Privacy statement.

What data we process

• When you book: your name, email address, phone number, any message you add, the dates of your stay, the number of guests, the language you book in and the amounts.
• Payment details: you pay through Mollie. We only see whether and how you paid; we never receive your full account or card details.
• When you get in touch: your name, email address and your message.
• When you visit the site: we use Simple Analytics, which counts visits without cookies and without storing personal data or IP addresses. Our hosting provider keeps technical log files for a short time, including IP addresses, to keep the site running safely.
• The map on the Location page comes from OpenStreetMap. To load it, OpenStreetMap sees your IP address; it doesn't set cookies.

Why, and on what legal basis

• To carry out your booking: confirming it, sending you the practical info, cancelling and refunding, settling the deposit and invoicing water and electricity. Basis: our agreement with you.
• To meet legal obligations, such as our bookkeeping and paying tourist tax. Basis: legal obligation.
• To answer your questions and prevent misuse of the site. Basis: our legitimate interest.

Who we share data with

We never sell your data. We only share it with the services we need to run the site and your booking, which are bound by privacy law:

• Mollie (payments and refunds)
• Postmark (sending emails)
• Vercel (website hosting)
• Neon (the database that holds bookings)
• Simple Analytics (anonymous visitor statistics)

Airbnb, Micazu and StayCuracao

To prevent double bookings, we share only which dates are taken with these platforms. Your name and other details aren't shared with them.

Outside the EU

The website and the bookings database run in Frankfurt, in the EU. A few of these services are American companies, though, and Postmark sends emails from the United States. That only happens with the safeguards European privacy law requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

• Bookings and payments: 7 years after your stay, because the law requires it for our bookkeeping. After that they're deleted automatically.
• Your phone number and message with the booking: until a year after your stay. After that we wipe them automatically.
• A payment you don't complete: deleted automatically after 30 days.
• Messages by email or the contact form: as long as needed to handle your question, and at most a year after that.
• Technical hosting logs: a few days.

Cookies

We don't use tracking or advertising cookies. During checkout we set one functional cookie that remembers your payment status; it expires after an hour. The owners also use a login cookie for the bookings overview.

Security

The site only works over an encrypted connection. The link to your booking is personal and protected with a digital signature, so don't share it with others.

Your rights

You can always ask us what data we hold about you, have it corrected or deleted (unless the law requires us to keep it), restrict its processing, object, or receive your data in a common format. Email us and we'll reply within a month.

Not happy with how we handle your data? Let us know first. You can also file a complaint with the data protection authority; in the Netherlands that's the Autoriteit Persoonsgegevens.