You receive this information because the law requires it. It is not a consent and there is nothing for you to agree to.
In force from Sept. 23, 2026
ibindo operates this platform for accommodation providers, municipalities and their guests. ibindo is responsible for the data you create in your own Mein ibindo account.
For a guest registration form you fill in at an accommodation, that accommodation is responsible and ibindo processes the data on its behalf. For the statutory report to a municipality, the municipality is responsible. Which party answers for which body of data is recorded per data class in the platform's processing inventory.
Account data: your e-mail address, your name, the interface language and your account settings.
Sign-in data: when you signed in, which devices you trusted, and the one-time codes generated for a sign-in. One-time codes are stored only as a verification value.
Guest data: what a registration form is required to collect under the applicable registration law — depending on the accommodation and the country this can include name, date of birth, address, nationality, arrival and departure and the identity-document details of co-travellers. Which fields are actually collected is decided by each accommodation's field policy; fields that are not required are not collected.
Billing data: invoices and payment status. ibindo does not store card details; they are held by the payment provider.
Operational data: technical logs needed to run and secure the service.
Guest data is collected because registration law requires it (legal obligation). Account data is processed to perform the contract with you. Billing data is processed under tax retention obligations.
Only the items listed on the “Consents” page rest on consent. This privacy information is itself not a consent: you receive it because the law requires it, and there is nothing here for you to agree to.
A registration form is visible to the accommodation where you filled it in and, where the law provides for it, to the responsible municipality or statistics office.
Within the platform the data is separated per business. A business sees only the data of its own properties.
Service providers used by ibindo process data only on instruction: the e-mail delivery service for system messages, the payment provider for billing, and the protected file storage for uploaded documents. A marketing service provider is no longer used; the former transfer of account data to a newsletter provider was removed from the application in Sprint 104.
Guest data is kept for as long as the applicable registration law requires. Billing records are subject to tax retention periods.
One-time codes and sign-in traces are deleted after a short time. Where no binding period has yet been set for a class of data, the platform's processing inventory records this openly as unsettled rather than asserting a period.
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority.
In Mein ibindo you can export your data yourself at any time and request deletion of your account. Deletion does not cover data that must be retained under a legal obligation; what would remain is shown to you before the deletion.
A consent you have given can be withdrawn with one click on the “Consents” page at any time. Withdrawal takes effect for the future.
This information is versioned. If it changes it receives a new version number and is shown to you again. An earlier acknowledgement is not carried over retroactively to the new wording.
Approved by the Product Owner on Sept. 23, 2026 (Version 104.1).
In force from Sept. 23, 2026
Mein ibindo is the platform's guest account. It exists so that you can pre-fill registration forms, view, export or have your own data deleted, and manage your consents.
A Mein ibindo account is voluntary. A registration form can also be filled in without an account.
You sign in with a one-time code sent to your e-mail address. There is no permanent password that could be lost.
Do not pass one-time codes on. You can remove the trusted status of a device and end running sessions. The number of sign-in attempts and code requests is limited in order to protect your account.
The information in a registration form is a statutory declaration. It must be truthful and complete, and it must relate to the people who are actually travelling.
Do not enter other people's data unless you are entitled to do so. For co-travellers this expressly includes identity-document details.
ibindo provides the platform with customary care but does not owe uninterrupted availability. Maintenance and faults are possible.
ibindo does not check whether an accommodation meets its registration-law obligations and does not replace legal advice. Responsibility for a declaration remains with the accommodation or with the person required to make it.
The following in particular are not permitted: automated extraction of data, attempts to access the data of other businesses or guests, circumventing sign-in or rate limits, and uploading malicious software.
An account may be blocked in the event of serious or repeated breaches. Registration data that must be retained by law is not affected by this.
You can have your account deleted in Mein ibindo at any time. What would remain because of statutory retention obligations is shown to you beforehand.
These terms are versioned. A changed wording receives a new version number and is shown to you again.
Approved by the Product Owner on Sept. 23, 2026 (Version 104.1).
This site uses only cookies that are technically necessary to operate it. No analytics, no advertising and no third-party tracking. Privacy Policy