
5. Your rights
Subject to the respective legal requirements, you have the following rights:
- Access to your processed personal data pursuant to Art. 15 GDPR.
- Rectification of inaccurate data and completion of incomplete data pursuant to Art. 16 GDPR.
- Erasure of your personal data pursuant to Art. 17 GDPR.
- Restriction of processing pursuant to Art. 18 GDPR.
- Data portability pursuant to Art. 20 GDPR, insofar as the processing is based on consent or a contract and is carried out using automated procedures.
Right to object: Where we process your data on the basis of Art. 6 (1) lit. f GDPR, you may object under Art. 21 GDPR on grounds arising from your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
To exercise your rights, you can reach us using the contact details given in Section 1.
6. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. This is possible in particular with a supervisory authority at your usual place of residence, your workplace or the place of the suspected violation.
For North Rhine-Westphalia, you can contact the Land Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia: