Casa Uthando privacy policy

1. Who is responsible?

Casa Uthando is rented out by Hedy & Ruben Venetiaan. They are responsible for the processing of personal information through this website and in connection with reservations.

For questions about this privacy policy or the processing of personal information, please use the website's contact form or email info@casa-uthando.nl.

2. What information do we process?

For contact requests, we process the information you provide, such as your name, email address, phone number, and message.

For booking requests and reservations, we process information needed for the stay and administration, such as your name, address, email address, phone number, arrival and departure dates, number of guests, selected additional services, invoice details, payment information, and booking-related communications.

When you leave a review, we process your name, review text, rating, and any photos. Once approved, this information, except your email address, may be published on the website.

We also process technical information needed for the website's security and operation, such as IP addresses and browser information.

We do not request special-category or sensitive personal information, such as medical information or a Dutch citizen service number (BSN). You do not need to provide such information unless it is necessary for your question or stay.

3. How do we use your information?

We use personal information to answer questions, check availability, calculate rates, process booking requests and reservations, send invoices, handle payments and security deposit settlements, and organize practical arrangements for your stay.

We also use information for customer service, reviews, administration, compliance with legal obligations, and website security.

If you do not provide information needed for a request, reservation, payment, or stay, we may be unable to process your request or reservation.

4. Legal bases under the GDPR

We process personal information when it is necessary to perform a contract, including reservations, payments, invoicing, and stays.

We also process information to comply with legal obligations, such as tax record retention requirements.

We process information for website security and service improvements on the basis of a legitimate interest.

When we request consent, for example to publish review photos or use nonessential cookies, you may give or refuse it. You may withdraw your consent at any time.

5. Practical arrangements for your stay

After a reservation is made, Hedy & Ruben create a WhatsApp group with the guest and the local property manager. The local property manager coordinates arrival, departure, cleaning, transfers, and any grocery arrangements.

We share only the information needed for those purposes with the local property manager, such as your name, dates of stay, arrival information, contact details, and agreed arrangements.

Curaçao is outside the European Economic Area. Information is shared solely to fulfill the reservation and arrange the stay.

WhatsApp is a Meta service. If you prefer not to use WhatsApp, please let us know so we can look for a practical alternative for coordinating your stay.

6. Sharing personal information with third parties

We do not sell personal information. We share information only with parties needed to provide our services, maintain security, or meet legal obligations, such as hosting, email, administration, and payment providers.

Where necessary, we make confidentiality and security arrangements with these parties.

When personal information is processed outside the European Economic Area, we ensure that this takes place only in accordance with the GDPR, for example with appropriate safeguards or another permitted legal basis.

7. Cookies

This website does not use tracking, advertising, or remarketing cookies.

To improve the website, we collect aggregated statistics without cookies. Examples include daily page views, WhatsApp clicks, opened FAQ items and photos, price calculations, and successful booking requests.

These statistics are processed without visitor IDs, cookies, localStorage, fingerprinting, IP address storage, or an external analytics service. An anonymous marker in sessionStorage prevents duplicate counting within the same browser tab and disappears when the tab is closed. If the browser provides this information, only the broad referral category or referring website's domain name is stored in aggregate, not the full URL or search query. The information helps us understand where visitors leave the process and which parts of the website they use.

Functional and security cookies may be used to keep the website working properly and securely.

Consent is not required for these cookies. If this changes in the future, this policy will be updated and consent requested where necessary.

8. Retention periods

We do not keep personal information longer than necessary.

We retain contact information for as long as needed to handle requests and follow up.

We generally retain reservation, invoice, and payment information for 7 years to meet tax obligations.

Reviews remain visible for as long as they are relevant or until removal is requested, unless there is a compelling reason to retain them.

Technical and security information is retained no longer than necessary for security and abuse prevention.

9. Security

We take appropriate technical and organizational measures to protect personal information against misuse, loss, unauthorized access, and other forms of unlawful processing.

The website is protected against spam, form abuse, unauthorized access, and unsafe file uploads.

Only people who need the information for their work have access to personal information.

10. Your rights

Under the GDPR, you have the right to access, correct, or delete your personal information, restrict its processing, object to processing, and transfer your information where applicable.

To exercise these rights, use the contact form or email info@casa-uthando.nl. We may ask for additional information to verify your identity.

You may also file a complaint with the Dutch Data Protection Authority if you believe we are not handling your information properly.

We do not use automated decision-making or profiling that significantly affects you in a comparable way.

11. Changes

We may update this privacy policy when our website, services, or legislation changes. The latest version is always available on this page.