1. Name and address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
2. Processing personal data and the purposes of data processing
(a) When you visit our website
We collect your IP address, the name of your internet service provider, your browser information, the date and time of your visit, your computer’s operating system and your referrer and visited webpages , however, collecting this information we do not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver and optimize the content of our website (2) ensure lowest margin of downtown (3) and investigate any unlawful activities on it. Therefore, we analyze the collected information anonymously in order to increase the data security and data protection of our platform. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
(b) When you register on our platform
You can create a user account by entering your name, email address and password, later you can optionally enter more data from your personal `profile` page such as phone number, address, profile picture and a short introductory text about yourself which will be displayed to your public profile. After successfully registration we may collect various data from you like payment details, message communications, personal identity cards, last login date and time, IP address. You can cancel your account at any time by writing us an email. All your stored data will be erased permanently when you cancel an account, however, permanent erasure of data is only possible if you don’t have any contractual or statutory obligations.
(c) When you file a support ticket
You can contact us for various purposes by using our contact form. In this case your registered personal data such as name and email address and the requested message, booking or transaction number (if required) and attached documents are stored. These data are collected, stored and processed solely to process your submitted requests.
(d) When you subscribe for newsletter
You can subscribe for newsletters during the registration process or using an extra subscription form. After subscribing you will receive newsletters and other promotional emails from us. You can change the email receiving frequency form your account settings->notification preferences page. You can unsubscribe at any time by contacting us or by clicking the direct link at the bottom of each newsletter.
3. Transferring your personal data to third parties
When you book an accommodation we pass your relevant personal information to your respective hosts. We may disclose your personal data to the following situations: (a) when your data are requested by governmental body. (b) To our trusted partners. (c) To external service provider to facilitate your requested services.
5. Google AdSense
6. Google Analytics
7. Facebook Plugins
8. Rights of the data subject
Your rights are:
(a) The right to be informed: you have the right to be informed about how we use your personal data.
(b) The right of access: you can request to receive a copy of the data that we have about you.
(c) The right to rectification: you can correct or update data in case of wrong or data has changed.
(d) The right to erasure (The right to be forgotten): you can request to remove your personal data from our records unless it is needed to fulfill a legal obligation.
(e) The right to restrict processing: you can request us to stop processing your personal data.
(f) The right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format.
(g) The right to object: you have the right to object to data processing, if you think that our legitimate interest might infringe upon your rights.
(h) The right to lodge a complaint: you have the right to file a complaint with the data processing authority at the place of your residence.
(i) The right to withdraw consent.
9. Legal basis for processing
Point (a) of Art. 6(1) GDPR serves as the legal basis for processing personal data hence we obtain consent from the data subject. If it is necessary for the performance of a contract to which the data subject is a party Point (b) of Art. 6(1) GDPR serves as the legal basis for processing personal data. This also applies for pre-contractual measures. Point (c) of Art. 6(1) GDPR serves as the legal basis for processing personal data in where our company is a subject to legal obligation. Point (d) of Art. 6(1) GDPR serves as the legal basis for processing personal data in order to protect the vital interests of the data subject or of another natural person. If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, Point (f) of Art. 6(1) GDPR serves as the legal basis for processing.
10. Data storage period
The period of storage of personal data is determined based on the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the purpose.