Privacy statement
De Reggestee - Bed & Breakfast, holiday flats and the Reggedeel
Chamber of Commerce number: 08222259 | Hellendoornseweg 10a, 7688 PD Daarle
Last updated: 4 November 2019
Introduction
When processing the personal data of our customers and users of our website, we are qualified as a data controller within the meaning of the General Data Protection Regulation (hereinafter the ‘AVG’). This privacy statement applies to all personal data that we process from you as a data controller.
We respect the privacy of all our (potential) customers and users of our website. Through this privacy statement, we wish to inform you about how we handle your personal data.
Personal data
If you wish to book an overnight stay with us, we will ask you to provide your personal data, such as your name, date of birth, address details, bank details and contact details, namely your telephone number and e-mail address. You can provide these details via (i) our own website under the heading ‘Booking’, (ii) a third party, such as via www.booking.com, or (iii) by telephone.
We also process your personal data when you leave a review on our website or when you contact us via the contact form on the website or via our phone number or e-mail address.
Bookings via a third party
If you decide to go through a third party, such as www.booking.com, they process your personal data. We recommend that you always consult the privacy statement of the relevant website.
Basis & purposes
Under the AVG, we may only process your personal data if we have a legal basis to do so. Your personal data will be processed by us on one of the following bases:
- We need your personal data to perform the agreement we wish to enter into with you or which already exists between us;
- It is necessary for us to process your personal data to comply with legal obligations incumbent upon us (e.g. the obligation to keep accounts for a period of 7 years);
- The processing is necessary to pursue our legitimate interests (e.g. our business interest in including you in our customer database).
We only use your personal data for the following purposes:
- Confirming, further processing and storing your reservation request;
- Informing you about your reservation and/or our service offerings;
- Answering questions and/or comments;
- Sending the invoice for the services rendered;
- Saving and publishing reviews;
- Providing the best possible service;
- Meeting our legal obligations.
Third parties & sharing of personal data
If you reserve a stay with us through the Website or through a third-party website, your personal data will be entered and stored, directly or indirectly, in a reservation programme called Vaptex. Vaptex is hereby considered a processor within the meaning of the AVG.
We have entered into a processor agreement with Vaptex in which they have undertaken to comply with all obligations arising from the AVG and other laws and regulations, including taking appropriate technical and organisational measures to protect your personal data. You can access the content of the processor agreement via the following link: https://www.reflex-online.com/veiligheid-van-uw-gegevens/.
In addition, we may share your data with third parties we engage, such as email and mail processors. This data is only shared to fulfil the obligations under our agreement.
We will not share your personal data with third parties other than the above. Therefore, your personal data will not be shared with third parties outside the European Economic Area.
Retention periods
We will retain your personal data for as long as necessary for the purpose for which it was collected or as long as necessary under the legal obligations incumbent upon us. In principle, we apply the following retention periods:
- Information requests and completed contact forms - the retention period is no longer than strictly necessary to answer your request and/or question;
- Booking requests - in connection with the legal obligation to keep records, the retention period is 7 years after booking.
Protective measures
We take the protection of your personal data very seriously and take appropriate organisational and technical measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification.
For an overview of the technical and organisational measures taken by Vaptex, please refer to Annex 1 of the processing agreement, which can be found via the following link: https://www.reflex-online.com/veiligheid-van-uw-gegevens/.
Your rights
Under the AVG, you have the following rights:
- The right to data portability - your right to recover your personal data and to transfer it (or have it transferred) to another controller without hindrance;
- The right to oblivion - Your right to be ‘forgotten’ in our system;
- Right of inspection - your right to inspect the personal data processed about you;
- The right to rectification and supplementation - your right to amend or supplement personal data processed about you;
- The right to restrict processing - Your right to have less of your data processed;
- The right regarding automated decision-making and profiling - Your right to a human eye in automatic decisions with a legal effect;
- The right to object against data processing.
If you wish to exercise any of the above rights please contact us at info@reggestee.nl. If you prefer to send your request by post, please address it to: De Reggestee, attn Herman and Bernadien Bakhuis, Hellendoornseweg 10a, 7688 PD in Daarle.
Questions, comments or complaints?
Should you have any questions, comments and/or complaints following this privacy statement, please contact us at the following telephone number: (+31)(0)6 307 033 81. You may also send an e-mail to info@reggestee.nl or send a letter to De Reggestee, attn Herman and Bernadien Bakhuis, Hellendoornseweg 10a, 7688 PD in Daarle.
If you have complaints about the way we handle personal data, you can also make your complaint to us or to the Personal Data Authority via their website www.autoriteitpersoonsgegevens.nl.
Changes
We reserve the right to amend this privacy notice. If we amend this privacy statement, the old privacy statement will automatically be replaced by the new privacy statement. We therefore ask you to review this privacy statement with some frequency.