Maier Enterprises UG (haftungsbeschränkt), Panoramastr. 92, 71384 Weinstadt, Germany, represented by its managing director Stefan Maier. Contact: hello@modulstay.com.
For visitors of this website we are the controller. For guest data that hotels process through modulstay (check-in, registration form, payment) we act as processor for the respective hotel under a data processing agreement.
Technically necessary data (IP address, time, page, browser) is processed in server logs and deleted after a short time. We set no tracking cookies and load no fonts or scripts from third parties. To learn which pages are read and where visitors come from, our server records each page view (not by known bots): the page, the domain of the site that linked to it, campaign tags in the link, and a code computed from your IP address and browser with a random value that is replaced and deleted every day, so nothing links visits across days. From the same address and browser it notes country, region and city (IP geolocation by DB-IP) and browser, operating system and device type; the address and the browser string themselves are not kept. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). The data goes to datalove (datalove.io), a product analytics service we operate ourselves in Germany, which keeps these anonymous page views for 24 months.
When staff are signed in, our server records which screens they open and which changes they make (for example that settings were saved, never what they contained), with their user and account number, and at sign-in their name, role and the hotel account's name. We use it to learn which parts of modulstay are used and to improve them (Art. 6 (1) (f) GDPR). It goes to datalove as well, which keeps individual events for 30 days. Guests are never recorded. You can object at any time by writing to hello@modulstay.com; we then stop recording for you and erase what was recorded.
Guest check-ins are reached via signed links without a login. ID photos and registration forms are stored encrypted on servers in Germany and deleted automatically after the retention period set by the hotel. We never process card data; payments run through apaleo Pay.
Hosting: Hetzner Online GmbH (Germany). Email delivery: Postmark (ActiveCampaign, USA / EU standard contractual clauses). PMS: apaleo GmbH (Germany) on behalf of the hotel. Product analytics: datalove (Maier Enterprises UG, Germany).
Access, rectification, erasure, restriction, portability and objection under the GDPR. Requests to hello@modulstay.com. Complaints can be lodged with a data protection authority.