Last updated: 15 July 2026
This Privacy Policy explains how personal data is collected, used, stored and shared when you:
We process personal data in accordance with the General Data Protection Regulation, referred to as the “GDPR”, and applicable Dutch privacy legislation.
The person responsible for the processing of your personal data is:
Marcel van Rijn
Host of Cozy Beach Cottage Enkhuizen
Accommodation address:
Kooizandweg 12
1601 LK Enkhuizen
The Netherlands
Email: [insert privacy/contact email address]
Telephone: +31 6 51055167
Website: https://cozy-beach-cottage-enkhuizen.nl/
In GDPR terminology, we are the “data controller”.
Questions or requests concerning personal data may be sent using the contact details above.
The personal data we process depends on how you use our website and services.
When you visit the website, our website platform and technical service providers may process information such as:
Some of this information is necessary to deliver the website, display the correct language or currency, maintain the booking process and protect the website against technical misuse.
When you contact us or submit a booking enquiry, we may process:
Please do not include sensitive personal data in free-text fields unless it is necessary and we have specifically requested it.
When you make or manage a booking, we may process:
Where necessary, limited guest information may be shared with the holiday park or reception to arrange access, check-in, tourist tax administration and guest support.
We may process:
Payments may be processed through Lodgify or through a payment provider such as PayPal or another provider identified during checkout or in the payment request.
We do not normally receive or store complete payment card details. These are processed directly by the relevant payment provider.
Where a reservation is made through a third-party platform, we may receive information from that platform that is necessary to manage the reservation.
The third-party platform processes data under its own privacy policy. This Privacy Policy applies to the personal data we receive and subsequently process ourselves.
We process contact and enquiry information to respond to questions, provide availability or pricing information and take steps at your request before entering into a rental agreement.
Legal basis: taking steps prior to entering into a contract.
We process reservation and guest information to:
Legal basis: performance of the rental agreement.
We may process and retain information for:
Legal basis: compliance with a legal obligation.
We may process technical, communication and reservation information to:
Legal basis: our legitimate interests in securing our services and protecting our property and legal position.
With your consent, we use Google Analytics 4 to understand how visitors use the website.
This may include information about:
Google Analytics uses pseudonymous identifiers. We do not intentionally send names, email addresses, telephone numbers, reservation numbers or payment information to Google Analytics.
Google states that it does not log or store individual IP addresses from users in the European Union, Switzerland or the United Kingdom. An IP address may be used temporarily to derive approximate geographical information before being discarded.
Legal basis: consent.
Google Analytics should not be activated, and its analytics cookies should not be stored, until the visitor has consented to analytical cookies.
Consent can be withdrawn through the Cookie Settings on the website.
We do not use Google Analytics for personalised advertising or remarketing.
Our website, booking engine, reservation administration and certain forms and communications are provided through Lodgify.
The Lodgify service is provided by:
Codebay Solutions Limited, trading as Lodgify.
For guest and reservation information processed within our Lodgify account:
Lodgify’s public Data Processing Addendum confirms this division of responsibilities. It states that the customer is the controller of guest data and Codebay Solutions Limited is the processor. It also addresses security, subprocessors, data-subject requests, breaches, deletion and international processing.
We have entered into a Data Processing Addendum with Lodgify.
You can read it here:
Lodgify Data Processing Addendum
Lodgify’s own Privacy Policy is available here:
The website uses technical domains and infrastructure provided by Lodgify and its service providers.
The following domains were detected during our website audit:
checkout.lodgify.com – booking and checkout functionality;
gfonts.lodgify.com – delivery of the Roboto website font;
google-maps-proxy.lodgify.com – delivery of map functionality through Lodgify;
l.icdbcdn.com – delivery and optimisation of images or other website content;
websites-static.lodgify.com – delivery of static website files;
websiteserver.lodgify.com – operation and hosting of the website.
When your browser connects to these domains, technical connection information such as an IP address, browser information, requested file and time of the request may be processed.
These connections are used to deliver and operate the website and booking process.
Lodgify may use subprocessors to provide its services. The Lodgify Data Processing Addendum provides that these subprocessors must offer appropriate data-protection and security guarantees. The identity of Lodgify’s subprocessors may be requested from Lodgify.
The contact form on our website is protected by Google reCAPTCHA.
reCAPTCHA is used to help distinguish genuine visitors from automated systems and to prevent spam, fraud and misuse.
Google may process information such as:
We use reCAPTCHA based on our legitimate interest in protecting our contact form and website against spam and automated misuse.
The website itself confirms that the contact form is protected by reCAPTCHA and that Google’s Privacy Policy and Terms apply.
More information is available in the:
We may share personal data with the following categories of recipients where necessary.
Relevant guest and reservation information may be shared with the holiday park or its reception for:
Limited information may be shared where necessary to prepare the accommodation, perform maintenance or respond to a guest request.
These providers do not normally need guest contact or payment information.
Payment and transaction information is shared with the payment provider used for the relevant payment.
The provider is identified during checkout or in the payment request.
Google processes information for Google Analytics, after consent, and for reCAPTCHA security purposes.
For Google Analytics, Google states that it acts as a data processor under the GDPR while the Analytics customer remains the controller.
Information may be shared with accountants, insurers, legal advisers, public authorities or law-enforcement bodies where this is legally required or necessary to protect our legitimate interests.
We do not sell personal data.
Lodgify, Google, payment providers and their subprocessors may process personal data outside the European Economic Area.
Where international transfers occur, the relevant provider must use a legally permitted transfer mechanism, such as:
Lodgify states in its Data Processing Addendum that some subprocessors process or store personal data outside the EEA and that it requires those subprocessors to provide sufficient GDPR safeguards.
We do not retain personal data longer than reasonably necessary.
Normally retained for no longer than 12 months after the last contact.
Normally retained for up to two years after the stay.
Information may be retained for longer where necessary to deal with a complaint, damage claim, payment dispute or legal matter.
Invoices, payments and records forming part of our financial administration may be retained for seven years, or longer where required by Dutch tax legislation.
User-level and event-level Google Analytics information is retained for the period configured in our Analytics account.
Configured retention period: [confirm and insert: two months or fourteen months]
Google Analytics cookie duration is separate from the Analytics data-retention setting.
Security logs and records of cookie preferences may be retained for as long as reasonably necessary to protect the website and demonstrate compliance.
After the applicable retention period, information is deleted or anonymised unless further retention is legally required.
We take reasonable technical and organisational measures to protect personal data against:
Access to guest and reservation information is limited to persons and service providers who need the information for their role.
No internet-based service can be guaranteed to be completely secure. Please contact us immediately if you believe your personal data may have been compromised.
Subject to the conditions and exceptions in the GDPR, you may have the right to:
Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
We may request information necessary to verify your identity before responding.
We will normally respond within one month.
Requests can be sent to:
[insert privacy/contact email address]
We encourage you to contact us first so that we can try to resolve your concern.
You also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens
Reservations must be made by an adult.
We do not knowingly collect personal data directly from children except where limited information is necessary for:
We may update this Privacy Policy when our website, booking process, suppliers or legal obligations change.
The current version will be published on this page. The date at the top indicates when it was last updated.