Privacy & Imprint

As at 7 September 2026

Here you can find out what personal data is processed when you visit this website, submit an enquiry or use optional services.

1. Data controller and contact details

The data controller for this website is:

Chemnitzer Wohnbau Projekt GmbH
Flats Fichtelberg View
Vierenstr. 1
09484 Kurort Oberwiesenthal, Germany
Telephone: +49 37348 959127
E-mail: info@fichtelbergerblick.de

If you have any questions regarding data protection or wishing to exercise your rights, please use these contact details. Further company details can be found in the legal notice on this page.

2. Operation, hosting and security

When you access the website, your browser transmits technical data to our servers. This includes the IP address, date and time, the requested URL, the HTTP status, the amount of data transferred and, where applicable, the referring page and details of your browser and operating system. This data is processed in server logs for the purpose of delivering the website, analysing errors and defending against attacks. IP addresses may be personally identifiable.

The website is hosted by Web Shop Hosting, Alpha Bit Ink UG, Gartenfelder Straße 29–37, 13599 Berlin. Technical service providers may be granted access to the data required for hosting, maintenance and support.

We use WP Cerber to protect against unauthorised access. This locally installed security programme processes, in particular, IP addresses, access times, requested addresses and security-related events. The retention periods set are 90 days for the activity log and 30 days for the traffic log. The recording of form fields in the traffic log is disabled.

The connection to the Cerber Security Cloud is enabled. IP addresses identified as malicious and details of security incidents may be transmitted to Cerber Tech Inc., 1732 1st Ave #20291, New York, NY 10128, USA, for the purpose of detecting attacks. This security service is not used for visitor statistics or advertising. Further information: WP Cerber’s Privacy Notice.

The legal basis for the secure and proper operation of the website is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing the website, protecting enquiries and preventing misuse. Data is transmitted between your browser and this website in encrypted form via HTTPS.

3. Cookies and local features

The website does not use any analytics or advertising cookies. Technically necessary cookies may be used for security functions and to allow authorised website administrators to log in. They are not used to track your behaviour across different websites. Section 25(2)(2) of the TDDDG applies to strictly necessary storage or access; where personal data is processed, we base this on Article 6(1)(f) of the GDPR.

The language versions are provided via TranslatePress and different page URLs. Fonts are loaded from our own web server. No connection is made to Google Fonts when the fonts are loaded.

No general cookie consent banner is displayed for standard website functions or the statistics described below. A Google Map, however, remains disabled until you expressly enable it. You can delete or block cookies in your browser; this may restrict certain functions.

4. Enquiries and contact forms

If you contact us via the form, by email or by telephone, we will process your contact details and the content of your enquiry, such as your name, email address, travel dates or preferred accommodation. Mandatory fields are marked on the relevant form. Without the information required to respond, we will be unable to process your enquiry.

Form submissions are sent to us via email. For the existing contact forms, submissions are also stored in the WordPress database; the form for The Loft Bergblick is limited to email submission. Depending on the form, the submission may also include technical details such as the time, page URL, IP address and browser identifier. A locally run anti-spam filter checks for hidden form fields. Google reCAPTCHA is not loaded in the contact form.

For enquiries regarding bookings and contracts, the legal basis is Article 6(1)(b) of the GDPR. We process other enquiries on the basis of our legitimate interest in communication pursuant to Article 6(1)(f) of the GDPR. We do not use your enquiry for a newsletter or to automatically subscribe you to advertising. The contents of the form fields are not transferred to the visitor statistics.

5. Visitor statistics with Plausible

We use a self-hosted Plausible instance at analytics.affordable-website.de. The technical service is provided via bezahlbare-webseite.de, Alexander Kinderknecht, Straße nach Luckenwalde 2, 15838 Am Mellensee.

The statistics show page views, referring pages, campaign details, browser and device types, and approximate geographical location. Clicks on external links and file downloads are also counted. A click on the booking portal is recorded as an outgoing click and does not constitute proof of a completed booking.

Plausible does not use cookies or any permanent identifiers in the browser for this purpose. IP addresses and browser identifiers are processed technically, amongst other things to derive approximate location data and a daily-changing identifier. Full IP addresses are not stored in the visitor statistics. The technical identifier is not used to link visits across different websites or to track visits over several days. Names, email addresses and messages from the contact forms are not transmitted to Plausible.

We use the aggregated analytics to improve content, navigation and booking processes. The legal basis is Article 6(1)(f) of the GDPR. Our commitment to data-minimal reach measurement is ensured by avoiding the use of persistent visitor profiles, advertising networks and analytics cookies. You may object to this processing on grounds relating to your particular situation; to do so, please contact us at the address given above. Information on the technical procedure: Data processing at Plausible. The information provided there regarding the hosting of the cloud service does not automatically apply to our self-hosted instance.

To analyse our visibility in Google Search, we have linked Google Search Console to Plausible. We use aggregated search performance data provided by Google, such as search terms and click counts. This integration does not result in any additional Google tracking code being loaded onto our website.

6. Google Maps – only with your consent

The provider within the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Map locations are initially replaced by a local placeholder. Only when you select „Agree & Load Map“ will your browser connect to Google Maps. In doing so, Google receives, in particular, your IP address, technical browser information and the requested map address. Google may use cookies or similar technologies and, where applicable, link your usage to a signed-in Google account. Data may be processed in the USA.

Enabling this feature is optional. Addresses and contact details are also available without Google Maps. The legal basis for loading the map is your consent under Article 6(1)(a) of the GDPR and, insofar as information is stored on or read from your device, Section 25(1) of the TDDDG.

Your selection applies only to the activated map on the current page and is not permanently saved. Click „Close map & withdraw consent“ to remove the embed. The map will remain disabled the next time you visit the page. This withdrawal applies going forward; we cannot retrieve or delete data already transmitted to Google or cookies set there as a result.

With regard to international data transfers, Google specifically cites adequacy decisions, the certification of Google LLC under the EU–US Data Privacy Framework and, where necessary, standard contractual clauses. Details and sources for the safeguards: Google’s framework for data transfers. For further information on recipients, retention periods and your options for managing your settings, please see the Google’s Privacy Policy.

7. Booking portal and external links

Buttons such as „Book“ or „Prices & Availability“ link to the external portal neo.cultbooking.com. The booking form is not automatically embedded on this website. You will only be connected to the booking provider when you open the link.

The booking application is operated by Cultuzz Digital Media GmbH, Ullsteinstraße 130, 12109 Berlin, on behalf of the accommodation provider. Contact details, travel details and, where applicable, payment details entered there are processed for the purpose of handling your booking and are transmitted to us to the extent necessary. The legal basis for our processing in connection with the booking is Article 6(1)(b) of the GDPR; statutory retention obligations are based on Article 6(1)(c) of the GDPR. Details about the portal: CultBooking’s Privacy Policy.

Links to Instagram, Facebook, Booking.com and other external sites are standard hyperlinks. No social media plugins or external review programmes are automatically loaded when clicking on them. When you open a link, the privacy policy of the respective provider also applies.

8. Retention period and recipients

We retain personal data for as long as it is necessary for the relevant purpose. Enquiries are deleted once they have been processed, provided there are no further business requirements, outstanding claims or statutory retention obligations. Contractual and invoicing documents may be subject to time limits under commercial and tax law. They will be deleted once the relevant retention period has expired.

Server logs are retained for operational and fault analysis purposes and are deleted as part of the log rotation process. In the event of a specific security incident, relevant entries may be required until the matter has been clarified and, where necessary, for the purposes of legal proceedings. The retention periods for the WordPress security log are set out in Section 2. Aggregated visitor statistics are used for long-term comparisons; no permanent, personally identifiable visitor profile is maintained.

Access is granted to the persons responsible for processing the data and to the necessary technical service providers, in particular for hosting, email, maintenance, security, statistics and booking processing. Data will only be disclosed to public authorities where there is a legal obligation or other statutory authority to do so.

9. Your rights

Subject to the statutory conditions, you have the right to access your data (Art. 15 GDPR), to have it rectified (Art. 16), to have it erased (Art. 17), to restrict its processing (Art. 18) and to data portability (Art. 20).

Objection: Where we process data on the basis of Article 6(1)(f) of the GDPR, you may object to such processing on grounds relating to your particular situation, in accordance with Article 21 of the GDPR. We will then cease to process this data, unless there are compelling legitimate grounds for doing so or grounds for the establishment, exercise or defence of legal claims. You may object to processing for the purposes of direct marketing at any time.

Cancellation: You may withdraw your consent at any time with effect for the future. This does not affect the lawfulness of any processing carried out prior to the withdrawal. The button described above is available on the map.

Complaint: You may lodge a complaint with a data protection supervisory authority, in particular at your usual place of residence, your place of work or the location of the alleged infringement. For Saxony, you can contact the Saxon Data Protection and Transparency Commissioner at: PO Box 11 01 32, 01330 Dresden; Visiting address: Maternistraße 17, 01067 Dresden; Telephone: +49 351 85471-101; Email: post@sdtb.sachsen.de. Further information and ways to make a complaint: www.datenschutz.sachsen.de.

We do not use automated decision-making, including profiling within the meaning of Article 22 of the GDPR, on this website which produces legal effects concerning you or similarly significantly affects you.