Privacy Policy

1. Data protection at a glance

General

This notice explains in brief what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. You will find the full details in the sections that follow.

Data collection on this website

Who is responsible for data processing on this website?

The controller for this website is:

Executive Estate GmbH
Tübinger Straße 27
70178 Stuttgart

Phone: +49 711 4101 0150
Email: info@ess.travel

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (such as names or email addresses).

Data protection officer

We have appointed a data protection officer for our company.

IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 München

Phone: +49 89 1891 7360
Email: email@iitr.de

How do we collect your data?

Some data you give us yourself, for example when you contact us by email or phone.

Other data is recorded automatically by our IT systems when you visit the website. This is mainly technical information, such as the browser and operating system you use or the time of your visit, and it is recorded as soon as you open the site.

What do we use your data for?

Most of the data is needed to deliver this website reliably and securely. If you actively switch on an optional service (currently Google Maps), the data that service needs is processed as well.

What rights do you have regarding your data?

You can at any time, free of charge, obtain information about the origin, recipients and purpose of the personal data we hold about you. You can also ask us to correct or delete that data or to restrict its processing. Where processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to object to certain processing and to lodge a complaint with the competent supervisory authority. For all of these matters you can contact us at the address given above.

Optional third-party tools

Google Maps is switched off by default and only loaded after you have enabled it. You can change that choice at any time in the cookie settings or using the controls at the end of this page. We do not use analytics, statistics or tracking tools on this website, neither in the pages themselves nor on the server; the only record of visits we keep is the server log files described below, and we do not use them to create visitor statistics or profiles. If you enable Google Maps, Google processes data as described in the section "Google Maps".

2. General information and mandatory disclosures

Data protection

We take the protection of your personal data seriously. We treat it confidentially and in line with the statutory data protection rules and this privacy policy.

When you use this website, certain personal data is processed. This policy explains which data we process, what we use it for and on which legal basis.

Please bear in mind that data transmitted over the internet (for example by email) can have security gaps. Complete protection against access by third parties is not possible.

Legal bases

We process personal data only where the law allows it: on the basis of your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual steps (Art. 6 (1) (b) GDPR), to meet a legal obligation (Art. 6 (1) (c) GDPR) or to protect our legitimate interests (Art. 6 (1) (f) GDPR). Where information is stored on or read from your device, Sec. 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies: technically necessary storage is based on Sec. 25 (2) TDDDG, everything else requires your consent under Sec. 25 (1) TDDDG. The relevant basis is named in each section below.

Withdrawing your consent

Where processing is based on your consent, you can withdraw that consent at any time with effect for the future, for instance by an informal email to us. Processing carried out before the withdrawal remains lawful.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for direct marketing, you may object to that at any time; we will then no longer use it for this purpose.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart

Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de

Right to data portability

You may ask us to hand over the data that we process automatically on the basis of your consent or a contract, either to you or to a third party, in a common machine-readable format. A direct transfer to another controller takes place only where this is technically feasible.

Access, rectification, erasure and restriction of processing

Within the statutory framework you may at any time and free of charge obtain information about the personal data we hold about you, its origin, its recipients and the purpose of the processing. You may also ask us to rectify or erase that data or to restrict its processing. For this and for any other question about personal data, please use the contact details given in the section on the controller.

SSL/TLS encryption

This website uses TLS encryption (https) to protect the transmission of data between your browser and our server. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.

No unsolicited advertising

We object to the use of the contact details published in our legal notice for sending advertising or information material that we have not expressly requested. We reserve the right to take legal action if we receive unsolicited advertising, such as spam emails.

3. Data collection on this website

Hosting

This website runs on a virtual server that we rent from IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you visit the site, the data your browser transmits (see "Server log files") is processed on this server, so IONOS is a recipient of this data as our hosting provider. Using a professional hosting provider is based on our legitimate interest in a secure, fast and reliable presentation of our website (Art. 6 (1) (f) GDPR).

Cookies and browser storage

This website does not set any cookies of its own. It stores exactly one entry in your browser's local storage (localStorage), named "stuttgartApartmentsConsentV1". This entry only records whether you have made a choice in the cookie settings and whether Google Maps is enabled. It contains no identifier and is not sent to our server. It remains on your device until you change your choice or delete your browser data; it does not expire automatically. If the entry is missing, for example because you have deleted it, the cookie settings are shown again and Google Maps stays switched off.

Storing your choice is strictly necessary to provide the cookie settings you use and is based on Sec. 25 (2) no. 2 TDDDG; the related processing is based on our legitimate interest in respecting and documenting your choice (Art. 6 (1) (f) GDPR). Optional services (currently Google Maps) are switched off by default and are activated only with your consent. In that case the storage of or access to information on your device is based on Sec. 25 (1) TDDDG, and the related processing of personal data on Art. 6 (1) (a) GDPR. Once Google Maps is enabled, Google may itself store cookies or similar information on your device; see "Google Maps". You can withdraw your consent at any time with effect for the future via the cookie settings or the controls at the end of this page.

You can delete the stored entry at any time in your browser settings, and you can set your browser to block cookies and similar storage. If you do so, your choice in the cookie settings cannot be remembered, and Google Maps remains switched off.

Server log files

Each time a page or file of this website is requested, our web server automatically records an entry in a log file. Each entry contains:

We do not combine this data with other data sources. The legal basis is Art. 6 (1) (f) GDPR: we have a legitimate interest in delivering the pages to your browser, in the secure operation of the website, in diagnosing technical faults and in preventing abuse.

Storage period: the log file is started anew as soon as it reaches 20 MiB. We keep at most the five most recent older log files; anything beyond that is deleted automatically, and older log files that are more than 90 days old are deleted whenever a new log file is started. At the current volume of visits, log entries are therefore usually deleted after about two to three weeks. Our server is also backed up by our hosting provider's backup service; copies contained in a backup are deleted when that backup is deleted.

Email and phone inquiries

If you contact us by email or phone, we process the details you provide (such as your name, your contact details and the content of your message) in order to deal with your inquiry and any follow-up questions. We disclose inquiry data only where necessary for the stated purposes and permitted by law, including to service providers acting on our instructions. The relevant recipient categories are described in this notice.

Where your inquiry relates to a booking or to pre-contractual steps, the legal basis is Art. 6 (1) (b) GDPR; otherwise we process the data on the basis of our legitimate interest in handling inquiries properly (Art. 6 (1) (f) GDPR). We keep inquiry data for as long as it is needed to deal with the matter, and beyond that only as long as statutory retention obligations require (in particular under the German Commercial Code and Fiscal Code).

Recipients

Depending on how you use this website and contact us, the following categories of recipients may receive personal data: our hosting provider (see "Hosting"); our email service provider (Google Workspace) for messages you send to our email addresses; the telecommunications providers involved in transmitting phone calls; Google, if you enable Google Maps (see "Google Maps"); and public authorities or other bodies where we are legally obliged to disclose data.

Is providing your data required?

The technical data described under "Server log files" is required to deliver this website to your browser; without it the pages cannot be displayed. Contacting us is voluntary and there is no legal obligation to provide your data; however, we cannot answer your inquiry without contact details. If your inquiry leads to a booking, the data needed to conclude and perform the contract is required for it. Enabling Google Maps is voluntary; if you do not enable it, maps are simply not shown.

4. Plugins and tools

Google Maps

This website can show maps provided by Google Maps. For users in the European Economic Area and Switzerland the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may be involved in providing the service as well.

Google Maps is switched off by default. The map is only loaded, and a connection to Google's servers only established, once you actively enable it in the cookie settings or using the controls below. When you do so, Google receives your IP address and other technical information about your visit and may process it on servers outside the European Economic Area, including in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), so the European Commission's adequacy decision for the DPF applies to such transfers (Art. 45 GDPR).

Legal basis: the storage of or access to information on your device is based on your consent under Sec. 25 (1) TDDDG; the related processing of personal data is based on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.

Further information on how Google handles user data can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.

Here you can enable or disable Google Maps for this website. Your choice takes effect immediately: when you disable Google Maps, any map shown on the page is removed and no further maps are loaded from Google. Maps are not shown while the service is disabled.

Last Update: October 2026

↑