Legal notice & Privacy

Note: This is a translation provided for convenience. The German version is legally binding. As Mama Leuah – Guesthouse and Restaurant is based and operated in Laos, the business is primarily subject to Lao law. The following structure follows the legal notice customary in German-speaking countries (based on § 5 TMG or comparable disclosure obligations) to offer German-speaking guests the transparency they are used to.

Company details

Mama Leuah Guesthouse and Restaurant Owner: Pheng Sengpachan Sunrise Road, Don Det 16060 Champasak Province, Laos

Contact

• Pheng – Lao/Thai+856-20-57233678Phone and WhatsApp
• Lutz – German/English+856-20-59078792Phone and WhatsApp

Email: lutz@mamaleuah-dondet.com Website: www.mamaleuah-dondet.com

Responsible for content

Pheng Sengpachan Sunrise Road, Don Det, 16060 Champasak Province, Laos

Legal form / registration

Family business (guesthouse & restaurant) Registering authority: Department of Industry and Commerce, Khong District, Champasak Province, Laos Registration number: [please add if available]

VAT

Not subject to VAT in the EU (company based in Laos, no EU VAT ID)

Liability notice

Despite careful content control, we assume no liability for the content of external links. The operators of linked pages are solely responsible for their content.

to be clarified with a lawyer specialising in digital/media law or an IHK advisory office.*

Note: This is a translation provided for convenience. The German version is legally binding. Mama Leuah Guesthouse and Restaurant is a company based in Laos. Since the website specifically addresses guests from the EU, among others, the EU General Data Protection Regulation (GDPR) may apply under Art. 3(2) GDPR. This policy is therefore based on the usual GDPR requirements. Several details are marked as placeholders because they depend on the technology actually used (hosting, booking system, cookies, tracking) – please complete them before publication or coordinate them with professional/legal advice.

1. Controller

Mama Leuah Guesthouse and Restaurant Owner: Pheng Sengpachan Sunrise Road, Don Det, 16060 Champasak Province, Laos

• Pheng – Lao/Thai+856-20-57233678Phone and WhatsApp
• Lutz – German/English+856-20-59078792Phone and WhatsApp

Email: lutz@mamaleuah-dondet.com Website: www.mamaleuah-dondet.com

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services (e.g. room enquiries and bookings). Processing generally takes place only with the user's consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures such as a booking enquiry (Art. 6(1)(b) GDPR), or on the basis of legitimate interests (Art. 6(1)(f) GDPR), such as the technically error-free display of the website.

3. Provision of the website and server log files

When you visit our website, our hosting provider automatically collects information transmitted by your browser (so-called server log files), including: IP address, date and time of the request, browser type and version, operating system and the previously visited page (referrer URL). This data cannot be attributed to specific persons and is evaluated solely to ensure smooth operation and to improve our offer (Art. 6(1)(f) GDPR).

Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre locations include Nuremberg). Details on data processing by Hetzner can be found in the provider's privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz

Hetzner is used on the basis of Art. 6(1)(f) GDPR (legitimate interest in a reliable, secure presentation of our website). A data processing agreement (DPA) pursuant to Art. 28 GDPR should be concluded with Hetzner, obliging Hetzner to process the data of our website visitors only in accordance with our instructions. [Please confirm that such a DPA with Hetzner exists, or conclude one if not yet done.]

4. Cookies

Our website is created and published via the Lovable platform. Lovable automatically integrates its own built-in analytics function ("Lovable Analytics") as soon as a project is published; it is enabled by default. Lovable's publicly available documentation does not conclusively state whether cookies or similar storage technologies are placed on your device – according to Lovable, however, no individual visitor profiles are created across multiple visits. See section 7 for details.

If additional cookies that are not technically necessary are used, this only happens with your prior consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

5. Contact and booking form

If you contact us via a contact or booking form on our website, the data you provide (e.g. name, email address, phone number, desired arrival/departure period, number of guests and any other voluntary information) is stored by us for the purpose of processing your enquiry or booking and in case of follow-up questions (Art. 6(1)(b) GDPR). This data is not passed on without your consent unless this is necessary to fulfil the contract (e.g. to a payment service provider, see section 6).

6. Payment processing

No payment or credit card data is collected, stored or processed via our website. The booking form serves exclusively to submit your reservation request; no online payment takes place. Payment for your stay is made by other means outside the website (e.g. on site).

7. Analytics and tracking tools

We use the analytics function "Lovable Analytics" integrated into the Lovable website platform. It is activated automatically as soon as the website is published via Lovable (default setting) and, according to Lovable, records aggregated usage data such as:

• Number of visitors and page views
• Time on site and bounce rate
• Origin of access (referrer/traffic source)
• Device type (desktop, mobile, tablet)
• Country (determined, according to Lovable, from the browser's time zone)

According to Lovable, this serves exclusively to measure overall visitor traffic; no individual visitor profiles are created and visitors are not recognised or tracked across multiple visits (source: Lovable documentation, docs.lovable.dev/features/analytics). Processing is based on our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR).

We have deliberately enabled this function. It can be deactivated on the project side at any time should this change in future. [If further tools such as Google Analytics or a Meta Pixel are added manually, they would need to be listed here separately.]

8. Embedded third-party content

On our website we embed content from the following third-party providers (e.g. a map for directions and guest reviews). When the respective page is opened, a connection to these providers' servers may be established during loading – even without active interaction – transmitting at least your IP address and browser/device information; the providers may also set their own cookies.

Google Maps and Google reviews Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). To display the map (directions) and any embedded Google reviews, a connection to Google servers is established, whereby personal data may also be transferred to the USA. More information: https://policies.google.com/privacy

Booking.com reviews Provider: Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands. When embedded Booking.com reviews are loaded, data is transferred to Booking.com. More information: https://www.booking.com/content/privacy.html

Tripadvisor reviews Provider: Tripadvisor LLC, 400 1st Avenue, Needham, MA 02494, USA. When the Tripadvisor review widget is loaded, data is transferred to Tripadvisor servers, including in the USA. More information: https://tripadvisor.mediaroom.com/DE-privacy-policy

The embedding is based on our legitimate interest in an attractive presentation of our offer and a credible presentation of guest reviews (Art. 6(1)(f) GDPR). Where cookies that are not technically necessary are set or data is transferred to the USA, your consent is additionally required (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

[Technical implementation note: Ideally, these three widgets should only be loaded AFTER your consent (e.g. via a "two-click solution" or a cookie consent tool), not automatically when the page is opened. Please check in the Lovable project whether the map/reviews are currently embedded automatically and switch to consent-based embedding if necessary.]

9. Your rights as a data subject

Within the framework of applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing (Art. 15 GDPR) and, where applicable, a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. For this and any other questions about data protection, you can contact us at any time using the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement.

10. Storage period

Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for processing ceases to apply. For booking enquiries, we store your data for as long as necessary to handle your stay and to comply with any statutory retention obligations. [If specific periods are known, e.g. statutory retention obligations in Laos, please add them here.]

11. Data transfer outside the EU

Website data is technically stored by our hosting provider Hetzner Online GmbH on servers in Germany (EU) – no data transfer to a third country takes place here.

However, our company (the controller, Mama Leuah Guesthouse and Restaurant) is based in Laos, outside the EU/EEA. When processing your booking enquiry (see section 5), the data you submit is therefore passed on to us in Laos or viewed there – a country for which there is no adequacy decision by the EU Commission. By submitting a booking enquiry, you consent to this transfer, which is necessary to fulfil your request (processing the booking).

12. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.

**As of: 24.09.2026