top of page

PRIVACY POLICY
 

I. WHO IS RESPONSIBLE FOR DATA PROCESSING?
 

The controller within the meaning of the General Data Protection Regulation (Germany/ EU) and other national data protection laws of the member states as well as other data protection regulations is:
 

L8 Street GmbH
Forststrasse 65
75223 Niefern-Oeschelbronn
Germany
Contact details:
Email: datenschutz@L8Street.com
 

II. WHAT DATA DO WE PROCESS FROM YOU?
 

We process your personal data when you book one of our accommodations, provide us with information via a contact form on our website, or contact us in any other way. Specifically, this may include the following data:
 

  • Information about your accommodations rented from L8 Street GmbH

  • Data required for booking one of our accommodations (billing address, arrival and departure dates, mobile phone number, email address)

  • Payment processing data (credit card details, account details and other payment information)

  • Data we receive when redeeming coupons (redeemed coupons, date and location of redemption)

  • Data you generate when you add products to your shopping cart; data you submit when writing product reviews and ratings, etc.

  • Data collected during the use of our website l8street.com through the use of cookies (pages visited, links clicked, services used, time of use)

  • Location data (if you have allowed location data collection in your device settings)

  • Data that you provide to us when subscribing to the L8 Street newsletter (including email address, title, first name, last name, postal code)

  • Data that we need to prove your consent to receive the L8 Street newsletter (IP address and timestamp of the newsletter order and the click on the link in the confirmation email, declarations of consent submitted)

  • Data that you provide to us via a web form or in any other way when you contact our customer service

  • Data that you provide to us when you apply for an advertised position or submit an unsolicited application (personal data, education data, data on previous professional experience, cover letter, CV, portrait photo, certificates)
     

III. IS THERE AN OBJECTION TO PROVIDE THE DATA?
 

Providing your data is not legally required. However, some of the data mentioned is necessary to conclude and execute contracts for our services. Without the data required for contract execution, we are unable to enter into a contract with you for services provided by L8 Street GmbH. Providing other data is voluntary, but may be necessary for using certain services. We will inform you when you enter data if its provision is required for the respective service or function. This data is marked as mandatory. Failure to provide required data will result in the service or function in question not being provided. Failure to provide optional data may result in us not being able to provide our services in the same form and to the same extent as usual.

​

IV. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS DO WE DO THIS?
 

  1. Processing of orders in the online shop

    We process your data for the purpose of handling bookings in our online shop. This includes providing services, processing payments, granting discounts, redeeming vouchers, and processing warranty claims. We will inform you about the receipt of your booking and its current status via email. We use your mobile phone number to send you your access code via SMS on the day of arrival. We share your data with third parties to the extent necessary for payment processing or the provision of our services. We may transfer data concerning outstanding payments to a debt collection agency for the purpose of debt recovery. The legal basis for the data processing described is Article 6(1)(b) of the General Data Protection Regulation (GDPR) (performance of a contract). The data stored for contract processing and booking execution will only be shared with other third parties (e.g., IT service providers, email delivery companies, and payment processors) to the extent necessary. These third parties may only use this data to fulfill their respective tasks.
     

  2. Using the WhatsApp messaging service

    If you contact us via WhatsApp (for conversations initiated by the user within a 24-hour time window in accordance with Art. 6 para. 1 lit. b GDPR) or have expressly consented to us contacting you via WhatsApp (for conversations initiated by L8 Street in accordance with Art. 6 para. 1 lit. a GDPR), we will communicate with you via the WhatsApp messenger service.

    Using WhatsApp is voluntarily. Alternative communication channels (e.g., via email to support@L8Street.com) are available at any time.

    Conversations started by the user: Conversations initiated by a user via WhatsApp with L8 Street are considered "Service" conversations pursuant to Art. 6 para. 1 lit. b GDPR. These are subject to a 24-hour time window from the date a user sends a message to L8 Street. Within this time window, L8 Street may send messages to answer individual user inquiries via direct chat.

    Conversations initiated by L8 Street (consent via "Opt-in"): Consent to communication via WhatsApp is limited to the following categories.

    Marketing: Sending you offers, discounts or information about holiday and accommodation for tradespeople that we offer.
    Utility: Important information about a booking that has already been made, e.g. confirmations, check-in details, updates on support requests.
    Authentication: Transmission of one-time passwords or codes to verify your identity (e.g., during login).

    Revocation (Opt-out): You can revoke your consent at any time with effect for the future, e.g. by sending a message containing "STOP".

    Deletion: If you wish to have your data stored with us through WhatsApp communication deleted (e.g., phone number, chat history), you can request this at any time without any formal requirements. Simply send us a WhatsApp message with the text "DELETE DATA" or an email to datenschutz@L8Street.com. We will then immediately remove your data from our active systems, unless legal retention obligations (e.g., from booking transactions) prevent us from doing so.

    Type of data processed: As part of our communication via WhatsApp, we collect and process the following categories of personal data:

    Master data: Mobile phone number, the profile name stored on WhatsApp and (if provided by you) your first and last name.
    Content data: The text of your messages as well as files you send (e.g., photos, documents, voice messages, or locations).
    Metadata: Date and time the message was sent, as well as information on whether a message has been read (if read receipts are enabled).
    Technical data: Device-specific information, insofar as this is necessary for the technical transmission via the WhatsApp Business API/360dialog (see following section).

    Automated processing: To quickly answer your inquiries (e.g., check-in information or FAQs), we use automated processes (so-called messenger bots). Your messages are analyzed by a script to immediately send you the relevant information (e.g., the door code). No purely automated decision-making takes place that has any legal effect on you.

    Data sharing:  For the technical provision of the WhatsApp Business API, we use the service provider 360dialog GmbH, Torstraße 61, 10119 Berlin, which acts as a data processor in accordance with Article 28 of the GDPR.

    For the efficient management and processing of your inquiries, we also use Google Cloud services (BigQuery, Google Apps Script, and Google Sheets) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data from WhatsApp communication is automatically transferred to spreadsheets and stored there for internal processing of your booking. In this process, data may be transferred to servers of Google LLC in the USA. This transfer is based on the EU Standard Contractual Clauses.

    The recipient of the data is also WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, which processes the data as an independent controller. In this process, personal data may be transferred to servers of Meta Platforms Inc., USA. This transfer is based on the EU Standard Contractual Clauses (Article 46 of the GDPR). There is a risk that US authorities may be able to access this data without legal protection comparable to that in the EU.

    Data storage: We only store your personal data for as long as is necessary to fulfill the purposes mentioned above.

    Inquiries without booking: If no rental or other cooperation (e.g. service contract for cleaning, rental or lease agreement) is concluded, the chat data will be deleted no later than 6 months after the last communication (in order to be able to clarify any follow-up questions).
    Upon conclusion of a contract: If a booking or cooperation takes place (e.g. via a written service, rental or lease agreement), the associated data (name, payment details, correspondence) are subject to the statutory retention obligations pursuant to Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) (generally 10 years).
    Marketing: We store data for marketing purposes until you revoke your consent (opt-out).
     

  3. Payment processing

    As part of the payment processing, your data may be shared with the following payment service providers. Your credit card details or other payment information are not stored by L8 Street GmbH and are forwarded directly to the payment service providers: Payment processing is handled by our partner Adyen BV, Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam. To prevent and detect fraud, we transmit your IP address to our partner Adyen BV, Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam. Your IP address is stored by Adyen BV. All data is transmitted using encryption.
     

  4. Advertising

    In addition to processing your data to fulfill orders in our online shop, we also use your data for advertising purposes, as described in more detail below. You can object to the processing of your data for advertising purposes at any time. An informal notification to the contact details listed in section I is sufficient.

     

    • Direct marketing via email: We use the email address you provided when placing an order in our online shop to send you direct marketing for our own similar offers. You will receive these product recommendations regardless of whether you have subscribed to our newsletter. We want to use this method to provide you with information about goods and services from our range that may be of interest to you based on your previous orders in our online shop. If you do not wish to receive these product recommendations, you can object at any time without incurring any costs other than the standard transmission fees. An informal notification to the contact details listed in section I is sufficient. Alternatively, you can use the unsubscribe link included in every email. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in providing advertising to existing customers) and Section 7(3) of the German Act Against Unfair Competition (processing your email address for direct marketing).
       

    • Direct Mail Advertising: We use the billing address you provided when placing an order in our online shop for direct marketing of our own offers. You will receive this direct mail advertising regardless of whether you have subscribed to our newsletter. We want to send you information about goods and services from our product range that may be of interest to you based on your previous orders in our online shop. If you do not wish to receive this direct mail advertising, you can object at any time. An informal notification to the contact details listed in Section I is sufficient. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in sending advertising to existing customers).
       

    • Personalized advertising: We want to send you advertising that is tailored to your individual interests. To do this, we analyze your data and try to select products, services, and promotions that are a perfect fit for you when designing our advertising. We evaluate your data to define specific target groups and tailor our advertising to each group. Your data allows us to address you personally by name. The legal basis for the data processing described is Article 6(1)(a) and (f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in providing advertising that is tailored to the individual interests of the recipient).
       

    • Customer satisfaction survey: We process your data to invite you to participate in customer satisfaction surveys, e.g., following an order. The legal basis for the described data processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in determining customer satisfaction with L8 Street's accommodations).
       

    • Website analysis/tracking: To tailor our website to your needs, we create pseudonymous user profiles using Adobe Analytics. These website analysis tools use cookies. These enable us to analyze your website usage. Your IP address is processed only in anonymized form. The website analysis tools evaluate your website usage for us and compile reports on website activity. You can object to the creation of these pseudonymous user profiles at any time. Adobe Analytics: You can object to web analysis by Adobe Analytics by setting an opt-out cookie. This instructs Adobe not to process your data for web analysis purposes. Please note that with this solution, web analysis will only be disabled as long as the opt-out cookie is stored by your browser. If you would like to set the opt-out cookie now, please click here. The legal basis for the described data processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in measuring and analyzing the use of its websites).
       

  5. Contact form

    You can contact us via our web form, email, post, and telephone. We process your data to answer your inquiry and, if applicable, to send you requested information. Your data may be forwarded to the department responsible for your request. The legal basis for the described data processing is Article 6(1)(b) and (f) of the General Data Protection Regulation (GDPR) (pre-contractual measures, contract fulfillment, and/or balancing of interests, based on L8 Street's interest in responding to inquiries from customers and other individuals).
     

  6. Application

    On our website, you have the option of applying online via email for an advertised position or submitting a speculative application. Your data and any attached files will be received by the Human Resources department and forwarded to the department responsible for the advertised position or to the individuals responsible for processing your application. All parties involved will treat your application documents with due care and confidentiality. The legal basis for the data processing described is Article 6 Paragraph 1 Letter b of the General Data Protection Regulation (GDPR) and Section 26 Paragraph 1 Sentence 1 of the German Federal Data Protection Act (BDSG) (decision on the establishment of an employment relationship).
     

  7. Web server logs

    When you visit our websites, we process, by default, the connection data of the requesting computer, including the IP address, the websites you visit on our site, the date and duration of your visit, the identification data of the browser and operating system you are using, and the website from which you accessed our site, in order to ensure the security of our IT systems. The legal basis for this data processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on L8 Street's interest in ensuring the security of its IT systems).
     

  8. Cookies

    Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. We use cookies to make our website more user-friendly. Some elements of our website require that the browser be identifiable even after a page change. We also use cookies on our website that allow us to analyze users' browsing behavior. The user data collected in this way is pseudonymized through technical measures. Therefore, it is no longer possible to associate the data with the user. The data is not stored together with other personal data of the users. The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR. The legal basis for processing personal data using cookies for analytical purposes is Article 6(1)(a) GDPR, provided the user has given their consent. The purpose of using technically necessary cookies is to simplify website use for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change. Analytical cookies are used to improve the quality of our website and its content. Through analytical cookies, we learn how the website is used and can thus continuously optimize our offerings. This also constitutes our legitimate interest in processing personal data pursuant to Article 6(1)(f) GDPR.
     

  9. Marketing consent

    You can give voluntary marketing consent. By doing so, you allow L8 Street to process your designated personal data, along with other data, for specific advertising (and market research) purposes, as detailed in the marketing consent form. If you have given marketing consent and have also consented to L8 Street GmbH using your data for advertising (and market research) purposes via the accessible consent form, L8 Street GmbH may use this data for advertising (and market research) purposes, specifically for the purposes described in your consent. This includes, in particular, sending you personalized offers by mail, when you call or otherwise contact L8 Street customer service, or by email when you visit the electronic media (company websites) of L8 Street GmbH or third-party providers, and when you use social media such as Facebook, Instagram, or Twitter.
     

V. WHO HAS ACCESS TO YOUR DATA AND FOR WHAT REASON?
 

Within L8 Street, only those individuals who need your data to perform their assigned tasks will have access to it. Outside of L8 Street, service providers who support us in fulfilling our tasks may have access to your data. These are service providers in the following categories: Hosting providers for operating our servers; Development providers for programming, developing, maintaining, and supporting software applications; Payment service providers and banks for processing payments; Debt collection agencies and law firms for enforcing claims; Email service providers for sending emails related to bookings with L8 Street; SMS service providers for sending PIN codes via SMS; Email marketing service providers for sending newsletters; Printing service providers for printing and mailing promotional letters; Service providers for providing survey tools; Service providers for delivering and measuring the success of online advertising; Analytics service providers for evaluating data and analyzing the use of electronic media (website); Social media operators for providing social plugins; HR service providers to support applicant selection. The service providers we use must meet special confidentiality requirements. They only receive access to your data to the extent and for the period necessary to fulfill their tasks. In case of suspected criminal activity, we may pass your data on to law enforcement authorities (police, public prosecutor's office).

​

VI. IS DATA PROCESSED OUTSIDE THE EUROPEAN UNION?
 

We also use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. Currently, there is no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed in third countries as securely as it is within the European Union. We conclude the data processing agreement (Standard Contractual Clauses) provided by the European Commission for the processing of personal data in third countries with service providers in third countries. This agreement provides suitable safeguards for the protection of your data by service providers in third countries. You can request a copy of this data processing agreement using the contact details provided above.

​

VII. HOW LONG WILL THE DATA BE STORED?
 

We generally only store your data for as long as we need it for the respective processing purposes. If the data is no longer required to fulfill the processing purposes stated in this privacy policy, it will be deleted, unless its retention is still necessary to comply with commercial or tax law retention obligations. As a rule, we delete your data after the following periods or determine the deletion period according to these criteria: Data relating to bookings made with L8 Street GmbH: ten years after the purchase; data relating to a customer service inquiry: generally at least 3 months and no later than 10 years after the conclusion of the process; data relating to an application for a vacant position: six months after the conclusion of the application process.

​

VIII. WHAT RIGHTS DO YOU HAVE?
 

Right to information: You can request information about your personal data that we process. Right to rectification: You can request that your data be corrected.

Right to erasure: You have the right to request the erasure of your data. Please note that a right to erasure depends on the existence of a legitimate reason. Furthermore, there must be no legal obligations that require us to retain your data.

Right to restriction of processing: You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate reason.

Right to object: You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. Objection to the processing of your data for direct marketing purposes: You have the right to object at any time to the processing of your data for direct marketing purposes. You can submit your objection to us informally, ideally using the contact details above and stating the subject line "Objection to the processing of my personal data for advertising purposes".

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority if you disagree with the processing of your data. Data portability: You have the right to receive the personal data you have provided to us in an electronic format.

Right to withdraw your consent: You have the right to withdraw your consent to the processing of your data, which you have given us, at any time. This also applies to the withdrawal of declarations of consent that you gave us before the General Data Protection Regulation (GDPR) came into effect, i.e., before May 25, 2018. The easiest way to withdraw your consent is to contact us by email using the contact details provided above. The withdrawal of consent does not affect the lawfulness of the processing of your data carried out before the withdrawal.

​
IX. Changes to the Privacy Policy
 

We reserve the right to update the privacy policy in accordance with applicable data protection regulations.
The most current version applies to the use of our services.
 

This privacy policy is effective as of January 1, 2026.

bottom of page