Privacy
AI concept recommendations
On your explicit request, we process the share number, guest count, stay duration and selected module wishes through Lovable Cloud and Lovable AI, using OpenAI as the model provider, to create a tailored concept suggestion. The basis is GDPR Article 6(1)(b) for requested precontractual support or Article 6(1)(f) for general guidance. This feature requests no names, email addresses or free text.
Our website does not store these inputs or suggestions in an inquiry database or browser storage. They appear in the open view; closing ends the view and Stop cancels active generation. Providers may process necessary operational and security data under their applicable terms, including outside the EEA. The recipients, international safeguards, retention criteria and rights described below also apply. Suggestions are non-binding; capacity, feasibility and cost require individual confirmation.
Controller and contact
The controller for this project website is Tüm Holding GmbH, Bethmannstraße 7–9, 60311 Frankfurt am Main, Germany. Privacy inquiries: info@tuemholding.com; telephone +49 1520 790 5555.
Hosting, delivery and security
The website is delivered through Lovable. Hosting and infrastructure providers may process technical access and security data such as IP address, time, requested resources, browser/device information and errors. The purposes are reliable, secure delivery and fault analysis; the basis is GDPR Article 6(1)(f), our legitimate interest in a functioning, secure information service. Necessary platform diagnostics remain enabled. Our website does not pass form contents into diagnostics.
Lovable’s published privacy policy also describes its own processing for platform operation. Its published contractual documents name Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111; its privacy policy names Lovable Labs Sweden AB for the responsibilities described there. Applicable provider terms and roles govern each activity.
Cookie-free visitor statistics
Lovable records for us the pages visited, referral sources, country, browser, operating system, device type, time on site, page speed and errors. Clicks on buttons and links are also recorded. For the AI flow we also measure opening, recommendation request start, first answer display and selected contact channel (email or WhatsApp). These events contain no share numbers, preferences, AI text or form contents.
Without a consent banner, these statistics are recorded for every visitor. Visitor statistics use no cookies, store nothing on your device, retain no IP addresses and do not identify you. Detailed data is retained for 90 days and daily summaries for one year. This concerns visitor statistics, not all possible technical data of the hosting platform. Our non-identifying reach and quality measurement relies on GDPR Article 6(1)(f).
Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.
Language, shortlist and local content
The first preferred browser language determines the display: German and Turkish select those languages; every other language selects English. We use no IP location or secondary preference. An explicitly chosen language is stored locally as thd-language and your requested shortlist as thd-merkliste. “System / Automatic” removes the manual language choice; “Clear shortlist” removes the selection. You may also clear browser data. Storage serves the function you expressly request (TDDDG §25(2) no.2); where personal data is involved, GDPR Article 6(1)(f) applies.
Message fields are not stored locally. Images and fonts load locally. The Google map loads automatically when its section becomes visible; we added no YouTube or advertising widgets. Contact and source links open external services only when intentionally used.
Google Maps
The interactive location map loads automatically from Google when the map section becomes visible. No activation preference is saved. Your explicitly selected map view (satellite or road map) is stored as thd-map-view only in your browser until you change it or clear browser data (TDDDG §25(2) no.2 for the requested function). Loading may transmit your IP address, browser/device details, requested resources and displayed map region to Google. We do not request your device location or send contact contents, shortlist or AI preferences to Google.
Google Ireland Limited and related Google companies process data under their own privacy information, including potentially outside the EEA. Google describes applicable international safeguards, including Standard Contractual Clauses, in its privacy policy. The purpose is geographical presentation of the project; our processing of technical connection data relies on GDPR Article 6(1)(f), a legitimate interest in understandable project location information. Automatic display is not consent. You may prevent transmission by blocking Google resources in your browser; the project plan and the rest of the site remain usable. This does not undo past processing. Google determines retention according to its stated purposes and criteria.
Email and WhatsApp inquiries
Name and reply email are optional; a message is required to prepare an inquiry. Only an intentional click builds an email or WhatsApp link containing the message and selected available shares. The website stores no inquiries in a database and sends nothing itself. You send in your chosen service. Opening a WhatsApp link may already pass the prepared text to WhatsApp, so review what you wish to share.
Recipients of a sent inquiry are Tüm Holding GmbH and the email or WhatsApp providers used for communication. WhatsApp is a service of WhatsApp Ireland Limited and related Meta companies, which may process data under their own terms. Requested precontractual communication relies on GDPR Article 6(1)(b); general inquiries rely on Article 6(1)(f), our legitimate interest in handling them. We request no marketing opt-in.
Recipients, international processing and retention
Technical providers receive data required for hosting, security or communication. Lovable’s published policy describes processing in several countries, including the United States. For restricted international transfers it describes recognized mechanisms, notably EU Standard Contractual Clauses and transfer assessments where required. You may request information about applicable safeguards from the provider or us.
Inquiries are retained as needed for their purpose, statutory retention duties and possible legal claims. Technical log retention depends on necessity, security purposes and applicable provider terms. Local selections remain until cleared in the browser. Separate statistical retention periods are stated above.
Your rights
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction, portability and objection (Articles 15–22). You may object to legitimate-interest processing on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it for the future.
You may complain to a data protection supervisory authority, especially where you live, work or believe an infringement occurred. The Hessian Commissioner for Data Protection and Freedom of Information is a competent contact for our registered location. Contact info@tuemholding.com to exercise your rights.