Castra Holidays GmbH, located at Dorfstrasse 50b in Pfaffschwende, is responsible for the processing of personal data as shown in this privacy statement.

Contact details:
Castra Holidays GmbH
Dorfstrasse 50b
37308 Pfaffschwende
info@castraholidays.com

Personal data that we process
Castra Holidays GmbH processes your personal data because you use our services and/or because you provide them to us yourself.
Below you will find an overview of the personal data that we process:
• First and last name
• Address details
• Phone number
• Email address

Special and/or sensitive personal data that we process
Our website and/or service does not intend to collect data about website visitors who are younger than 16 years old. Unless they have permission from parents or guardians. However, we cannot check whether a visitor is older than 16. We therefore recommend that parents be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal data about a minor without this permission, please contact us via info@castraholidays.com , then we will delete this information.

Castra Holidays GmbH processes your personal data for the following purposes:
• Processing your payment
• To be able to call or email you if this is necessary to carry out our services
• To inform you about changes to our services and products
• Castra Holidays GmbH also processes personal data if we are legally obliged to do so, such as data that we need for our tax return.

Automated decision-making
Castra Holidays GmbH does not make decisions based on automated processing on matters that could have (significant) consequences for people. This concerns decisions that are made by computer programs or systems, without a human being (for example an employee of Castra Holidays GmbH) being involved.

How long we store personal data
Castra Holidays GmbH does not store your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected. We use the following retention periods for the following (categories of) personal data:
• General: Retention period is no longer than is strictly necessary for answering and/or processing your request/question.
• Reservation: Retention period at least 7 years after final reservation (due to legal administrative obligations).
• Newsletter: Retention period indefinite or until request for deletion.

Cookies, or similar techniques, that we use
Castra Holidays GmbH only uses technical and functional cookies. And analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remember, for example, your preferences. We can also use them to optimize our website. You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information that was previously stored via the settings of your browser.

Google Analytics
Castra Holidays GmbH uses Google Analytics to collect data that provide insight into the use of the website. The following actions have been performed to anonymize this data as much as possible:
• Google Analytics privacy-friendly setup
• Processor agreement concluded with Google
• Last digits of your IP address are masked
Google may provide this information to third parties if Google is legally required to do so, or to the extent that these third parties process the information on behalf of Google. Castra Holidays GmbH has no influence on this.

View, modify or delete data
You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent for data processing or to object to the processing of your personal data by Castra Holidays GmbH and you have the right to data portability. This means that you can submit a request to us to send the personal data that we have about you in a computer file to you or another organization named by you.
You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to info@castraholidays.com .
To ensure that the request for access has been made by you, we ask you to send a copy of your ID with the request. In this copy, black out your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN). This is to protect your privacy. We will respond to your request as soon as possible, but within four weeks.
Castra Holidays GmbH would also like to point out that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap

How we protect personal data
Castra Holidays GmbH takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact our customer service or via info@castraholidays.com .