Data privacy is a matter of trust, and your trust matters to Stayway. It is therefore important to us that your personal data is protected and that its collection, processing and use in relation to Stayway’s services in our app and on our website stayway.de complies with the law. In this Policy, we want to tell you about how we collect and use data, in order to give you an overview of how your personal data will be used.
2. Name and contact details of the controller responsible for processing and the company’s Data Protection Officer
3. The purposes for which data is processed, the legal basis and legitimate interests pursued by Stayway or a third party, as well as categories of recipients
3.1. Accessing our website/application
When you access our website/application, the browser used on your device automatically sends information to the server of our website/application and temporarily stores it in what is known as a log file. We have no control over this. The following information will also be collected without any action on your part and be stored until it is automatically deleted: the IP address of the requesting internet-enabled device the date and time of access the name and URL of the retrieved file the website/application from which access took place (the Referrer URL) the browser you are using, and potentially the operating system of your internet-enabled computer, as well as the name of your access provider the device used (e.g., a desktop computer or a smartphone) the language of the browser you are using The legal basis for processing your IP address is Article 6 (1) (f) of the General Data Processing Regulation (GDPR). Our legitimate interest is based on the purposes of data collection listed below. We would like to point out that we are unable to draw any direct conclusions regarding your identity from the data that is collected, and that we refrain from doing so. We use the IP address of your device and the other data listed above for the following purposes: ensuring that a trouble-free connection is established ensuring the comfortable use of our website/application the evaluation of system security and stability We also use what are known as cookies for our website/application, as well as tracking tools, targeting methods and social media plug-ins. The exact procedures used and how your data are used for this purpose are explained in more detail below.
3.2. Booking inquiries
We do not offer accommodation services ourselves. Rather, we enable you to book accommodation services offered by our partners. When a booking inquiry is received, we collect the following data solely in order to forward it to our partners: the desired arrival and departure dates your first and last name the number of guests your email address your telephone number (optionally) your message to the landlord The collection of the aforementioned data and its transmission to our partners is a pre-contractual step that is required to enter into the contract with your respective partner (Article 6 (1) (b) GDPR).
3.3. Data processing for advertising purposes
On our website, we offer you the opportunity to sign up for our newsletter. You can revoke your consent at any time with effect for the future. To do so, you need only click the unsubscribe link.
3.3.2. Product recommendations
We send you emails which contain product recommendations. You will receive these product recommendations if you have subscribed to an alert. We do so in order to provide you with information about products from our offerings that may interest you based on your recent searches. If you do not want to receive product recommendations from us, you can let us know at any time. You can find our contact details under section 2. Naturally, you will also find an unsubscribe link in every email. The legal basis for the aforementioned processing is Article 6 (1) (f) GDPR. Processing existing customer data this way for advertising purposes is deemed to be a legitimate interest.
3.3.3. Right to object
You have the right, at any time and at no charge, to object to data processing for the aforementioned purposes, separately for each respective communication channel, and with effect for the future. To do so, you need only send an email to firstname.lastname@example.org or send a letter to the Stayway address mentioned in section 2 above. In the event that you object, the relevant contact address will be blocked for further promotional processing. We point out that, in exceptional cases, advertising material may temporarily continue to be sent to you even after your objection has been received. This is due to technical reasons related to the lead time required for advertisements and does not mean that your objection will not be observed by us. Thank you for your understanding.
3.4. Cookies – general information
Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website or use our app. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. The information stored in the cookie is tied to the specific device used. However, this does not mean that we are immediately aware of your identity. In part, cookies are used to make the use of our service more pleasant for you. For example, we use what are known as session cookies to detect that you have already visited individual pages on our website. These are automatically deleted after you leave our website. In addition, to ensure user-friendliness we also use temporary cookies, which are stored on your device for a specific period of time. If you visit our website again to use our services, it is automatically detected that you have already visited us, as well as what information you entered and the settings you used, so that you do not have to reenter them.
3.5. Analytical tools
In order to customize and continuously optimize our websites in line with users’ needs, we deploy tools on the basis of Article 6 (1) (f) GDPR which permit us to analyze the use of our website.
3.5.1. Google Analytics
We use Google Analytics, a web analytics service provided by Google. In doing so, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, e.g.
- browser type/version
- operating system used
- Referrer URL (the previously visited page)
- hostname of the accessing computer (IP address)
- time of server request
3.5.2. New Relic
In our app, we use the analytics service of Firebase, Inc., a mobile analytics service provided by Google Inc. The analytics service is implemented in our app via a development environment (SDK – Software Developer Kit). The information generated by the development environment, e.g.
hashed (anonymized) IP address
mobile identifiers such as the Advertising ID for iOS (IDFA) or the Google Advertising ID
installation and initial opening of an app on your mobile device
your interaction within an app (e.g., in-app purchases, registration)
viewed and clicked ads
is collected and used by Firebase Inc. to evaluate the use of the app, to compile performance reports on app activity, and to provide other services related to the use of the app for purposes of market research and customization of the app. Under no circumstances will the collected data be combined with other data that Firebase obtains via other apps.
We use HasOffers, a data processing service provided by Tune, Inc., Attn: Legal Department, 2200 Western Avenue, Suite 200, Seattle, WA 98121, that collects and analyzes end user data for advertisers. HasOffers collects the following types of information from Users to help clients optimize and measure their advertising network, affiliate and publisher relationships:
Imprecise Geographic Location Data derived from IP address and/or wifi networks.
You can disable cookies in most internet browsers. You can also disable collection of Ad Identifiers for targeted advertising by enabling the Limit Ad Tracking setting on their smartphone. You can also reset the Ad Identifier altogether using their smartphone’s privacy settings.
The targeting measures listed below and used by us are implemented on the basis of Article 6 (1) (f) GDPR. Targeting is used to perform targeted advertising. Through the targeting measures we use, we want to make sure that advertisements which are geared to your interests are displayed on your devices.
3.6.1. Google AdWords
3.6.2. Google Dynamic Remarketing
3.6.3. Bing Ads
3.6.5. Facebook Custom Audiences
3.6.6. Option to object/opt-out
You can prevent the targeting technologies we described by activating the appropriate cookie setting in your browser (see also section 3.6.). In addition, you have the option of deactivating preference-based advertising with the help of the preference manager available here: http://www.youronlinechoices.com/uk/your-ad-choices.
4. Contact form
We provide you with a contact form which you can use to ask us questions by entering your name and your email address. The use of the contact form is voluntary, and your data is processed in order to fulfill our contractual service obligations (Article 6 (1) (b) GDPR).
5. Your rights
In addition to the right to revoke the consent you have granted to us, you are entitled to the following further rights if the relevant legal requirements apply:
Right of access to information about your personal data stored with us pursuant to Article 15 GDPR
Right of rectification of inaccurate personal data and right to have incomplete personal data completed pursuant to Article 16 GDPR
Right to erasure of your personal data stored by us pursuant to Article 17 GDPR
Right to restriction of processing of your data pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
5.2. Right to object
Version 1.0 – As of 01 January 2019