Privacy Policy
1. Data Protection at a Glance
The protection of your personal data is very important to us. We process your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
Personal data is any information that can be used to personally identify you.
2. Data Controller
The controller responsible for data processing on this website is:
CASA MiRo GmbH
Barenbleek 32
22179 Hamburg
Germany
Phone: +49 157 30043472
Email: info@casamiro.de
Managing Directors:
Julia Romeiro, Joao Romeiro
3. Data Protection Officer
There is no legal obligation to appoint a data protection officer.
For any questions regarding data protection, please contact us using the details above.
4. Hosting & Website Provision
Our website is operated using the Hostaway website builder.
The hosting of the website is carried out by Hostaway and its technical sub-processors.
The domain www.casamiro.de
is registered via united-domains.de.
When you visit our website, the following data may be automatically collected:
IP address
Date and time of access
Visited pages
Browser type and version
Operating system
Referrer URL
This data is required to ensure the proper operation, stability, and security of the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
5. Cookies & Cookie Banner
Our website uses cookies. Cookies are small text files stored on your device.
A cookie banner is provided by Hostaway, allowing you to manage your consent preferences.
Cookies are used for:
technical functionality of the website
ensuring a smooth booking process
Legal basis:
Essential cookies: Art. 6(1)(f) GDPR
Consent-based cookies: Art. 6(1)(a) GDPR
6. Contact
Contact Form
If you contact us via the contact form, your details will be stored to process your inquiry.
Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures)
Contact via Email, Phone or WhatsApp
If you contact us via email, phone or WhatsApp, your personal data will be processed to handle your request.
Please note that WhatsApp is an external service and data processing outside the EU cannot be excluded.
Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR
7. Booking & Payment Processing
Direct Booking via the Website
For direct bookings, we process personal data such as:
Name
Address
Email address
Phone number
Booking details
This processing is necessary for the performance of the accommodation contract.
Legal basis:
Art. 6(1)(b) GDPR
Payment Service Provider Stripe
Payments are processed via Stripe.
Stripe processes payment data independently. We do not have access to full payment details (e.g. credit card numbers).
Legal basis:
Art. 6(1)(b) GDPR
8. Google Maps
This website uses Google Maps.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When loading Google Maps, your IP address may be transmitted to Google.
Legal basis:
Art. 6(1)(a) GDPR (consent via cookie banner)
9. Meta / Facebook Pixel
This website uses the Meta (Facebook) Pixel.
It allows us to track user behavior after visitors are redirected to our website via Facebook or Instagram ads.
Use of the Meta Pixel is based solely on your consent via the cookie banner.
Legal basis:
Art. 6(1)(a) GDPR
10. Social Media Links
Our website contains a link to our Instagram profile.
This is a simple link. Data is only transmitted to Instagram once you actively click the link.
Legal basis:
Art. 6(1)(f) GDPR
11. Data Transfer to Third Countries
When using external services (e.g. Meta or Google), data transfers to third countries, including the United States, cannot be ruled out.
Such transfers are based on EU Standard Contractual Clauses.
12. Data Retention
Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by law.
13. Your Rights
You have the right to:
access your data (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object to processing (Art. 21 GDPR)
You may withdraw your consent at any time.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection authority.
Competent authority:
Hamburg Commissioner for Data Protection and Freedom of Information
15. Updates to This Privacy Policy
This privacy policy is valid as of January 2026.
We reserve the right to amend it if legal or technical changes occur.