At Villa Aya, we respect your privacy and are committed to protecting your personal data. This Privacy Statement explains how we collect, use, store, and protect personal information obtained through our website and booking process.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), Villa Aya is the data controller responsible for the processing of personal data collected via the website www.villaaya.com.
If you have any questions regarding this Privacy Statement or your personal data, you can contact us at:
info@villaaya.com
2. Information we collect
When you visit our website or make a booking enquiry or reservation, we may collect the following personal data:
- Name, email address, and phone number
- Booking details, including travel dates and guest information
- Payment information (processed securely via our payment service providers; we do not store full payment details)
- Communications you send to us (e.g. emails or contact forms)
- Website usage data, such as IP address, browser type, and pages visited, is collected via cookies and analytics tools (e.g. Google Analytics)
3. Purpose of Data Processing
We use your personal data for the following purposes:
- Manage bookings and guest communications
- Provide customer support and respond to inquiries
- Improve our website and guest experience
- Comply with legal obligations (e.g., guest registration where required)
- Send occasional updates or offers (only with your consent)
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Performance of a contract (to manage bookings and stays)
- Consent (for marketing communications and non-essential cookies)
- Legal obligations (such as statutory record-keeping requirements)
- Legitimate interests (such as improving our website and services, provided these interests do not override your rights)
5. Data Sharing with Third Parties
We do not sell or rent your personal data.
Your data may be shared with trusted third-party service providers solely for the purposes described above, including:
- Payment service providers
- Website hosting and IT service providers
- Analytics services (such as Google Analytics)
- Legal or governmental authorities where required by law
6. Data Storage and Security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, or disclosure. These measures include secure servers, encryption, and restricted access.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations.
7. Your Rights
Under the GDPR, you may have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Restrict or object to the processing of your data
- Request data portability
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at info@villaaya.com.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Cookies
Our website uses cookies to enhance functionality and user experience. Some cookies are essential, while others are used for analytics and performance purposes.
Where required by law, we request your consent before placing non-essential cookies. You can manage or disable cookies at any time through your browser settings.
9. Updates to This Privacy Statement
We may update this Privacy Statement from time to time to reflect changes in our practices or legal requirements. The most recent version will always be available on our website.
10. Updates to This Privacy Statement
If you have any questions about this Privacy Statement or the way we handle your personal data, please contact us at: