Privacy Policy
1. Data protection at a glance
General
This notice explains in brief what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. You will find the full details in the sections that follow.
Data collection on this website
Who is responsible for data processing on this website?
The controller for this website is:
Executive Estate GmbH
Tübinger Straße 27
70178 Stuttgart, Germany
Phone: +49 711 4101 0150
Email: info@ess.travel
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (such as names or email addresses).
Data protection officer
We have appointed a data protection officer for our company.
IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 München, Germany
Phone: +49 89 1891 7360
Email: email@iitr.de
How do we collect your data?
Some data you give us yourself, for example when you contact us by email or phone.
Other data is recorded automatically by our IT systems when you visit the website. This is mainly technical information, such as the browser and operating system you use or the time of your visit, and it is recorded as soon as you open the site.
What do we use your data for?
Most of the data is needed to deliver this website reliably and securely.
What rights do you have regarding your data?
You can at any time, free of charge, obtain information about the origin, recipients and purpose of the personal data we hold about you. You can also ask us to correct or delete that data or to restrict its processing. Where processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to object to certain processing and to lodge a complaint with the competent supervisory authority. For all of these matters you can contact us at the address given above.
Optional third-party tools
This website does not embed external services such as maps, videos or fonts from third-party servers. We do not use analytics, statistics or tracking tools on this website; the only record of visits is the server log files described below, which we do not use to create visitor statistics or profiles.
2. General information and mandatory disclosures
Data protection
We take the protection of your personal data seriously. We treat it confidentially and in line with the statutory data protection rules and this privacy policy.
When you use this website, certain personal data is processed. This policy explains which data we process, what we use it for and on which legal basis.
Please bear in mind that data transmitted over the internet (for example by email) can have security gaps. Complete protection against access by third parties is not possible.
Legal bases
We process personal data only where the law allows it: on the basis of your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual steps (Art. 6 (1) (b) GDPR), to meet a legal obligation (Art. 6 (1) (c) GDPR) or to protect our legitimate interests (Art. 6 (1) (f) GDPR). Where information is stored on or read from your device, Sec. 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies: technically necessary storage is based on Sec. 25 (2) TDDDG, everything else requires your consent under Sec. 25 (1) TDDDG. The relevant basis is named in each section below.
Withdrawing your consent
Where processing is based on your consent, you can withdraw that consent at any time with effect for the future, for instance by an informal email to us. Processing carried out before the withdrawal remains lawful.
Right to object (Art. 21 GDPR)
Where we process your personal data on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for direct marketing, you may object to that at any time; we will then no longer use it for this purpose.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart, Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de
Right to data portability
You may ask us to hand over the data that we process automatically on the basis of your consent or a contract, either to you or to a third party, in a common machine-readable format. A direct transfer to another controller takes place only where this is technically feasible.
Access, rectification, erasure and restriction of processing
Within the statutory framework you may at any time and free of charge obtain information about the personal data we hold about you, its origin, its recipients and the purpose of the processing. You may also ask us to rectify or erase that data or to restrict its processing. For this and for any other question about personal data, please use the contact details given in the section on the controller.
SSL/TLS encryption
This website uses TLS encryption (https) to protect the transmission of data between your browser and our server. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar.
No unsolicited advertising
We object to the use of the contact details published in our legal notice for sending advertising or information material that we have not expressly requested. We reserve the right to take legal action if we receive unsolicited advertising, such as spam emails.
3. Data collection on this website
Hosting
This website is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. When you visit the site, the hosting provider’s servers process the data your browser transmits (see “Server log files”). The provider acts as our processor and may handle this data only in accordance with our instructions. Using a professional hosting provider is based on our legitimate interest in a secure, fast and reliable presentation of our website (Art. 6 (1) (f) GDPR).
Cookies and browser storage
This website uses cookies and similar browser storage (such as localStorage) only to a limited extent. These are small data records that your browser stores on your device. We use them for technically necessary purposes, for example to remember your privacy choices or to keep a session going.
Technically necessary cookies and storage are used on the basis of Sec. 25 (2) TDDDG and our legitimate interest in a working and secure website (Art. 6 (1) (f) GDPR). This website sets no cookies that require consent. The cookies that record your choice in the cookie settings (names beginning with “avia”) are set only when you confirm the cookie notice and are kept for up to 365 days unless you delete them earlier.
You can also set your browser to notify you about cookies, to accept them only in individual cases, to reject them or to delete them automatically when you close the browser. If you disable cookies or browser storage, some functions of this website may not work.
Server log files
Each time the website is accessed, the hosting provider’s server automatically records information that your browser sends. These server log files contain:
- IP address of the requesting device
- Date and time of the request
- The requested address (URL) on this website
- Referrer URL, if your browser sends it
- Browser type, browser version and operating system (user agent)
We do not combine this data with other data sources and we do not evaluate the log files ourselves. The legal basis is Art. 6 (1) (f) GDPR: we have a legitimate interest in delivering the pages to your browser, in the secure operation of the website, in diagnosing technical faults and in preventing abuse.
Storage period: the log files are kept by our hosting provider for a limited period and then deleted automatically; we do not keep copies of them.
Email and phone inquiries
If you contact us by email or phone, we process the details you provide (such as your name, your contact details and the content of your message) in order to deal with your inquiry and any follow-up questions. We disclose inquiry data only where necessary for the stated purposes and permitted by law, including to service providers acting on our instructions. The relevant recipient categories are described in this notice.
Where your inquiry relates to a booking or to pre-contractual steps, the legal basis is Art. 6 (1) (b) GDPR; otherwise we process the data on the basis of our legitimate interest in handling inquiries properly (Art. 6 (1) (f) GDPR). We keep inquiry data for as long as it is needed to deal with the matter, and beyond that only as long as statutory retention obligations require (in particular under the German Commercial Code and Fiscal Code).
Recipients
Depending on how you use this website and contact us, the following categories of recipients may receive personal data: our hosting provider (see “Hosting”); our email service provider (Google Workspace) for messages you send to our email addresses; the telecommunications providers involved in transmitting phone calls; and public authorities or other bodies where we are legally obliged to disclose data.
Is providing your data required?
The technical data described under “Server log files” is required to deliver this website to your browser; without it the pages cannot be displayed. Contacting us is voluntary and there is no legal obligation to provide your data; however, we cannot answer your inquiry without contact details. If your inquiry leads to a booking, the data needed to conclude and perform the contract is required for it.
Last updated: October 2026
