Privacy notice
This page describes what happens to your details when you visit the website of Apartment Zonnen-Alp or fill in a form on it.
Who is responsible
Joke Breukers-ten Brink is responsible for the details you send through this website (the controller under the GDPR). You can reach Joke at breukersbrink@gmail.com.
CasaFlow built this website and runs it. For the forms, CasaFlow works on behalf of Joke (as a processor): CasaFlow receives a copy of every form, to see that it arrives properly, and uses it for nothing else.
Which details and what for
When you use the enquiry form, these details are sent: name, email address, phone number (optional), arrival and departure dates, number of guests, message (optional) and the language of the page. They are used only to answer your enquiry and to arrange a stay that follows from it. The legal basis is your own request: answering it is a step towards a rental agreement (Article 6(1)(b) GDPR). The required fields are needed to answer you. You get no newsletter, and your details are not used for anything else.
When you write in the guestbook, these details are sent: name, message and the language of the page. Joke decides which messages appear on the website; a chosen message may appear there with your name. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with an email to breukersbrink@gmail.com; the message is then removed. This does not affect the lawfulness of what happened before you withdrew it.
Where the details go
Your inquiry is shared directly and securely with the property owner. We keep a suppressed record of your contact preference to respect your inbox, but we never sell your data.
What you enter in a form goes from your browser straight to Google, into an account that CasaFlow manages; Google also receives your IP address and browser type. There it is stored with the date and time in a spreadsheet that holds this website's form submissions, and it is sent by email to Joke, with CasaFlow in copy. After an enquiry you also receive an acknowledgement by email. The spreadsheet and the emails are on Google's servers; CasaFlow's copy is in a mailbox at GoDaddy.
When you visit the website
The website is hosted by Cloudflare. To deliver a page, Cloudflare processes technical data such as your IP address and browser type.
The fonts come from the same server as the website itself; nothing is loaded from Google Fonts or any other font service.
This website sets no cookies. Your browser does keep one item for this website: za_lang, the language you choose in the digital guest guide. It stays on your device and is not sent anywhere.
Cloudflare does add a small measuring script to every page, Cloudflare Web Analytics. It measures how fast the page loads and counts page views. It sets no cookies and stores nothing on your device; according to Cloudflare, the script collects no personal data. Apart from that, there are no measuring or advertising scripts on the website.
The legal basis for this technical data is the legitimate interest of Joke in a website that works safely and well (Article 6(1)(f) GDPR).
Outside the European Economic Area
Google, GoDaddy and Cloudflare are American companies, so your details may also end up on servers outside the European Economic Area.
How long details are kept
There is no fixed period after which your details are deleted automatically. A form stays stored in the mailbox of Joke, in the spreadsheet and in CasaFlow's email, including its own archive of it until you ask for it to be deleted.
Rights and complaints
You may always ask which details are held about you, and have them corrected, deleted or transferred. You may also ask for their use to be restricted, and you may object to it. An email to breukersbrink@gmail.com is enough.
If you disagree with how your details are handled, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the country where you live.