Cookies en privacy

At HotelGiftcard.com B.V. (“we”, “us”, “our”), protecting your privacy is our highest priority. This Privacy and Cookie Policy explains how we collect, use, store, and share your personal data when you use our website hotelgiftcard.com (“Website”). We act in full compliance with the General Data Protection Regulation (GDPR) and all other applicable data protection laws.

1. Who we are
   HotelGiftcard.com B.V.
   Ambachtsweg 6
   1474 HW Oosthuizen
   The Netherlands
   Email: [email protected]

   We are the controller responsible for processing your personal data within the meaning of Article 4(7) GDPR.

2. Which data we collect
   We collect personal data when you:
   • book accommodation,
   • subscribe to our newsletter, or
   • contact our customer service.

   This includes, among others:
   • name, address, email address, telephone number,
   • payment details (processed in encrypted form),
   • booking information,
   • technical information such as IP address, browser type, device data, and online activity.

   Email addresses for marketing purposes are stored only with explicit consent.

3. Purposes of data processing
   We process your personal data for the following purposes:
   • processing bookings,
   • handling special requests,
   • providing customer support,
   • secure payment processing,
   • fraud prevention,
   • sending marketing communications (only with consent),
   • compliance with legal obligations.
   
4. Legal bases for processing
   We rely on the following legal bases pursuant to Article 6 GDPR:
   • your explicit consent (e.g. for marketing purposes),
   • performance of a contract (e.g. bookings),
   • our legitimate interests (e.g. service improvement),
   • compliance with legal obligations.
   

5. Cookies and similar technologies
   We use cookies and similar tracking technologies to:
   • ensure the functionality of our website,
   • analyze and improve performance,
   • personalize your user experience.

   Legal basis: your consent pursuant to Section 25 TTDSG in conjunction with Article 6(1)(a) GDPR.
   You can manage your preferences via the cookie banner or your browser settings.
   

6. Data retention
   We store your personal data:
   • only for as long as necessary to fulfill the stated purposes,
   • for processing bookings and complying with statutory retention obligations,
   • for resolving potential disputes,
   • or for as long as your consent remains valid (e.g. for marketing).

   Marketing data is stored until you withdraw your consent.

7. Disclosure to third parties
   We only share your data with trusted third parties where necessary, such as:
   • payment service providers,
   • accommodation providers,
   • booking partners (e.g. Expedia),
   • IT hosting or maintenance providers.

   Your personal data is never sold.
   

8. Data transfers outside the EU
   If personal data is transferred outside the EU/EEA (e.g. to service providers in the United States), we ensure appropriate safeguards in accordance with Articles 44 et seq. GDPR, such as:
   • EU Standard Contractual Clauses (SCCs),
   • additional security measures and assessments.
   

9. Your rights
   Under Articles 15–22 GDPR, you have the following rights:
   • right of access to your stored data,
   • rectification of inaccurate data,
   • erasure (“right to be forgotten”),
   • restriction of processing,
   • data portability,
   • objection to processing,
   • the right to withdraw consent at any time.

   Contact: [email protected]
   

10. Data security
    We implement modern security measures, including:
    • SSL encryption,
    • access and network protection,
    • data backup strategies and audits,

    to protect your data against unauthorized access, loss, or misuse.
    

11. Changes to this policy
    We may update this policy from time to time, for example due to:
    • changes in legislation, or
    • adjustments to our data processing practices.

    Material changes will be clearly announced on our website or by email. We recommend reviewing this policy regularly.
    

12. Complaints and supervisory authority
    If you believe that your data has been processed unlawfully, you may lodge a complaint with a data protection supervisory authority.
    Responsible authority for Germany: The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
    Graurheindorfer Straße 153
    53117 Bonn
    www.bfdi.bund.de

    Contact for questions:
    HotelGiftcard.com B.V.
    Email: [email protected]

    Ambachtsweg 6
    1474 HW Oosthuizen
    The Netherlands