Company details

Bed & Breakfast de Oude Bakkerij e. K.
Schoolstraat 18
2282 RD Rijswijk
Netherlands
E-mail: contact@bboudebakkerij.com

Responsible body within the meaning of the GDPR
Ivo van Zijderveld
E-mail: contact@bboudebakkerij.com
Phone: +31 620 812 557

Data protection officer required by law

We are not legally obliged to appoint a data protection officer.

Storage of personal data

Personal data that you transmit to us electronically on this website, such as name, e-mail address, address, etc. in the context of submitting a form or a booking, will be collected, stored and not passed on to third parties together with the time and IP address only for the stated purpose. We therefore only use your personal data for communication with visitors who expressly wish to be contacted, as well as for the processing of our services offered on this website. Of course, we will not pass on your personal data without your express consent.

Other personal data is collected automatically when you visit our website. These are mainly technical data (e.g. browser, operating system, language settings, etc.). We use all necessary technical and organizational measures to protect your personal data against manipulation, loss, destruction and unauthorized access. These technical and organisational measures are continuously reviewed and improved.

If you wish to send us personal data by e-mail, we would like to point out that confidential data should never be transmitted unencrypted by e-mail.

What is your data used for?

When you visit websites, some personal data is collected and stored automatically.

Firstly, data is collected to ensure error-free provision of our website.

When you visit our website, our web server (server on which this website is stored) automatically stores data such as:

• the address (URL) of the website accessed
• browser and browser version
• the operating system used
• the address (URL) of the previously visited page (referrer URL)
• the hostname and IP address of the device from which the access is made
• date and time

in files (web server log files).

As a rule, web server log files are stored for about two weeks and then automatically deleted.

Other data may be used to analyze user behavior. With an analysis of user behavior, we want to make sure that our website is well received in order to be able to make any adjustments and improvements to our offer. What we analyse and which personal data we process here will be described in more detail later in this data protection declaration.

Thirdly, other personal data is also collected when you provide it to us (e.g. by e-mail, through the booking form for overnight stays or via the contact form on our website). In this case, your personal data will only be stored and processed in order to contact you and offer our services and, with your consent, to submit any further offers.

In the event that you book various events with us through the contact form, personal data will also be collected. These are, for example, your address and e-mail address as well as the date for the desired event, etc.

Processing of data (customer and contract data)

We therefore collect, process and use personal data only insofar as they are necessary for the establishment, content design or change of the legal relationship (inventory data).

This is done on the basis of Art. 6, para. 1, lit. b, GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures, or on the basis of consent, Art. 6, para. 1, lit. a, GDPR.

We will delete the personal data collected after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Cooperation with third parties

In the case of cooperation with external employees or processors, your personal data may be transmitted to them. However, this will be agreed with you in advance. The legal basis for this is Art. 6, para. 1, lit. a and Art. 28 (processor) GDPR.

Recipients of your personal data

Customers from all over the world visit us in our cozy B&B.

Your personal data will only be transmitted to third parties with your express consent. This is done, for example, as part of the payment of your bookings. Your data will not be passed on to third parties without express consent, possibly for advertising purposes. We work together with various service providers from both the EU and other countries:

Payment

In order to pay for your bookings, we offer you different payment methods from third-party companies, such as Visa, Apple Pay, Google Pay, MasterCard, Bancontact, SOFORT and iDEAL.

When booking, you select one of the payment methods and enter the data required for payment. Only the data required for payment will be transmitted to the payment service provider. For these transactions, the contractual and data protection provisions of the respective providers apply. Further data relevant only for the respective booking will not be transmitted.

When paying by credit card, customers enter the following personal data on our site, which is transmitted to the payment service provider and not stored by us:

• Credit card number and expiration date

The following data is permanently stored by Stripe:

• Payment method (e.g. Visa credit card)
• First and last name (of the payment method holder), possibly “verified name” for the iDEAL payment option
• Email address (of the payment method holder)
• Street, house number, city, postal code, country (of the payment method holder)

Payment service providers are used on the basis of Art. 6 para. 1 lit. b GDPR (contract processing). If your consent is requested for certain bookings, this is done on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time for the future.

iDEAL

Currence iDEAL B.V., Gustav Mahlerplein 33-35, 1082 MS Amsterdam, Netherlands, is an online payment system from the Netherlands and is available to Dutch bank customers. This payment method is regulated by the WooCommerce plugin.

iDEAL adheres to strict data protection guidelines and the personal data is stored on Dutch servers.

iDEAL’s privacy policy can be found here: https://www.ideal.nl/en/privacy-cookie-statement/

Visa and Mastercard

You can also pay for your bookings with Visa or Mastercard. When booking, you will be redirected to the page for entering your details, if you choose this payment method. This payment method is regulated by the WooCommerce plugin.

Information on data protection at Visa can be found at: https://www.visa.de/legal/privacy-policy.html

Information on data protection at Mastercard can be found at: https://www.mastercard.de/de-de/datenschutz.html

Apple Pay

You can also use Apple Pay to pay for your bookings. Apple Pay encrypts all transactions with a developer-specific key before sending the transaction data to the developer or payment processor. This payment method is regulated by the WooCommerce plugin.

For information about Apple Pay security and privacy, see: https://support.apple.com/de-de/HT203027

Google Pay

You can also use Google Pay to pay for your bookings. Google Pay protects transactions with multiple layers of security. This payment method is regulated by the WooCommerce plugin.

For information about Google Pay security and privacy, see: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Bancontact

Customers from Belgium can also use Bancontact Payconiq Company SA/NV 82, rue d’Arlon, 1040-Brussels, Belgium, to pay for bookings. Bancontact protects payment transactions through multiple layers of security.

Information on security and data protection at Bancontact can be found at: https://www.bancontact.com/files/privacy.pdf

SOFORT

This payment method is available to our customers from Austria, Belgium, Germany, Italy, the Netherlands, and Spain.

Information on security and data protection at SOFORT can be found at: https://www.sofort.com/datenschutz.html

These payment methods are regulated by the WooCommerce plugin. When you choose one of these payment methods, we only receive information about whether the payment has been made. The respective payment service or the respective bank is in principle responsible for the processing of your personal data under data protection law.

As the controller, we process your personal data when we receive information about the chosen payment method, i.e. which means of payment you used to pay for your bookings. The processing of this data is necessary so that the payments can be processed securely. The legal basis for this processing is Art. 6 para. 1, sentence 1 lit. b GDPR.

Other possible recipients of your personal data:

Sucuri WordPress Plugin

We use the Sucuri WordPress plugin to protect our website against malware, phishing, and other cyber attacks. Website security is provided by Sucuri Inc., GoDaddy Media Temple Inc., 12130 Millennium Drive, Suite 300, Playa Vista, CA 90094, USA. 

The Sucuri WordPress plugin does not process any personal data of visitors, except anonymous data. This service is used to check the web content and save log files. We use this plugin to increase the security of our website. We have a legitimate interest in a protected website within the meaning of Art. 6 para. 1 lit. f GDPR.

WooCommerce Plugin incl. Stripe

We use the WordPress plugin WooCommerce to manage our bookings.

When you make a booking with us, the following personal data is collected:

• First name, last name
• E-mail address
• Telephone number
• Street, house number, postal code, city, state, country

The following personal data is also collected and stored in the WordPress backend:

• The selected payment service provider (e.g. Visa)
• IP address

The legal basis for this processing is Art. 6 para. 1, sentence 1 lit. b GDPR.

Motopress Hotel Booking Plugin

We use the WordPress plugin Motopress Hotel Booking to reserve and manage the rooms in our cozy B&B.

The Motopress Hotel Booking Plugin is a booking engine for managing a hotel website.

As part of your booking, we collect and store the following data:

• First name, last name
• E-mail address
• Telephone number
• Street, house number, postal code, city, state, country

In addition, we also store the number of adults and children (and age of children) who wish to stay in our B&B.

The legal basis for this processing is Art. 6 para. 1, sentence 1 lit. b GDPR.

If your personal data is to be transferred to countries outside the EU without an adequacy decision, this will only be done in accordance with the EU Standard Contractual Clauses, Binding Corporate Rules and additional measures.

If your personal data is to be transmitted to countries outside the EU by e-mail without an adequacy decision, this may be done by encrypted e-mails or password-protected files.

Further information on the adequacy decision of the European Commission, and which countries it covers, can be found under the following link:

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Further processing on our website

Contact

Several contact forms are embedded on our website, which can be used for electronic contact.

If you make use of this option, the personal data that you enter in the input field will be transmitted to us and stored. The processing of your data takes place here on the basis of Art. 6, para. 1 lit. b. GDPR, if your request is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures. We also have a legitimate interest in the effective processing of any inquiries addressed to us within the meaning of Art. 6, para. 1 lit. f GDPR.

Different personal data are processed:

Contact form for booking the coffee bike

For this contact form, name, e-mail address, telephone number and whether it is a company or a private person are collected and processed, as well as the date for the planned event.

Contact form for questions to the B&B

If you have any questions for the B&B and you use the contact form, your name and e-mail address will be collected and processed.

Contact form for breakfast reservation

If you would also like to have breakfast in our beautiful B&B, we collect and process your name, e-mail address and telephone number.

In addition, the following data is stored by the WordPress system when using the contact forms:

• Your IP address
• Date and time
• Time zone

The processing of the data is subject to your consent and reference is made to this data protection declaration.

There is no automatic transfer of your data to third parties. The personal data collected through the contact form serves, among other things, to prevent misuse of the contact form and to ensure the security of the information technology systems and to be able to process your inquiries.

You can also contact us by e-mail. In this case, your data provided in the e-mail will be transmitted and stored.

The data will be deleted as soon as it is no longer required for the purpose. Legal retention periods remain unaffected.

Pictures on our website

The images on our website are integrated locally. We use images to make the content of our website more appealing and to show you examples of our services.

Videos on our website

We use videos from YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to make the content of our website more appealing and to show you examples of our premises.

The external videos are embedded in private mode and are not loaded until you press “Play”. If you click on the videos to watch them, cookies are stored in your device. YouTube collects and stores your usage data, such as location, IP address and device.

Further information on YouTube’s use of your personal data can be found at: https://policies.google.com/privacy

Your rights as a data subject

As a visitor to our website (data subject), you have the following rights under the European General Data Protection Regulation:

• Right to withdraw your consent. However, this means that we can no longer continue processing based on your consent in the future.
• Right to information about the processed data (Article 15 GDPR)
• Right to rectification if your personal data is incorrect (Article 16 GDPR)
• Right to erasure (“right to be forgotten”) (Article 17 GDPR)
• Right to restriction of processing if your data cannot be deleted for legal reasons (Article 18 GDPR)
• Right to notification – obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR). YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON POINT (E) OR (F) OF ARTICLE 6(1) OF THE GDPR. YOUR PERSONAL DATA WILL THEN NO LONGER BE PROCESSED, UNLESS THE CONTROLLER CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
• Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with a supervisory authority.

The competent supervisory authority for data protection issues is the state data protection officer of the country in which our company is based. For the Netherlands, this is as follows:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30,
2594 AV The Hague
The Netherlands
https://www.autoriteitpersoonsgegevens.nl

Revocation of your consent to data processing

Many processing operations are only possible with your express consent. You can revoke your consent at any time, e.g. by sending an informal message by e-mail to the responsible office (contact details can be found above and in the imprint). The legality of the processing of your data carried out until the revocation remains unaffected by the revocation.

If you have any questions about our processing of your personal data in our B&B, you can contact the responsible body indicated at the top of this privacy policy at any time.

SSL or TLS encryption

Encryption of personal data is the most secure solution for data transmission. For websites, this is SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and/or by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Hosting

This website is hosted by an external service provider. Personal data collected on our website is stored on the service provider’s servers. It is, for example, about technically necessary cookies, such as IP addresses, etc.

The service provider only processes your data as necessary to fulfil its performance obligations.

The service provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6, para. 1, lit. b GDPR) and in the interest of a secure and fast provision of our website by a professional provider (Art. 6, para. 1 lit. f GDPR).

We use the following service providers:

Hetzner Online GmbH
Industriestrasse 25
91710 Gunzenhausen
Germany

Our Internet service provider, Hetzner Online GmbH, automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are, for example:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources.

In order to ensure data protection-compliant processing of your data by the service provider, we have concluded a contract for order processing with the service provider.

Cookies on our website

What are cookies?

Every time you visit a website, small data sets are stored in your browser. These data sets are called cookies. Some cookies include so-called “session cookies.” They are automatically deleted at the end of your visit. However, other cookies remain stored on your device until you delete them (“permanent cookies”). These cookies store certain usage data, such as the selected language or personal page settings. With these cookies, your browser is recognized the next time you visit. Therefore, when you return to our website, your browser transmits the “user-related” information back to our website. These cookies do not damage your computer and do not contain viruses. These cookies are used to make our website more user-friendly, effective and secure. Cookies that are required to carry out electronic communication or to provide certain functions desired by you (such as the booking function) are stored on the basis of Section 25 Abs. 2 TTDSG. This is absolutely necessary so that we can provide the telemedia service requested by the visitor. You can set your browser so that you are informed about the setting of cookies. Thus, you can decide for yourself which cookies you want to allow and accept or exclude cookies for certain cases. You can also specify that cookies should be automatically deleted when the browser is closed.

• Chrome: At the top right, click on the three-dot menu the settings -> Click on Privacy and security -> sub-item Privacy and security -> Clear browsing data
• Safari: Click on “Safari” in the menu bar and then on “Preferences” -> Privacy” and uncheck the box next to “Block all cookies”
• Firefox: Click on the menu button -> Settings – > Privacy & Security -> section Cookies and Website Data. Click the Remove Data… button to open the “Delete Data” dialog.
• Microsoft Edge: In the top right, click Settings and more -> Settings > Privacy, Search and Services -> Clear browsing data > Clear browsing data now

Processing by cookies on our website

We use the content management system WordPress for the creation of our website. Through the use of WordPress and the plugins that are important to us for the provision of our services, personal data may be collected and processed. For example, plugins from WordPress, WooCommerce for payments and Motopress Hotel Booking for the contact form or for your bookings are used. In the following, we will go into more detail about the individual cookies.

These cookies are technically necessary cookies

Information about cookies on this website: