1. Data protection at a glance

General

This notice explains in brief what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. You will find the full details in the sections that follow.

Data collection on this website

Who is responsible for data processing on this website?

The controller for this website is:

Executive Estate GmbH
Tübinger Straße 27
70178 Stuttgart

Phone: +49 711 4101 0150
Email: info@ess.travel

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (such as names or email addresses).

Data protection officer

We have appointed a data protection officer for our company.

IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 München

Phone: +49 89 1891 7360
Email: email@iitr.de

How do we collect your data?

Some data you give us yourself, for example when you contact us by email or phone.

Other data is recorded automatically by our IT systems when you visit the website. This is mainly technical information, such as the browser and operating system you use or the time of your visit, and it is recorded as soon as you open the site.

What do we use your data for?

Most of the data is needed to deliver this website reliably and securely. If you actively switch on an optional service (currently Google Maps), the data that service needs is processed as well.

What rights do you have regarding your data?

You can at any time, free of charge, obtain information about the origin, recipients and purpose of the personal data we hold about you. You can also ask us to correct or delete that data or to restrict its processing. Where processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to object to certain processing and to lodge a complaint with the competent supervisory authority. For all of these matters you can contact us at the address given above.

Optional third-party tools

Google Maps loads only after you click on the map; before that, no data goes to Google. This website does not use analytics or tracking tools.

2. General information and mandatory disclosures

Data protection

We take the protection of your personal data seriously. We treat it confidentially and in line with the statutory data protection rules and this privacy policy.

When you use this website, certain personal data is processed. This policy explains which data we process, what we use it for and on which legal basis.

Please bear in mind that data transmitted over the internet (for example by email) can have security gaps. Complete protection against access by third parties is not possible.

Legal bases

We process personal data only where the law allows it: on the basis of your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual steps (Art. 6 (1) (b) GDPR), to meet a legal obligation (Art. 6 (1) (c) GDPR) or to protect our legitimate interests (Art. 6 (1) (f) GDPR). Where information is stored on or read from your device, Sec. 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies: technically necessary storage is based on Sec. 25 (2) TDDDG, everything else requires your consent under Sec. 25 (1) TDDDG. The relevant basis is named in each section below.

Withdrawing your consent

Where processing is based on your consent, you can withdraw that consent at any time with effect for the future, for instance by an informal email to us. Processing carried out before the withdrawal remains lawful.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for direct marketing, you may object to that at any time; we will then no longer use it for this purpose.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart

Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de

Right to data portability

You may ask us to hand over the data that we process automatically on the basis of your consent or a contract, either to you or to a third party, in a common machine-readable format. A direct transfer to another controller takes place only where this is technically feasible.

Access, rectification, erasure and restriction of processing

Within the statutory framework you may at any time and free of charge obtain information about the personal data we hold about you, its origin, its recipients and the purpose of the processing. You may also ask us to rectify or erase that data or to restrict its processing. For this and for any other question about personal data, please use the contact details given in the section on the controller.

SSL/TLS encryption

This website uses SSL or TLS encryption to protect the transmission of confidential content, such as inquiries you send to us. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar. While encryption is active, the data you send to us cannot be read by third parties.

No unsolicited advertising

We object to the use of the contact details published in our legal notice for sending advertising or information material that we have not expressly requested. We reserve the right to take legal action if we receive unsolicited advertising, such as spam emails.

3. Data collection on this website

Hosting

This website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. When you visit the site, the hosting provider’s servers process the data your browser transmits (see “Server log files”). The provider acts as our processor and may handle this data only in accordance with our instructions. Using a professional hosting provider is based on our legitimate interest in a secure, fast and reliable presentation of our website (Art. 6 (1) (f) GDPR).

Cookies and browser storage

This website uses cookies and similar browser storage (such as localStorage) only to a limited extent. These are small data records that your browser stores on your device. We use them for technically necessary purposes, for example to remember your privacy choices or to keep a session going, and to load optional services only after you have agreed to them.

Technically necessary cookies and storage are used on the basis of Sec. 25 (2) TDDDG and our legitimate interest in a working and secure website (Art. 6 (1) (f) GDPR). Optional services (currently Google Maps) are loaded only after you click on the map. In that case the storage of or access to information on your device is based on Sec. 25 (1) TDDDG, and the related processing of personal data on Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future.

You can also set your browser to notify you about cookies, to accept them only in individual cases, to reject them or to delete them automatically when you close the browser. If you disable cookies or browser storage, some functions of this website may not work.

Server log files

Each time the website is accessed, the hosting provider’s server automatically records information that your browser sends. These server log files contain:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Time of the server request
• IP address

This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR: we have a legitimate interest in the secure operation of the website, in diagnosing technical faults, in preventing abuse and in delivering the pages to your browser. Log files are kept only as long as these purposes require and are then deleted.

Email and phone inquiries

If you contact us by email or phone, we process the details you provide (such as your name, your contact details and the content of your message) in order to deal with your inquiry and any follow-up questions. We do not pass this information on without your permission.

Where your inquiry relates to a booking or to pre-contractual steps, the legal basis is Art. 6 (1) (b) GDPR; otherwise we process the data on the basis of our legitimate interest in handling inquiries properly (Art. 6 (1) (f) GDPR). We keep inquiry data for as long as it is needed to deal with the matter, and beyond that only as long as statutory retention obligations require (in particular under the German Commercial Code and Fiscal Code).

4. Plugins and tools

Google Maps

This website can show maps provided by Google Maps. For users in the European Economic Area and Switzerland the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may be involved in providing the service as well.

Google Maps loads only after you click on the map; before that, no data goes to Google. When you load the map, Google receives your IP address and other technical information about your visit and may process it on servers outside the European Economic Area, including in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), so the European Commission’s adequacy decision for the DPF applies to such transfers (Art. 45 GDPR).

Legal basis: the storage of or access to information on your device is based on your consent under Sec. 25 (1) TDDDG; the related processing of personal data is based on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.

Further information on how Google handles user data can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en.

Last update: October 2026