Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

This policy explains which personal data are processed when you visit nidomar.com and when you make a booking. We do not use analytics or advertising tools, and fonts are hosted locally.

1. Controller

Kevin Mais
Strohblumenweg 67
63457 Hanau
Deutschland
Email: buchung@nidomar.com

2. Hosting and server log files

The website, the booking database and the email mailbox are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. A data processing agreement is in place with STRATO.

With every request, the server stores technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system. This serves secure operation and troubleshooting (Art. 6(1)(f) GDPR). STRATO deletes the log files automatically after a short time.

3. Booking

For a booking we process your name, email address, optionally your phone number, your chosen language, travel dates, number of guests, prices and payment status. A booking is not possible without these details. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

For the key handover, our staff member on site receives your name, your travel dates and, if provided, your phone number.

With Airbnb we only exchange occupied periods to avoid double bookings; no names or contact details are transferred. Nightly rates come from PriceLabs; no personal data are involved there either.

4. Payment via Stripe

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details directly on Stripe's payment page; we do not receive full card details. We send Stripe your email address, the booking reference and the amount. From Stripe we receive a customer and payment method ID and the payment status, so that the balance can be charged automatically before arrival.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Stripe processes some data as an independent controller, for example for fraud prevention and to meet legal obligations, and may transfer data to the USA. Stripe is certified under the EU-US Data Privacy Framework and also uses standard contractual clauses. More information: stripe.com/privacy.

If you choose SEPA Direct Debit, you enter your IBAN directly on Stripe's payment page and grant a SEPA Direct Debit mandate for the deposit and the balance before arrival. Stripe stores the IBAN and the mandate; we only receive an identifier of the payment method and the payment status, not your full IBAN.

5. Email

We send booking confirmations, payment reminders and replies to enquiries from our mailbox at STRATO. If you write to us, we process your message in order to reply (Art. 6(1)(b) or (f) GDPR).

6. Guest registration under Spanish law

Under Real Decreto 933/2021 we must record identity and contact details of all guests aged 14 and over and transmit them to the Spanish Ministry of the Interior. You enter the names and dates of birth of all travellers on the “My booking” page before arrival; we record the ID details at the key handover. The host also receives the names and dates of birth by email. The legal basis is a legal obligation (Art. 6(1)(c) GDPR). The data are kept for as long as this regulation requires (currently three years).

7. Google Maps (only with your consent)

The map in the “Location” section only loads when you click “Load Google Maps”. Only then are data such as your IP address transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and possibly to Google LLC in the USA (certified under the EU-US Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Your choice is stored in your browser. You can withdraw your consent at any time via the “Cookie settings” link at the bottom of the home page. Google's privacy policy: policies.google.com/privacy.

8. Browser storage

The website does not set cookies. Only your language choice and, if given, your consent to Google Maps are stored in your browser's local storage. The language choice is required to display the site as you requested (Section 25(2) TDDDG). You can delete both entries in your browser at any time.

9. Retention

• Data of completed bookings are kept for as long as statutory retention obligations apply, in particular tax obligations (up to ten years).
• Reservations that were never paid are deleted automatically after 180 days.
• Emails are deleted when they are no longer needed for the booking or for retention obligations.

10. Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. Please write to buchung@nidomar.com.

You may also lodge a complaint with a data protection supervisory authority, in particular in the EU country of your residence, your place of work or the alleged infringement.

11. Encryption

The website uses TLS encryption, recognisable by “https://” and the padlock symbol in the address bar.

Last updated: 6 November 2026