Data protection

As of 17 August 2025

Introduction

We (Backbord21502 GmbH) take the protection of our website users' data very seriously and are committed to protecting the information that users provide to us in connection with their use of our website. Furthermore, we are committed to protecting and using your data in accordance with applicable law.
This privacy policy explains our practices regarding the collection, use and disclosure of your data through the use of our website when you access the services via your devices.
Please read the privacy policy carefully and ensure that you fully understand our practices regarding your data before using our services. If you have read and fully understood this policy and do not agree with our practices, you must stop using our website. By using our services, you agree to the terms of this privacy policy. Your continued use of the services constitutes your agreement to this privacy policy and any changes to it.

In this privacy policy, you will learn:

• What data we collect

• How we collect data

• Why we collect this data

• Who we share the data with

• Where the data is stored

• How long the data is retained

• How we protect the data

• Updates or changes to the privacy policy

What data do we collect?

Below is an overview of the data we may collect:

• Unidentified and unidentifiable information that you provide during the registration process or that is collected through your use of our services (‘non-personal data’). Non-personal data does not allow any conclusions to be drawn about who it was collected from. The non-personal data we collect consists mainly of technical and aggregated usage information.

• Individually identifiable information, i.e. all information that can be used to identify you or could be used to identify you with reasonable effort (‘personal data’). The personal data we collect through our services may include information requested from time to time, such as names, email addresses, addresses, telephone numbers, IP addresses and more. When we combine personal data with non-personal data, we treat it as personal data for as long as it remains combined.

How do we collect data?

The following are the main methods we use to collect data:

• We collect data when you use our services. This means that when you visit our website and use our services, we may collect, record and store information about your usage, sessions and related information.

• We collect data that you provide to us yourself, for example when you contact us directly via a communication channel (e.g. email).

• We may collect data from third-party sources as described below.
   

Why do we collect this data?

We may use your data for the following purposes:

• to provide and operate our services;

• to develop, adapt and improve our services;

• to respond to your feedback, enquiries and requests and offer assistance;

• to analyse requirements and usage patterns;

• for other internal, statistical and research purposes;

• to improve our data security and fraud prevention capabilities;

• to investigate violations and enforce our terms and policies, and to comply with applicable law, regulations, and government orders;

• to send you updates, news, promotional materials, and other information related to our services. In the case of promotional emails, you can decide for yourself whether you wish to continue receiving them. If not, simply click on the unsubscribe link in these emails.

Who do we share this data with?

We may share your data with our service providers in order to operate our services (e.g. storage of data via third-party hosting services, provision of technical support, etc.).

We may also disclose your data in the following circumstances: (i) to investigate, detect, prevent or take action against illegal activities or other misconduct; (ii) to establish or exercise our rights of defence; (iii) to protect our rights, property or personal safety, as well as the safety of our users or the public; (iv) in the event of a change of control at our company or one of our affiliated companies (by way of a merger, acquisition or purchase of (substantially) all assets, etc.); (v) to collect, store and/or manage your data through authorised third-party providers (e.g. cloud service providers), to the extent that this is appropriate for business purposes; (vi) to work with third-party providers to improve your user experience. To avoid any misunderstanding, we would like to point out that we cannot transfer or disclose non-personal data to third parties at our own discretion or use it in any other way.

Cookies and similar technologies
This website uses cookies and similar functions to process device information and personal data. The processing serves to integrate content, external services and third-party elements, statistical analysis/measurement, personalised advertising and the integration of social media. Depending on the function, data is passed on to third parties and processed by them in countries where there is no adequate level of data protection, e.g. the USA. Your consent is always voluntary, not required for the use of our website, and can be refused or revoked at any time on our site.

Wix Analytics
We use Wix Analytics to analyse visitor behaviour on our website. Data such as your IP address, pages visited, length of stay and other information is collected and processed by Wix. This data is used to optimise our website and provide you with a better user experience. The legal basis for this data processing is [consent/legitimate interest pursuant to Art. 6 (1) (a)/(f) GDPR]. We have concluded a data processing agreement with Wix and your data will be processed in accordance with the applicable data protection regulations. The complete DPA can be found here. You have the right to object to data collection by Wix Analytics at any time.

The user is NOT connected to an advertising service.
We do not share your email address or other personal data with advertising companies or advertising networks.


Where do we store the data?

Non-personal data
Please note that our companies and our trusted partners and service providers are located around the world. For the purposes explained in this privacy policy, we store and process all non-personal data that we collect in different jurisdictions.

Personal data
Personal data may be maintained, processed and stored in the United States, Ireland, South Korea, Taiwan, Israel and, to the extent necessary for the proper provision of our services and/or as required by law (as further explained below), in other jurisdictions.

How long is the data retained?

Please note that we retain the data we collect for as long as necessary to provide our services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements.
We may correct, supplement, or delete inaccurate or incomplete data at any time at our sole discretion.

How do we protect your data?

The hosting service for our website provides us with the online platform through which we can offer you our services. Your data may be stored via our hosting provider's data storage, databases and general applications. It stores your data on secure servers behind a firewall and offers secure HTTPS access to most areas of its services.

Notwithstanding the measures and efforts taken by us and our hosting provider, we cannot and do not guarantee absolute protection and security of the data you upload, publish or otherwise share with us or others.
For this reason, we ask that you set secure passwords and, where possible, refrain from sharing confidential information with us or others that you believe could cause you significant or lasting harm if disclosed. As email and instant messaging are not considered secure forms of communication, we also ask that you refrain from sharing confidential information via these communication channels.

As an EU resident, you may:

​

• request confirmation as to whether personal data concerning you is being processed and request access to your stored personal data and certain additional information;

• request the receipt of personal data that you have provided to us in a structured, commonly used and machine-readable format;

• request the correction of your personal data stored by us;

• request the deletion of your personal data;

• object to the processing of your personal data by us;

• request the restriction of the processing of your personal data, or

• lodge a complaint with a supervisory authority.

Please note, however, that these rights are not unlimited and may be subject to our own legitimate interests and regulatory requirements. If you have general questions about the personal data we collect and how we use it, please contact us as indicated below.
In the course of providing the Services, we may transfer data across borders to affiliated companies or other third parties and from your country/jurisdiction to other countries/jurisdictions worldwide. By using the Services, you consent to the transfer of your data outside the European Economic Area (EEA).

If you are located in the EEA, your personal data will only be transferred to locations outside the EEA if we are satisfied that an adequate or comparable level of protection for personal data exists. We will take appropriate steps to ensure that we have adequate contractual arrangements in place with our third parties to ensure that appropriate security measures are taken to minimize the risk of unlawful use, alteration, deletion, loss, or theft of your personal data and that these third parties act in accordance with applicable laws at all times.

Updates or changes to the privacy policy

We may revise this privacy policy from time to time at our discretion; the version published on the website is always up to date (see “Status” information). We ask you to check this Privacy Policy regularly for changes. If there are significant changes, we will post a notice on our website. If you continue to use the services after being notified of changes to our website, this constitutes your confirmation and consent to the changes to the Privacy Policy and your agreement to be bound by the terms of these changes.

Responsible authority

If you have any general questions about our services or the data we collect about you and how we use it, please contact us at:

Operating company:

Backbord21502 GmbH
Bult 2
21029 Hamburg, Germany
info@backbord21502.de




Privacy Policy RoomRaccoon (Our partner for online room reservations):

RoomRaccoon respects the privacy of its website visitors, in particular their rights regarding the automatic processing of personal data. For this reason, we have formulated and implemented a policy that offers our customers complete transparency regarding the processing of personal data, its purpose(s), and the options for exercising their legal rights in the best possible way. If you would like more information about the protection of personal data, please visit the website of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/nl.

As long as you do not accept the use of cookies and other tracking devices, we will not place any non-anonymized analytical cookies and/or tracking cookies on your computer, mobile phone, or tablet. By continuing to visit this website, you accept these terms of use and consent to the use of cookies and other tracking systems, unless we have provided another method for accepting cookies on our website.

The currently available version of this privacy policy is the only version that applies when visiting our website until a new version replaces the current version.

Article 1 - Definitions

• Website (hereinafter: “Website”) RoomRaccoon. Booking engine for Backbord Geesthacht (operating company: Backbord21502 GmbH). 

• Data controller (hereinafter: “the Controller”): RoomRaccoon, with registered office at Keizerstraat 15, 4811 HL Breda, Netherlands, Chamber of Commerce number: 67848540.

Article 2 - Responsibilities

• The data controller is not liable for any failures, malfunctions, difficulties, or interruptions in the functioning of the website that result in the website or any of its features being (temporarily) unavailable. You are responsible for how you connect to our website. You must take all appropriate measures to protect your devices and data from dangers such as virus attacks on the Internet. You are also responsible for which websites you visit and what information you search for.

• The controller is not liable for any legal action taken against you:
  - due to the use of the website or the services accessible via the Internet
  - due to violation of the provisions of this privacy policy

• The controller is not liable for any damage caused to you or third parties or your equipment as a result of your connection to or use of the website, and you will refrain from taking any subsequent (legal) action against the controller.

Article 3 - Collection of data

• Your personal data is collected by RoomRaccoon and (an) external processor(s).

• Personal data is any information relating to an identified or identifiable natural person (“data subject”).

• A natural person is considered identifiable if they can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

• The personal data collected on the website is mainly used by the controller to maintain a (business) relationship with you and, if necessary, to process your orders. It is stored in an (electronic) register.

• Should the controller be involved in a legal dispute due to your (improper) use of this website, it is entitled to claim all subsequent damages from you.

Article 4 - Your rights regarding information

• In accordance with Article 13(2)(b) of the GDPR, every data subject has the right to information, access, rectification, erasure, and restriction of processing of their personal data, as well as the right to object to processing and the right to data portability.

• You can exercise these rights by contacting us at info@roomraccoon.com.

• Each request must be accompanied by a copy of a valid ID, on which you must sign and indicate the address where we can contact you.

• You will receive a response from us within one month of submitting your request.

• Depending on the complexity and number of requests, this period may be extended to two months.

Article 5 - Data retention
The data collected will be used and retained for the period specified by law.

Article 6 - Applicable law
These terms and conditions are subject to Dutch law. The court of the district in which the controller is established is the sole place of jurisdiction for all disputes relating to these terms and conditions, unless a legal exception applies.

This privacy statement is valid from Monday, October 11, 2021, until further notice.

​

​

* Note: Our privacy policy page has been translated using a translation tool and is not legally binding. Please refer to our German privacy policy for the binding wording.