Privacy Policy

This Privacy Statement applies to the use of StayToEnjoy including website, app, user account, profiles, social and community features, messaging, marketplace, booking, live streaming, live shopping, business dashboards, and support and security-related processes.

• We process data to provide, secure and develop our platform.
• Depending on the use, we process, for example, account, profile, communication, transaction, device and usage data.
• Certain data are processed for the purpose of contract fulfillment, others are processed on the basis of legal obligations, legitimate interests or your consent.
• You have extensive rights, including information, rectification, deletion, objection and data portability.

Responsible for data processing within the meaning of data protection laws is:

If you have questions about data protection, the exercise of your rights or data protection concerns, you can contact us at any time using the contact details mentioned above.

In particular, server logs, technical metadata, usage data, security events and communication data may be processed in the context of hosting and platform operation.

• Access restrictions and role/rights management
• Transport encryption and technical securing of connections
• Monitoring, error analysis and protection against abuse
• Backups, recovery and security processes

We process data to the extent necessary to provide user accounts, perform functions of the platform, make purchases, bookings, communications or business functions technically possible.

Insofar as we obtain your consent for certain processing operations, the processing takes place on the basis of that consent.

Where permitted, we process data to protect legitimate interests, in particular for:

• Operation, security and stability of the platform
• Abuse, fraud and risk detection
• Product improvement, analysis and further development
• Moderation, Trust & Safety and enforcement of platform rules
• Internal administration, documentation and legal protection

In order to detect false reviews, automated bot reviews, multiple accounts and coordinated spam, and to protect the integrity of reviews, we only process data-minimized behavioral signals when submitting a review:

• your IP address is only shortened (on the subnet /24 for IPv4 or /48 for IPv6) never in plain text
• your browser and operating system type (buried, no complete device fingerprint)
• a device-specific identification if your device is already using it for registration
• Date, valuation and accounting reference for the assignment

The legal basis is our legitimate interest in fraud and abuse prevention (Art. 6 (1) (f) DSGVO).90 days automatically deleted and are intended exclusively for the purpose of preventing abuse.

Processing may also take place insofar as it is necessary to comply with legal obligations, such as commercial, tax, supervisory or data protection requirements.

When visiting our website or app, technical information is automatically collected to deliver the platform, ensure security and analyze errors.

• IP address
• Date and time of access
• Used pages or resources
• Browser type and browser version
• Operating system
• Referrer URLs
• Technical status and log data

Technical data may be processed to detect and correct performance problems, crashes, charging problems, safety events or malfunctions.

When you create an account or sign in, we process the data necessary to set up your user account, manage access and implement security measures.

As part of your profile and settings, we process the information you provide to provide personalized features and to store your preferences.

To secure accounts and platform features, we may process security-related information, login metadata, verification status, or abuse indicators.

In connection with purchases, orders, reservations, appointments or bookings, we process the necessary data for technical handling, documentation, communication and abuse prevention.

Where payment functions are available on StayToEnjoy, payment data may be processed by external payment service providers.

Regardless of the actual payment process, we may process transaction-related information, such as order status, booking references, cancellation or refund references, communication data and abuse-relevant signals.

If you contact us, for example by e-mail, form, support centre or as part of enquiries, we process your information for processing your request and for enquiries.

In support, complaint, security or trust and safety cases, we may also process case-related information, content, communications and evidence.

We use cookies and similar technologies insofar as this is necessary or agreed by you for the operation, security, ease of use, analysis or optional functions of the platform.

• Cookies required for basic functions, security and session management
• Functional cookies for preferences, language and comfort functions
• Analysis and performance technologies for measurement and improvement
• Optional marketing or reach technologies, where used and permitted

Where required by law, we obtain your consent for unnecessary cookies or similar technologies. You can change or withdraw your consent at any time with effect for the future.

• Stage 1 (Deactivation): After requesting deletion, your account will be activated immediately invisibly. Within 30 days, you can revoke the deletion by simply logging in.
• Phase 2 (Final deletion): At the end of the 30 days, your data will be irrevocably deleted from the active systems within another 14 days including profile, settings, addresses, contributions and searches.
• Stage 3 (security copies): Data for system security reasons shall remain in backups for a maximum of three months until they are overwritten in turn.

What cannot be deleted for legal reasons remains limited (Article 18 GDPR): invoices and proofs of payment are subject to a 10-year retention obligation (Article 147 AO). Reviews written by you remain anonymous; messages you have sent to others remain visible to the recipient then only appears as the sender Deleted account".