Privacy Policy

1. What Data We Collect

When you submit a booking request via our booking form, we collect:

• Full name
• Email address
• Phone number
• Requested arrival and departure dates
• Number of adults and children
• Selected apartment
• Optional message / special requests

When you submit a contact form, we collect:

• Full name
• Email address
• Message content

We also collect basic technical data for spam prevention purposes (submission timestamp, honeypot field result). This data is not stored and is only used to filter out automated submissions.

2. Purpose of Processing

We process your personal data solely for:

• Processing and responding to your booking request
• Confirming availability and reservation details
• Responding to your enquiries via the contact form
• Providing customer support related to your stay

We do not use your data for marketing, profiling, or automated decision-making.

3. Legal Basis

The legal basis for processing your data is your explicit consent (Article 6(1)(a) GDPR), given when you tick the consent checkbox and submit the booking or contact form. You may withdraw your consent at any time by contacting us.

4. How We Send Your Data — Email Delivery

When you submit a form on our website, your data is transmitted to us via Resend (resend.com), a transactional email service. Resend processes your data solely to deliver the email notification to us and acts as a data processor under a data processing agreement.

Resend is GDPR-compliant and does not use your data for its own purposes. For more information, see Resend's Privacy Policy at resend.com/privacy.

5. Data Retention

Your personal data is retained in our email inbox only as long as necessary to respond to your request or to complete reservation-related communication. We do not store your data in any database. You may request deletion at any time.

6. Data Sharing

We do not sell, trade, or share your personal data with any third parties for commercial purposes.

The only third party that handles your data is Resend (our email delivery provider), which acts strictly as a data processor. No other parties receive your data.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Withdraw your consent at any time
• Lodge a complaint with a supervisory authority