1. Introduction

ACCOMMODATIONS4U is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This GDPR compliance statement explains how we collect, use, store, and protect your personal information.

2. Data Controller

Company: ACCOMMODATIONS4U

Address: 123 Main Street, Luxembourg

Email: info@accommodations4u.com

Phone: +352 123 456 789

3. Personal Data We Collect

3.1. Identity Data: Name, surname, date of birth, nationality, passport/ID number

3.2. Contact Data: Email address, phone number, postal address

3.3. Financial Data: Payment card details, bank account information

3.4. Booking Data: Check-in/check-out dates, accommodation preferences, special requests

3.5. Technical Data: IP address, browser type, device information, cookies

3.6. Usage Data: Website interaction data, preferences, feedback

4. Legal Basis for Processing

4.1. Contract Performance: Processing necessary for booking and accommodation services

4.2. Legal Obligation: Compliance with Luxembourg and EU laws

4.3. Legitimate Interest: Business operations, security, fraud prevention

4.4. Consent: Marketing communications, cookies, optional services

4.5. Vital Interests: Emergency situations, health and safety

5. How We Use Your Personal Data

5.1. Service Provision: Process bookings, manage reservations, provide accommodation

5.2. Communication: Send booking confirmations, updates, customer support

5.3. Payment Processing: Handle payments, refunds, financial transactions

5.4. Legal Compliance: Meet regulatory requirements, tax obligations

5.5. Marketing: Send promotional offers (with consent), improve services

5.6. Security: Prevent fraud, ensure platform security, protect users

6. Data Sharing and Third Parties

6.1. Service Providers: Payment processors, accommodation partners, IT services

6.2. Legal Requirements: Government authorities, law enforcement when required

6.3. Business Transfers: In case of merger, acquisition, or asset sale

6.4. Consent: With your explicit consent for specific purposes

7. Data Security

7.1. Encryption: All data is encrypted in transit and at rest

7.2. Access Controls: Strict access controls and authentication measures

7.3. Regular Audits: Security assessments and vulnerability testing

7.4. Staff Training: Data protection training for all employees

7.5. Incident Response: Procedures for data breach notification and response

8. Your Data Protection Rights

8.1. Right of Access: Request copies of your personal data

8.2. Right to Rectification: Correct inaccurate or incomplete data

8.3. Right to Erasure: Request deletion of your personal data

8.4. Right to Restrict Processing: Limit how we use your data

8.5. Right to Data Portability: Receive your data in a structured format

8.6. Right to Object: Object to processing based on legitimate interests

8.7. Right to Withdraw Consent: Withdraw consent for consent-based processing

8.8. Right to Complain: Lodge a complaint with supervisory authorities

9. Data Retention

9.1. Booking Data: Retained for 7 years for legal and tax purposes

9.2. Marketing Data: Retained until consent is withdrawn

9.3. Technical Data: Retained for 2 years for security purposes

9.4. Financial Data: Retained as required by financial regulations

10. Cookies and Tracking

10.1. We use cookies to enhance your browsing experience and analyze website usage

10.2. You can control cookie settings through your browser preferences

10.3. Essential cookies are necessary for website functionality and cannot be disabled

11. International Data Transfers

11.1. We may transfer data to countries outside the EU/EEA

11.2. Such transfers are protected by appropriate safeguards (Standard Contractual Clauses)

11.3. We ensure adequate protection for your personal data in all transfers

12. Contact and Complaints

For data protection inquiries or to exercise your rights:

Email: privacy@accommodations4u.com

Phone: +352 123 456 789

Address: 123 Main Street, Luxembourg

Supervisory Authority: Commission Nationale pour la Protection des Données (CNPD), Luxembourg

13. Updates to This Statement

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this statement periodically.

Last Updated: January 2025