PRIVACY POLICY

1. Purpose of this policy

This Privacy Policy applies to the processing of personal data in connection with the services provided through the bestbooking.eu website (hereinafter: BestBooking Platform).

The purpose of the BestBooking Platform is to enable users to search for, view and book accommodation, manage bookings and conduct the necessary communication relating to accommodation.

The operator of the BestBooking Platform processes personal data exclusively for specified, explicit and legitimate purposes, to the extent necessary to achieve those purposes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable data protection legislation.

2. What personal data do we process?

The scope of personal data processed depends on how you use the BestBooking Platform.

In the case of registration and a user account, we may process, in particular, your name, e-mail address, telephone number, login and account data, as well as other contact details provided by you.

In the case of a booking, we may process, in particular, the name and contact details of the person making the booking, the necessary data of the guests participating in the booking, the selected accommodation, the dates and times of arrival and departure, the number of guests, the price of the booking, comments or special requests forwarded to the accommodation, and other data necessary for fulfilling the booking.

In the case of payment and invoicing, we may process the data necessary for making the payment, identifying the transaction, and issuing and retaining an invoice, receipt or other necessary document.

If you book accommodation for another person or together with other persons and therefore provide the personal data of another person, you are obliged to ensure that you have the appropriate authorisation to provide such data and that the person concerned receives appropriate information about the processing of data.

3. Automatically processed technical data

When using the BestBooking Platform, certain technical data may be recorded automatically, including in particular:

IP address;
date and time of the visit;
pages visited;
browser and operating system type;
technical information concerning the device;
language settings;
referring page;
technical and security log data relating to the use of the Platform.

We process this data primarily for operating and securing the Platform, detecting and remedying errors and misuse, and developing the service.

4. Purpose of processing

Personal data is processed exclusively for specified, explicit and legitimate purposes, to the extent necessary to achieve those purposes.

The purposes of processing personal data include in particular:

creating and managing a user account;
enabling the search for and booking of accommodation;
creating, confirming, modifying or cancelling a booking;
transmitting the data necessary for fulfilling the booking to the relevant accommodation;
enabling communication relating to the booking between the user and the accommodation;
processing data relating to payment of the consideration for the service and the payment transaction;
issuing and retaining an invoice, receipt or other document required under applicable legislation;
handling customer service enquiries and complaints;
preventing, detecting and investigating misuse, attempted fraud and unauthorised access;
fulfilling statutory obligations and lawful requests from authorities;
bringing, enforcing or defending legal claims;
operating, analysing and developing the Platform securely.

Personal data may not be used for another purpose incompatible with the original purpose of processing.

If we intend to further process personal data for a purpose other than that for which it was originally collected, we will inform the data subject, before commencing the new processing, of the new purpose and other relevant circumstances relating to the processing required by law.

5. Legal basis for processing

Depending on the purpose of processing, the legal basis for processing is:

performance of a contract, or taking steps at the request of the data subject prior to entering into a contract, in particular for registration, booking and the provision of related services;
compliance with a legal obligation, in particular in the case of applicable accounting, tax, regulatory and other statutory obligations;
the legitimate interest of the operator of the BestBooking Platform or of a third party, in particular for the secure operation of the Platform, prevention of misuse and fraud, ensuring the operation of the service, and bringing, enforcing or defending legal claims;
the consent of the data subject, in cases where consent is required for processing.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. Necessity of providing personal data

The BestBooking Platform requires the provision only of personal data necessary for providing the relevant service or complying with a statutory obligation.

If providing certain personal data is essential for registration, creating or fulfilling a booking, payment, invoicing or providing another necessary service, failure to provide the data may result in the relevant service not being available or not being available in full.

If providing certain data is voluntary, we will indicate this appropriately when requesting the data.

7. Transfer of data to the accommodation

We transfer the personal data necessary for fulfilling the booking to the accommodation at which you made the booking.

Only data necessary for managing the booking and providing the accommodation service is transferred to the accommodation.

The accommodation may process the personal data provided to it for fulfilling the booking and the accommodation service, as well as for complying with its own statutory obligations.

The accommodation is responsible, under the applicable data protection rules, for its own data processing activities concerning the data provided to it.

8. Data processors and external service providers

External service providers may be used to operate the BestBooking Platform, including in particular:

hosting and server operators;
e-mail and communication service providers;
IT service providers;
payment service providers;
security and logging service providers;
analytics and technical service providers.

These service providers may process personal data only to the extent necessary to provide their services and in accordance with the applicable data protection rules.

If personal data is transferred to a country outside the European Economic Area in respect of which no adequacy decision by the European Commission is in force, the transfer may take place only with appropriate safeguards permitted by the GDPR.

9. Retention and deletion of data

We process personal data only for as long as necessary to fulfil the purpose of processing or for as long as further retention is required by applicable legislation.

We may process booking and contractual data for the period necessary to provide the service and thereafter, taking into account the period available for bringing, enforcing or defending any potential legal claims.

We retain invoicing, payment and other data required to be retained by law for the period prescribed by applicable accounting, tax or other legislation.

The data subject may request the deletion of their personal data, in particular where:

the personal data is no longer necessary for the purpose for which it was collected or processed;
the processing was based on consent, the data subject has withdrawn consent and there is no other legal basis for the processing;
the data subject lawfully objects to the processing and there are no overriding legitimate grounds for continuing the processing;
the personal data has been processed unlawfully;
the personal data must be erased to comply with an applicable legal obligation.

The right to erasure is not unlimited. Personal data may continue to be retained, in particular where processing is necessary for compliance with a legal obligation or for bringing, enforcing or defending a legal claim.

Consequently, closing a user account or completing a booking does not automatically result in the deletion of all related personal data where there is an appropriate legal basis for retaining it.

10. Data security

The operator of the BestBooking Platform applies appropriate technical and organisational measures to protect personal data, in particular against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.

Personal data may be accessed only by persons who need it to perform their duties.

We design the security measures applied with regard to the nature of the data processed, the circumstances of the processing and the potential risks.

11. Your data protection rights

You are entitled, under the conditions set out in applicable data protection legislation, in particular the GDPR, to:

request access to the personal data processed about you and information about its processing;
request the rectification of inaccurate personal data and the completion of incomplete data;
request the deletion of your personal data where the statutory conditions are met;
request restriction of processing in the cases specified by law;
exercise your right to data portability where the statutory conditions are met;
object to processing based on legitimate interests on grounds relating to your particular situation;
withdraw your consent at any time where processing is based on consent;
lodge a complaint with the competent data protection supervisory authority;
seek judicial remedy in accordance with applicable legislation.

Data protection requests may be submitted through the contact details provided on the BestBooking Platform.

We will handle requests without undue delay and within the time limit specified in the GDPR.

12. Automated decision-making and profiling

If the BestBooking Platform uses decision-making based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them, the data subject will be informed separately, in accordance with applicable data protection legislation, of the fact, essential circumstances and expected consequences of such processing.

13. Complaints and legal remedies

If you believe that the processing of your personal data infringes the applicable data protection legislation, you are entitled to lodge a complaint with the competent data protection supervisory authority and to seek judicial remedy.

Within the European Union, the data subject may in particular contact the data protection supervisory authority of the Member State of their habitual residence, place of work or the place of the alleged infringement.

14. Cookies and similar technologies

The BestBooking Platform may use cookies and similar technologies necessary for its operation and, depending on the settings applied and the user's consent, statistical or other cookies and similar technologies.

Cookies may serve, among other things, to:

ensure the proper operation of the website;
maintain security;
remember user settings and language preferences;
analyse and develop the use of the Platform

.

Cookies or similar technologies that are not strictly necessary for the operation of the Platform are used only in accordance with applicable legislation and, where necessary, on the basis of the prior consent of the data subject.

15. Amendments to this policy

The operator of the BestBooking Platform is entitled to amend this Privacy Policy, in particular in the event of changes to the operation of the service, the technologies used or the legal environment.

The version currently in force is available on the BestBooking Platform.

If the amendment materially affects the processing of personal data, we will inform the data subjects of the change in a manner compliant with applicable legislation.