Anfi Private Rentals & Resales

Privacy Policy (GDPR)

This privacy data protection applies both to this website and to the Android app TimshareRR with the same database.

Personal data

The use is in principle possible without any private data. But for advertising and contact personal data are necessary.

To guarantee personal rights personal data are collected in the legal frame work of the current General Data Protection Regulation GDPR, REGULATION EU 2016/679, and are protected. In the focus are principles (GDPR Par. 5) as lawfulness, few data as possible, necessity und purpose, correctness, limitation of storing, transparency, integrity and privacy.

The following data are stored:

  • Registration data with email address, user name.
  • Advert data, name, email, optional telephone.
  • No personal data are published!
  • Deactivated advert data are deleted after 5 years.
  • With Social Media (Facebook, Google) Login name, email, and id as user name are registrated and saved not public in the advert.

    Responsible operator

    The responsible operator is named on legal notes. He is also your contact for private data protection.

    Operating purpose

    Operating purpose is to give users the possibility to put adverts about rental, sale, leasing, purchasing or to contact the advertiser or the operator about this. The collected data are used only for advertising on the website and in mobile companion applications (TimeshareRR) with the same database and this privacy policy used. Over and above no data are given to third parties.

    Within the scope of operation analyses, sorting, and filtering of data for statistical purpose and optimising the offer are done.

    Purpose of data processing

    Purpose of data processing is the operation.

    Data processing and their legal bases

    All data are ruled by data protection and are not given to third parties.


    At registration user name, email address, password, and as well date and time of registration are collected. This registration data allow after login advertising and the secure and protected access to already putted adverts. They are mailed to the user as reference and for safe keeping. At login the last visit with date and time is collected. The legal basis of collection and processing of registration data is Art. 6 Paragraph. 1 lit. a GDPR and needs your consent.

    The collection of advertisement data (typ of advert, data of using right) includes the personal data name, email address, telephone number, club membership (for the advertising fee), and spoken languages (for understanding). This personal data are necessary for contact of interested parties and for the operator to administrate and manage the market. The legal basis of collection and processing of advert data is Art. 6 Paragraph. 1 lit. a GDPR and needs your consent. Without this consent advertising is not possible.

    The advert data can also be handed over in writing by the request form (PDF with email, fax or letter) with consent by signature (letter, fax) or by marking with a cross (email).

    Email contact form

    Personal contact data voluntary send over the email contact form as name, email address, telephone number, and message are used only for contact with the operator.

    This data are collected and processed for email transmission and stored in the receiving email application. This data processing has Par. 6 (1) lit. f GDPR legal basis (weighing of interests) and is necassary for the operating purpose. The operator has a justifiable interest in this. Mails are deleted in the mail application of the operator if their purpose is finished.

    Email contact form of the advert

    In the advert no personal data as name, email and optional telephone number are published. The contact of the interested party to the advertiser, or possibly over the operator to the advertiser, is per contact form, that can be opened in the advert.

    By it the personal data name, email address and optional telephone number of the interested party are transmitted. The contact over the operator is necessary for advertisers without email address and for those who want this service. In this case mails are deleted in the mail applications of the operator if their purpose is finished.

    This data are collected and processed for email transmission and are stored in the receiving email application. This data processing has Par. 6 (1) lit. f GDPR as legal basis (weighing of interests) and is necassary for the operating purpose. The operator and advertiser have a justifiable interest in this. Mails are deleted in the mail application of the operator if their purpose is finished.

    Email notifications of the operator

    The operator sends various notification emails. The data processing of this emails has Par. 6 (1) lit. f GDPR as legal basis and is necessary for the operation purpose. The operator and the advertisers have a justifiable interest in this.

    (1) Advertisers are informed automatically if a new advert matches look for rental adverts.

    (2) The advertiser is informed about the activation of the advert.

    (3) After expiring of the advert the advertiser is informed about it if he has not deactivated the advert before himself.

    (4) The advertiser is informed about the missing advertising fee.

    Email newsletter

    The operator can send newsletter emails to the advertisers on the base of the operation purpose. This has Par. 6 (1) lit. a GDPR as legal basis and needs your consent.

    Data transmission

    Data transmission and email transmission is coded and cannot be read by third parties. The operator uses only coded E-Mail communication.

    Privacy Policy (GDPR) cont.

    Data processing

    Data are stored and administrated in the applications of at a commissioned webhoster without the possibility of third parties to access this data. This is also true for data which are used for registration and login. Passwords are stored unreadable. Backup data are stored periodically by the responsible operator and the webhoster.

    The webhoster stores in the log files of the webserver general access data and information as time of access, IP-address, browser and operation system necessary for the secure operation of the server (e.g. defence of cyber attacks and noncomplying use). This data are neither collected nor used. Legal basis for temporary storing of data and log files the is Par. 6 Abs. 1 lit. f GDPR.

    Deleting of data

    Adverts are deactivated at least when advertisements expire. However advert data are stored for 5 years to allow advertisers to use old advertisements as a template for new ones. After this the advert data are deleted. Data for the purpose of registration and login are deleted if for 5 years there is no login.


    After login in the administration area you can view and delete your stored private data:

    After login (social media or username / password), go to the 'Data your username' tab in the management area:

  • Display data information: Send my data by e-mail.
  • Delete registration data: Delete my registration data.
  • Clear advert data: Clear my advert data.
  • Android app TimeshareRR

    Deleting the registration account and advert data is possible under the Privacy Policy menu.

    More information Deletion of private data

    Or sent a data delete request to the operator Kontakt

    Payment of the fee with PayPal

    The Link of the website with your browser to your PayPal login with transmission of advert payment information is coded. No personal data are transferred, only some advert data as advert fee, advert type and advert id. The Private data protection declaration of PayPal applies.


    The website uses cookies. Cookies are text files that are stored in a computer system via an Internet browser. Through the use of cookies, users of this website can be provided more user-friendly services that would not be possible without cookie setting.

    The website uses within the session technically necessary temporary cookies: Session cookie (expires at the end of session), login cookie (expires after 20 minutes or at the end of session if "save login data" has been selected).

    Used permanent cookies are: Google Analytics cookies (deactivated), see below. The legal basis of permanent cookies is § 15 Abs. 3 Telemediengesetz (TMG) with hint on the website, that the users agrees to cookies with using the website.

    The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs.

    Google reCAPTCHA

    This website uses the reCAPTCHA feature of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or abusive by automated and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in determining the individual will-bearingness of actions on the Internet and the prevention of abuse and spam.

    For more information about Google reCAPTCHA and Google's privacy policy, please visit: Google reCAPTCHA.

    Data about web access (not activated)

    The data collected, processed and stored are kept secure and confidential. They are used solely to provide and protect the Google Analytics service and to perform important system operations, in rare cases for legal purposes. There is no data release for third parties and for other purposes by setup for this website.

    Collected data about web access are always anonymous (IP-pseudonymized) and are only for the optimisation of our Internet offer including statistics. For this we have a legitimate interest according Art. 6 Abs. 1 lit. f DSGVO. The collection, storing and processing of this anonymous data is done by Google Analytics with cookies.

    The Private data protection declaration of Google Analytics applies.

    Google Analytics can be deactivated: Deactivation of Google Analytics.