Privacy Policy

1. Introduction

oxalidfzna B.V. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our vacation rental platform and services. As a company registered in the Netherlands, we comply with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

2. Data Controller

oxalidfzna B.V. is the Data Controller for the personal data processed through our platform. Our contact details are:

3. Data Collection

The data we collect includes personal information such as your name, email address, phone number, payment details, booking preferences, and communication records when you use our vacation rental platform. We collect this information when you create an account, make bookings, contact our support team, or interact with our website and services.

We also automatically collect technical data including your IP address, browser type, device information, and usage patterns through cookies and similar technologies to improve our services and provide you with a better user experience.

4. How We Use Your Information

We explain how we use your information to provide and improve our vacation rental services, process bookings, communicate with you about your reservations, provide customer support, and send you relevant updates about our services. The use of your data is essential for delivering our vacation rental platform services effectively.

Additionally, we may use your information for marketing purposes (with your consent), fraud prevention, legal compliance, and to personalise your experience on our platform based on your preferences and booking history.

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Performance of contract: To fulfill our booking services and customer support
• Legitimate interests: To improve our services, prevent fraud, and ensure platform security
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with tax, accounting, and other legal requirements

6. Data Sharing

We may share your personal data with trusted third parties including property owners for booking purposes, payment processors for secure transactions, service providers who help us operate our platform, and legal authorities when required by law. We ensure all third parties maintain appropriate data protection standards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Generally, we keep booking data for 7 years for accounting and legal purposes, account information while your account remains active plus 3 years after closure, and marketing data until you withdraw consent or we determine it's no longer needed.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: For processing based on consent

9. International Data Transfers

As we operate across Europe, your data may be transferred to other EU countries. For any transfers outside the EU, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.

10. Security Measures

We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

11. Cookies and Tracking

Our website uses cookies and similar tracking technologies. Please refer to our Cookie Policy for detailed information about the types of cookies we use and how to manage your preferences.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding privacy matters, please reach out to us:

15. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your EU member state.