Hostory.online ("Hostory.online", "we", "our") respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.
1. Data Controller
Hostory.online, Torstraße 100, 10119 Berlin, Germany. Contact: privacy@hostory.online.
2. What we collect
- Identification data: name, email, phone number, country of residence.
- Booking data: destination, dates, guest count, special requests.
- Payment data (processed by our PCI-DSS compliant partners; we do not store card numbers).
- Technical data: IP address, browser, device, and analytics events.
3. Lawful basis
We process your data on the basis of contract performance (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c)), and legitimate interest (Art. 6(1)(f)) for security and service improvement.
4. Retention
Booking records are retained for 10 years to meet tax and accounting obligations. Marketing consents until withdrawn. Analytics data is anonymised after 14 months.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Write to privacy@hostory.online. You may lodge a complaint with your national data protection authority.
6. International transfers
Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission.
7. Contact
Our Data Protection Officer can be reached at dpo@hostory.online.