Privacy
1. Controllers
The controllers responsible for the processing of personal data described here are:
Friedrich und Andrea Hecker
Hildebold Apartments
Hildeboldplatz 9
50672 Köln
Germany
E-Mail: kontakt@hildeboldapartments.de
Phone: +49 1523 3551157
Last updated: 28 September 2026
This privacy policy explains how personal data is processed when you visit our website at hildeboldapartments.de and hildeboldapartments.com, including the respective www addresses, and when you contact us.
2. Provision of the website and hosting
Our website is provided via the Lovable platform. The platform provider is Lovable Labs Incorporated, USA.
When you access the website, the hosting infrastructure used processes technical access data. This may include in particular your IP address, the date and time of access, the page accessed, information about your browser and operating system, and technical status and error data.
This processing is necessary to deliver the website, ensure it functions properly and detect technical faults or abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Recipients of the technical data are the hosting and infrastructure service providers used to provide the website. Processing outside the European Union or the European Economic Area, in particular in the USA, is possible.
Lovable publishes information on data processing, sub-processors and contractual data protection arrangements at:
Technical access data is only needed for as long as required for delivery, error analysis and security. In the event of specific security incidents, longer retention may be necessary to investigate and defend against the incident.
3. Cookies, browser storage and fonts
We do not use analytics or marketing tools or social media plugins on our website. There is no newsletter and no contact form.
Where the website stores technically necessary information in browser storage, this serves exclusively for operation and navigation. This may include temporarily storing the scroll position in sessionStorage so that your previous position is restored when you return to a page. This function is not used to create user profiles or for cross-site tracking.
Where storage or access is strictly necessary for the function you have expressly requested, this is based on Section 25(2) no. 2 TDDDG. Where personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in functional and user-friendly navigation.
The fonts used are provided locally. No connection to an external font provider is established to load them.
4. Contact by email or telephone
If you contact us by email or telephone, we process the personal data you provide insofar as this is necessary to handle your enquiry. This may include your name, email address, telephone number, the content of your enquiry and any attachments.
If your enquiry relates to the preparation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. For other enquiries, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and answering your enquiry.
You decide which information you provide. Without the information required for your request, we may not be able to answer your enquiry or prepare a requested contract.
Email processing
Our business email mailboxes are operated via Google Workspace. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This involves processing in particular sender and recipient addresses, message content, attachments and technical communication data. Google processes the data as a processor on the basis of the Google Workspace data processing terms.
Further information is available in the Google Workspace data processing terms and in Google's privacy policy.
Retention period
We keep enquiries and related correspondence for as long as necessary to handle the matter and, where applicable, to perform a contract.
Where statutory retention obligations apply, we store the documents concerned for the prescribed period. The commercial and tax law provisions applicable to the specific case are particularly relevant. Further retention may be necessary where documents are required for the establishment, exercise or defence of legal claims.
Once the respective reason for retention no longer applies, the data is deleted.
5. External link to the Mews booking system
Our website contains a link to the external booking system Mews. The booking system is not embedded in our website.
Merely visiting our website does not establish a connection to Mews via this link. If you click the link, you leave our website and open the booking system. The connection data required for this, in particular your IP address and technical browser information, is transmitted to the infrastructure used there.
If you then enter details for a booking, these are processed as part of the booking process. Information on the controllers and service providers involved, the data processed, legal bases and retention periods can be found in the privacy information provided there.
This section describes the link from our website. It does not replace the separate privacy information on booking and on your stay.
6. External link to Google Maps
Our website contains an external link to Google Maps, for example labelled “Plan route”. No Google Maps map is embedded.
Merely visiting our website does not establish a connection to Google Maps via this link. The external service is only accessed when you click the link. In particular, your IP address, technical connection data and, where applicable, information about your Google account may be processed.
The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information can be found in Google's privacy policy.
7. Your rights
Subject to the respective legal requirements, you have the following rights:
- Access to information about the processing of your personal data under Art. 15 GDPR.
- Rectification of inaccurate and completion of incomplete data under Art. 16 GDPR.
- Erasure of your personal data under Art. 17 GDPR.
- Restriction of processing under Art. 18 GDPR.
- Data portability under Art. 20 GDPR, where processing is based on consent or a contract and carried out by automated means.
Right to object
Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you may object under Art. 21 GDPR on grounds relating to your particular situation.
We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Withdrawal of consent
Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing up to the withdrawal remains unaffected.
To exercise your rights, you can contact us using the details given in section 1.
8. Right to lodge a complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority.
This is possible in particular with a supervisory authority at your habitual residence, your place of work or the place of the alleged infringement.
For North Rhine-Westphalia, you can contact the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW):