Last updated: 27.10.2026. This policy covers buchen.dove-living.de, its booking API and the Dove Living apps/connectors for AI assistants (ChatGPT, Claude, Microsoft Copilot and other MCP clients).
1. Controller
Dominik Schurg
c/o Doshu Ventures UG · Dove Living – Ferienapartments Schwandorf
Feringastraße 7a
85774 Unterföhring
Deutschland
E-mail: info@dove-living.de
Phone: 72933283572 193351 98444+
2. What we process
- Search and quote requests (travel dates, number of guests, selected apartment) – to show availability and prices. No account is required and no name is needed for this.
- Booking requests: first name, last name, e-mail address, optional phone number, travel dates, number of guests – to reserve the dates, create the payment page and conclude and perform the rental contract.
- Payment data (card details) are entered exclusively on the payment page of Stripe; we only receive the payment status and a payment reference.
- Technical data: IP address, time, requested URL and user agent in server logs (security, abuse and rate limiting). Rate-limit counters are kept in memory only.
- We do not receive your conversation with the AI assistant. The assistant only sends us the tool parameters listed above. The AI platform (OpenAI, Anthropic, Microsoft, …) processes your chat under its own privacy policy.
- No cookies, no tracking and no advertising on buchen.dove-living.de.
3. Purposes and legal bases (GDPR)
- Answering requests and performing the booking: Art. 6(1)(b) GDPR (contract / pre-contractual steps).
- Statutory obligations (tax and commercial record keeping, registration of guests under the Federal Registration Act): Art. 6(1)(c) GDPR.
- IT security, prevention of abuse and fraud: Art. 6(1)(f) GDPR (legitimate interest in a secure service).
4. Recipients
- Hostaway Inc. (property management software; calendar, reservations, guest data) – processor; data may be processed in the USA (EU Standard Contractual Clauses / Data Privacy Framework).
- Stripe Payments Europe Ltd., Dublin, Ireland – payment processing as an independent controller (stripe.com/privacy).
- Hostinger International Ltd. – server hosting (data centre in Frankfurt am Main, Germany) – processor.
- For confirmed bookings: booking channels connected via Hostaway (e.g. Airbnb, Booking.com) only receive the blocked dates, not your personal data.
5. Retention
- Unpaid booking requests: the reservation of the dates ends after 30 minutes; name and e-mail of unpaid requests are deleted after 30 days at the latest.
- Confirmed bookings: for the duration of the contract and afterwards as required by tax and commercial law (generally 6 to 10 years); guest registration forms: 1 year after departure.
- Server logs: at most 14 days.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and you may lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany. To exercise your rights, write to info@dove-living.de.
7. Automated decisions
There is no automated decision-making within the meaning of Art. 22 GDPR. Availability and prices are taken from our calendar system.
Deutsche Fassung (legally binding)