Back

Privacy Policy (Datenschutzerklärung)

Last updated: February 2026

1. Controller

Leben und Leben Lassen e.V.
Postal address:
Massoud Harun-Mahdavi, 1st Chairman
Elektrastr. 24, D - 81925 Munich, Germany
Email: admin@beds4friends.com

2. What Data We Collect

For Hosts: Name, email address, mobile phone number, listing details (neighborhood, type, beds, availability, description).

For Visitors: Name, email address, mobile phone number, free-text message.

For all users: IP address (server logs), language preference (stored locally in browser).

3. Why We Collect It (Legal Basis)

Consent (GDPR Art. 6(1)(a)): You provide your name, nickname, email, and mobile phone number for the purpose of facilitating contact between hosts and visitors. Listing details are necessary so that visitors can find suitable listings and decide for or against them.

Legitimate interests (GDPR Art. 6(1)(f)): We log IP addresses for security and abuse prevention.

4. We Use Your Data for the Following Purposes

  • Display your listing,
  • Send verification and notification emails,
  • Share contact details between hosts and visitors,
  • Enforce usage limits and prevent platform abuse.

5. Who Receives Your Data

  • Hosts receive visitor contact details from inquiries.
  • Visitors do not see any host contact details publicly, only the neighborhood and accommodation details. After submitting an inquiry, they receive the host's specified nickname, which the host can use when making contact.
  • The email service provider (Resend) and the hosting provider (Hetzner) process data on our behalf.
  • The email service provider may process your contact details in the course of sending email notifications.
  • We do not sell or share data with third parties.

6. Data Retention

The beds4friends platform is hosted exclusively in German data centers operated by Hetzner Online GmbH (hetzner.com). All data is processed and stored in encrypted form. Emails are sent via resend.com exclusively through their EU-hosted services on Amazon AWS in Ireland.

All personal data will be deleted no later than 30 days after the event (by March 17, 2026). Server logs are retained for 30 days. Hosts can delete their data at any time via their management link.

7. Your Rights (GDPR)

You have the right to: access, rectification, erasure, restriction of processing, objection, and to lodge a complaint with a supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht, www.lda.bayern.de). Contact us at admin@beds4friends.com.

8. Cookies & Local Storage

beds4friends uses only one piece of browser-local storage: your language preference (EN or DE). No analytics, advertising, or tracking cookies are used.

9. Security

We use HTTPS encryption and rate limiting. However, no method of electronic storage or transmission is 100% secure.