Privacy policy
This page explains which personal data we process when you visit this website or make a booking, for what purpose and on what legal basis.
1. Controller
Oksana Humburg-Gorbunow
Pension Am Mellensee
Mellenseestraße 2, 15838 Am Mellensee, Germany
Phone: 0173 511 56 12
Email: pensionammellensee@gmail.com
2. Visiting the website and hosting
The website is operated by Vercel Inc. (USA) on servers in Frankfurt am Main. When you visit, the server processes technically necessary data: IP address, time, page requested, browser and operating system. This is required to deliver the page and protect it against attacks (Art. 6(1)(f) GDPR). These logs are deleted automatically after a short time.
Fonts are served from our own server, not from Google.
3. Cookie-free audience measurement
We use Vercel Web Analytics and Vercel Speed Insights to see which pages are visited and how fast they load. No cookies are set and no IP addresses are stored; visits cannot be linked to a person or tracked across days or websites. The legal basis is our legitimate interest in a working, fast website (Art. 6(1)(f) GDPR).
4. Booking
For a booking we process the details from the form: name, email, phone, address, travel dates, room, number of guests, arrival time, your message and the payment method chosen. For company bookings we also process the company name, address, VAT ID, invoice email and reference, and for extras with a parking space (for example the wallbox) the vehicle registration number. We need this data to complete the booking and provide your stay (Art. 6(1)(b) GDPR) and to meet legal obligations such as tax law (Art. 6(1)(c) GDPR). Without it, booking through the website is not possible.
The data is stored in a database operated by Neon, Inc. (USA) on servers in Frankfurt am Main.
To avoid double bookings we synchronise our calendar with Booking.com. Only occupied periods per room are shared, no names or contact details.
5. Emails
After booking you receive emails to confirm your email address, the booking confirmation and, where applicable, messages about payment or cancellation. We send them through Resend (Plus Five Five, Inc., USA) with servers in Ireland. A notification about your booking is sent to our mailbox at Google (Gmail, Google Ireland Limited). The legal basis is the performance of the booking (Art. 6(1)(b) GDPR).
6. Payment with PayPal
If you choose PayPal, you are redirected to PayPal. We transmit the amount, booking code and a description of the booking; you enter your payment details directly with PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, acting as an independent controller. The legal basis is the performance of the booking (Art. 6(1)(b) GDPR). See the PayPal privacy statement.
7. Google Maps
The map on the home page only loads once you click on it. Only then does your browser connect to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and transmit your IP address among other data; data may be transferred to the USA. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Links to our Google business profile only open Google when you click them.
8. Review request
If you agree when booking, we send you one email the day after departure with a link to our Google profile (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by emailing us. Reviews are written directly on Google, where the Google privacy policy applies. Reviews previously submitted through this website are stored but no longer public; we delete them on request.
9. Browser storage
If you choose the light or dark display, your browser remembers this choice in local storage (pam_farbe). This is necessary for the function you requested (§ 25(2) no. 2 TDDDG). The website sets no other cookies for guests; only the hosts' login to the administration area uses cookies.
10. Recipients and transfers to third countries
The service providers named above process data on our behalf (Art. 28 GDPR). Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework (Art. 45 GDPR) or the European Commission's standard contractual clauses (Art. 46 GDPR). Bank transfers are processed by our bank.
11. Retention
We keep booking data as long as it is needed for the stay and any follow-up questions. Invoices and accounting records are kept as long as commercial and tax law require (§ 147 AO, § 257 HGB, up to ten years). The data is then deleted.
12. Your rights
You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on legitimate interests (Art. 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. Simply send us an email.
You can also lodge a complaint with a supervisory authority, for example the Brandenburg data protection commissioner (Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
No automated decision-making or profiling takes place.
Last updated: October 2026
This is a translation for your convenience. Only the German version is legally binding.