1. Controller
firstclass holidays GmbH
Leo-Graetz-Str. 16
81379 Munich, Germany
Phone: +49 89 370 143 40
Email: info@firstclass-holidays.org
2. General information
We take the protection of your personal data seriously. Personal data is any data that can identify you personally. This policy explains which data we collect when you use this website, how we use it and what rights you have.
3. Hosting and server log files
This website is hosted by Lovable Labs AB, Stockholm, Sweden. We have concluded a data processing agreement with the provider. The backend for the enquiry form runs on Supabase, Inc., in an EU data center.
When you visit the site, the server automatically records log data: IP address, date and time of the request, pages visited, referrer, browser and operating system. This is necessary to deliver the site securely; the legal basis is Art. 6 (1) (f) GDPR.
Technically necessary storage:
__cf_bm: Cloudflare bot protection, about 30 minutes__dpl: routes requests to the current site version, about 24 hoursth-consent: local storage, saves your cookie choice for 12 months
Lovable also measures site performance anonymously, without cookies. The legal basis is Art. 6 (1) (f) GDPR.
4. Cookies and consent
Technically necessary storage is based on § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. Everything else (currently only external media) is used only with your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your choice at any time via in the footer.
5. Enquiry form and contact by email
When you send an enquiry, we process your name, email, phone, travel dates, number of guests, pet, services of interest, message, how you heard about us and the language of the form, in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR, and Art. 6 (1) (f) GDPR for general enquiries.
Enquiries are transmitted by email via Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden (data processing agreement). They are also stored in our database (Lovable Cloud, servers in the EU), accessible only to authorised staff of firstclass holidays GmbH.
Enquiries that don't lead to a booking are deleted after 12 months at the latest, unless statutory retention obligations apply. If a booking follows, your data is processed further to perform the contract.
6. Interactive map (external media, only with consent)
Provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is loaded only after your consent, on the San Felice del Benaco page. Your IP address and browser data are then transmitted to the provider. The United Kingdom has an adequacy decision of the EU Commission. The legal basis is Art. 6 (1) (a) GDPR. Any map drawn on our own pages does not connect to external services.
7. Fonts
The fonts on this website are self-hosted. There is no connection to external font providers.
8. Transfers to third countries
Data is transferred to countries outside the EU/EEA only if an adequate level of protection is ensured, for example by an adequacy decision such as the EU-U.S. Data Privacy Framework, or by EU standard contractual clauses.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You may withdraw any consent at any time with effect for the future. To exercise your rights, write to info@firstclass-holidays.org.
10. Right to lodge a complaint
You may lodge a complaint with a supervisory authority, in particular: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
11. Data security
This site uses SSL/TLS encryption for the secure transmission of data.
12. Changes to this policy
We may update this policy when our website or the legal requirements change. The current version always applies.
Last updated: 15 October 2026