Privacy

1. Controller

Dr. Johannes Freiherr Heereman
Böcklinstr. 10, 50933 Köln, Germany
Email: johannes@mirasoleslab.com

2. Overview

We collect as little data as possible. This website sets no cookies and stores nothing on your device. We only store personal data such as your name and contact details if you send us a request.

3. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, Cloudflare processes technically necessary data such as your IP address, time, page requested and browser type, in order to deliver the page and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Cloudflare.

4. Requests via the form

When you request a van, we store:

• island, van, travel dates, number of nights and the price shown
• name (optional), email address or WhatsApp number, message (optional)
• page language, time, the country derived from your IP address (not the IP address itself) and, where applicable, campaign parameters from the link you followed

We use this data to answer your request and to assess how much interest there is in our offer. The legal bases are answering your request before a possible contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by email.

Requests can also come from an AI assistant (agent) acting on your behalf. We process the data in the same way and also store the name of the assistant. The assistant may only send a request with your consent.

To prevent abuse, when a request is sent we store a non-reversible hash of your IP address, which changes daily, for at most one hour in order to limit repeated requests from the same sender. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

The data is stored in a database at Cloudflare (Cloudflare D1). We delete it no later than 12 months after your request, unless a rental contract is concluded, in which case statutory retention periods apply.

5. Replies via WhatsApp

If you give us a WhatsApp number, we may reply via WhatsApp (WhatsApp Ireland Ltd. / Meta). WhatsApp's privacy policy then also applies. If you prefer not to use it, please give us an email address instead.

6. Usage measurement

To understand how the website is used, we count individual steps: page view, search, opening a request, confirming dates, sending or cancelling. We store the island, van, language, page, time, the country derived from the IP address and a random identifier that is valid for a single page view only. It is not stored on your device. We do not store your IP address. This data cannot be linked to you as a person.

We also use Cloudflare Web Analytics, which counts page views without cookies, without storing anything on your device and without building profiles.

The legal basis is our legitimate interest in understanding demand for our offer (Art. 6(1)(f) GDPR). We delete this data after 24 months at the latest.

7. Fonts

Fonts are loaded from our own server. No connection is made to Google or other providers.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw your consent at any time with effect for the future. Just write to us at johannes@mirasoleslab.com.

You can also lodge a complaint with a data protection authority, for example the Spanish Agencia Española de Protección de Datos (www.aepd.es) or the authority where you live.

Last updated: October 2026