Updated 25 October 2026

Privacy

We respect your personal data. Optional statistics are used only with your permission. We do not use advertising pixels. Google Analytics is optional and is described separately below. External map tiles load only after you open the interactive map; external fonts and social media feeds are not embedded.

Controller

SaaleMomente · proprietor Wena Traeger
Krölpaer Straße 25 · 07387 Krölpa, Germany
hallo@saalemomente.de · +49 176 61266600

Hosting and server logs

When you visit, technically necessary connection data such as IP address, time, requested file, browser type and operating system are processed to provide the website securely and reliably under Article 6(1)(f) GDPR. This website is delivered through Cloudflare (Cloudflare, Inc., USA).

Booking and vouchers

When you book a date or order a voucher, we process your name, contact details, billing address, selected service, date, group size, voucher details and optional notes. Wena and authorised staff use these data in the SaaleMomente administration system to process the order, check payment, issue invoices, confirm dates and administer vouchers. The legal basis is Article 6(1)(b) GDPR, and Article 6(1)(c) GDPR for invoicing and statutory retention. Article 6(1)(f) GDPR applies to necessary technical provision and abuse prevention. Emails are delivered through the configured email service. Data are kept only as long as necessary to perform the contract and meet legal obligations. A voucher code can be checked for validity and balance, so share it only with the intended recipient. We store the language selected for your order to send the associated messages and documents in that language.

Paying with PayPal

If you choose PayPal after a booking or voucher order, we forward you to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. We only transmit the amount due, the type of service and an internal order reference. You enter your login and payment details directly with PayPal. PayPal sends us the payment confirmation with transaction number, amount and status so that we can match it to your booking or order. The legal basis is Article 6(1)(b) GDPR. PayPal also processes your data as an independent controller, for example to prevent fraud, and may transfer data to affiliated companies outside the EU. Details are set out in PayPal's privacy statement. Paying with PayPal is optional; bank transfer remains available at any time.

Optional statistics and your choice

Only with your voluntary permission do we measure page views, clicks and booking or enquiry steps. Our own statistics use a random session ID and public page paths without query parameters; only the hostname of a referring website may be recorded. Names, email addresses, telephone numbers, form contents and private access links are not sent to statistics. This is not used for advertising or cross-site user profiles. Cloudflare provides the technical infrastructure; see the service-provider and international-processing section below. Processing is based on Article 6(1)(a) GDPR and optional browser storage/access on Section 25(1) TDDDG.

“Only necessary” declines statistics. “Accept all” allows the statistics described here. The choice applies to this website and its embedded booking area; another website requires a separate choice. You can change or withdraw it at any time via “Privacy settings”; no further statistical events are collected after withdrawal. Earlier lawful processing remains unaffected. The random ID is kept in browser session storage. Your choice, version and time are stored locally. We respect the choice for 180 days and remove it on your next visit after expiry. Necessary preference storage relies on Section 25(2)(2) TDDDG. Evidence of actual permission is stored with statistical events. Events and related evidence are removed during regular cleanup, generally after 400 days. Aggregated SaaleSpa step counts do not contain session IDs.

You can book and enquire without statistics. Essential functions, duplicate-submission protection, temporary form drafts, private access links and secure staff sign-in remain separate. Contract processing relies on Article 6(1)(b), necessary security processing where applicable on Article 6(1)(f) GDPR; essential storage relies on Section 25(2)(2) TDDDG. We do not use advertising pixels. Google Analytics requires separate permission as described below.

Google Analytics: a separate voluntary choice

With your separate permission, we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure visits to public pages. The Google tag is not loaded without that permission. Previous consent to our own statistics does not activate Google Analytics. You can select the two services separately in Privacy settings; Only necessary rejects both.

Google processes pseudonymous cookie identifiers, the public page visited, the referring host and technical browser and device information. Google also technically receives your IP address when a connection is made. We do not send form contents to Google Analytics. Private areas, embedded booking forms and private access links are excluded from this integration. Queries and fragments are removed from public page URLs. Suitable campaign labels (source, medium, campaign, campaign ID and content) are evaluated separately; search terms and complete referring URLs are not transmitted. Successfully saved public enquiries may be counted with permission, without contact details or reference numbers. This does not confirm a booking or payment. Automatic enhanced measurement, Google signals and advertising personalization are disabled.

The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Analytics cookies are limited to 180 days and this integration does not extend their lifetime on each visit. Your separate choice is also remembered on this website for 180 days. Withdrawal disables further measurement and removes Analytics cookies accessible to this website. It does not retroactively delete data already transmitted. Google may also process data in the USA. See Google’s privacy policy and Google’s data processing terms.

Details of other guests

A SaaleSpa appointment booking records the first name, last name and date of birth of each registered guest to organise the booking and check age requirements. The list is available in the protected booking administration and is not published or used for advertising. If you register other people, inform them of this privacy notice before submitting their details. Do not include health information. The legal basis for processing the booking is Article 6(1)(b) GDPR.

Elvira charter enquiries and interactive maps

The Elvira charter enquiry is prepared in your browser. The form does not store these details on our server or send them to the SaaleSpa team. Clicking “Email Frank” opens your email application with the prepared message. Only when you send that email does it go to Frank Traeger at frank.traeger@gmx.de. The telephone number for Elvira is +49 163 7742482.

The interactive cruising-area map opens only after you click “Open interactive map”. Satellite imagery is then loaded from Esri via server.arcgisonline.com. If you switch to the street map, tiles are loaded from OpenStreetMap via tile.openstreetmap.org. The selected provider receives your IP address and the technical data needed for the connection. See the privacy notices of Esri and OpenStreetMap. Directions links open Google Maps only when clicked.

External links

Links to Instagram, the shipyard, restaurant and SaaleMomente connect to their operators only after you click them. Their privacy notices then apply.

Contact

When you contact us by phone or email, we process your details to handle your enquiry under Article 6(1)(b) GDPR for contractual matters, otherwise under Article 6(1)(f) GDPR.

Contact via WhatsApp

You can also choose to message us on WhatsApp. WhatsApp Business is provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. When you contact us via WhatsApp, we process your phone number, your name and the content of your messages to answer your enquiry. The legal basis is Article 6(1)(b) GDPR for enquiries about dates, bookings and vouchers, otherwise Article 6(1)(f) GDPR. Data may be transferred to the USA in the process. Details are set out in WhatsApp’s privacy policy. If you prefer not to use WhatsApp, you can reach us just as well by phone or email.

Your rights

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may lodge a complaint with the Thuringian Commissioner for Data Protection and Freedom of Information.

Encryption

The website uses TLS encryption. We update this notice when services or legal requirements change.

Choose a date · Choose a voucher · Privacy

Service providers and retention

Cloudflare, Inc. (USA) provides website delivery and the shared administration infrastructure; Supabase Pte. Ltd. supports parts of staff authentication. Messages are sent through configured STRATO mailboxes (STRATO GmbH, Germany). Cloudflare and Supabase may process data outside the EEA. See the providers’ Cloudflare and Supabase data processing terms for information on their contractual safeguards.

Data is kept for handling the request, fulfilling the contract and required records. Data no longer needed must be deleted unless legal obligations or substantiated claims require further retention. German accounting vouchers are generally retained for eight years, business correspondence for six years and books or annual accounts for ten years; exceptions may apply.

Exercising your rights

Contact the controller at the address above to request access, correction, erasure, restriction or portability. Requests are generally answered within one month. You can object to processing based on Article 6(1)(f) GDPR for reasons relating to your particular situation, and withdraw consent prospectively. You may lodge a complaint with the Thuringian data protection authority.

One-time thank-you email

If you give separate consent when booking, we send one email after your visit inviting you to leave an honest Google review. This choice is optional and does not affect your booking. We store the consent and any withdrawal to control and document delivery. The legal basis is Article 6(1)(a) GDPR. You can withdraw consent for the future at any time by emailing hallo@saalemomente.de; this does not affect the lawfulness of processing before withdrawal. Google is contacted only when you follow the review link.