Registration in the commercial register
Register court: Amtsgericht München
Registration number: HRB 248085
The personal data that this website processes independently or by third parties include: e-mail, first name, last name, password, cookie and usage data.
Personal data may be voluntarily provided by the user or, in the case of usage data, automatically collected when this website is used.
The provider will process
the user data in a proper manner and take appropriate security measures to
prevent the unauthorized access and the unauthorized forwarding, modification
or destruction of data.
The data processing is carried out by means of computers or IT-based systems according to organizational procedures and processes, which specifically target the stated purposes. In addition to the person responsible, other persons may also be designated internally (such as human resources, sales, marketing, legal, system administrators) or externally, and as appropriate, by the controller (such as technical service providers, delivery companies, hosting providers, IT companies or Communication agencies) – operate this website and have access to the data. An up-to-date list of these parties can be requested by the provider at any time.
The provider may only process personal data of users if one of the following applies:
The data is processed at the provider’s office and at all other locations where the data processing units are located.
Depending on the location of the users, data transfers may involve transferring the user’s data to a country other than their own. To find out more about the place of processing the data transmitted, users can consult the section on the details of the processing of personal data.
Users also have the right to obtain the legal basis for the transfer of data to a country outside the European Union or to an international organization governed by international law or established by two or more countries, such as the United Nations, as well as those of the provider security measures taken to protect their data.
If such submission occurs, the user may learn more by reviewing the relevant sections of this document or by contacting the provider through the information provided in the contact section.
Personal data will be
processed and stored as long as the purpose for which it was collected is
In addition, the provider is permitted to store personal data for a longer period if the user has consented to such processing, as long as the consent is not revoked. In addition, the provider may be required to retain personal information for a longer period of time if required to fulfill a legal obligation or as ordered by an authority.
After expiration of the retention period, personal data will be deleted. Therefore, the right to information, the right of cancellation, the right of rectification and the right to data portability can not be invoked after the expiration of the retention period.
Personal data about the user are collected so that the provider can provide the services. In addition, data is collected for the following purposes: contacting the user, analytics, managing user databases, viewing content from external platforms, heat mapping, and session recording.
Users may find more detailed information about these processing purposes and the personal data used for their purpose in the relevant sections of this document.
Personal data is collected for the following purposes using the following services:
With the services listed in this section, the provider can monitor and analyze traffic and track user behavior.
Google Analytics is a web
analytics service provided by Google Inc. (“Google”). Google
uses the data collected to track and investigate how this application is being
used, to report on its activities and to share them with other Google services. Google
may use the data collected to contextualize and personalize the ads of its own
IP anonymisation may be activated on this website so that the IP address of the users of Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area is shortened beforehand. Only in exceptional cases will the full IP address be sent to a Google server in the European Union and shortened there.
You can review their personal data collection policies and option to opt out in the following links:
Facebook , LinkedIn, Instagram
etc.. Ads Conversion Tracking is an analytics service provided by the corresponding
provider, which combines the data from the Facebook Network with promotions
made through this application.
Tracking is an analytics service provided by Google Inc. that links the data
from the Google AdWords Network to actions taken by that application.
Users log in by completing the registration form and providing their personal information directly through this application.
Personal data collected: e-mail address, password, first name, surname. We use external services to provide this usage, you can read their policy at the chapter “Ultimate Members”, when subscribing for Twostay you give consent to Ultimate Members to manage your data.
Payments are made through Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin) as a payment service provider.
As part of the booking
process, the information communicated by the Twostay user, in addition to the
information about the booking (bank account number, bank code, credit card
number, invoice amount, currency and transaction number, booking reference) in
accordance with Art. 6 para. 1 lit. b DSGVO passed on to the payment
service provider selected by the Twostay user. The forwarding of the data
takes place exclusively for the purpose of the payment transaction with the
payment service provider and only insofar as it is necessary for this. The
processing of the data can be contradicted at any time by a message to the
details of the payment service providers can be found in the tabular list at
The Like button and
social widgets for Facebook are services for interacting with the Facebook
social network Facebook, Inc.
By subscribing to the
mailing list or newsletter, the user’s email address will be added to the
contact list of people who may receive commercial or promotional information
regarding this application. In addition, your e-mail address may be added
to this list if you have signed up for this application or after making a
Personal data collected: e-mail address, last name and first name.
is a service for managing e-mail addresses and sending messages.
Google Cloud Platform is
a web hosting service provided by Google Inc.
Ultimate members is a service to support us in registration, log in and account cancelation of the users. Personal information collected: first name, surname, password and email. When subscribing to Twostay you agree to the use of this service.
This application can track users by storing a unique identifier of their device for analytical purposes or for storing the user’s settings.
Because this application uses third-party services that result in the installation of cookies and other such tracking systems that can not be technically controlled by the owner, any specific reference to third-party installed cookies and tracking systems must be considered indicative , Complete information can be found in the privacy statements of the respective third-party providers mentioned in this document.
Users may exercise
certain rights with respect to their data processed by the provider.
In particular, users have the right to do the following:
If personal data are processed in the public interest, in the exercise of a sovereign authority assigned to the provider or in order to safeguard the legitimate interests of the provider, the user can object to this processing by indicating a justification based on his particular situation.
Users are informed that they can object to the processing of personal data for direct mail at any time without giving reasons. In order to know whether the provider processes personal data for direct mail purposes, users can refer to the relevant sections of this document.
All requests to exercise User Rights may be directed to the Provider through the contact details provided in this document. Applications can be made free of charge and will be processed by the provider as early as possible, at the latest within one month.
The user’s personal data may be processed by the provider for law enforcement purposes within or in preparation for legal proceedings resulting from the improper use of this website or its services.
The user declares to be aware that the provider may be required by the authorities to disclose personal data.
This website and the third-party services may collect, for operational and maintenance purposes, files that record the interaction taking place through this website (system logs), or use other personal information (such as an IP address) for this purpose.
Further information about the collection or processing of personal data can be requested at any time from the provider via the listed contact details.
This website does not support non-tracking requests (“Do Not Track”) through web browsers.
Insofar as changes concern data usage based on the consent of the user, the provider will – if necessary – obtain new consent.
Any information that directly or in conjunction with other information determines or may be the identity of a natural person.
Information that this website (or third-party services using this website) automatically collects, eg. For example: the IP addresses or domain names of the computers of users who use this website, the Uniform Resource Identifier (URI) addresses, the time of the request, the method used to send the request to the server , the size of the response file received, the numeric code indicating the status of the server response (successful result, errors, etc.), the country of origin, the functions of the browser and operating system used by the user, the various times per call (e.g. How much time was spent on each page of the application) and information about the path followed within an application, especially the order of pages visited,
The person using this site who, unless otherwise specified, agrees with the person concerned.
The natural or legal person, public authority, body or other body that, alone or in concert with others, decides on the purposes and means of processing personal data and the means used, including the security measures relating to the operation and use of the site. Unless otherwise indicated, the controller is the natural or legal person through whom this website is offered.
The hardware or software tool used to collect and process the personal data of the user.
Unless otherwise stated, all references in this document to the European Union refer to all current Member States of the European Union and the European Economic Area (EEA).
Small file that is stored on the device of the user.
Last update: 14/04/2019