Privacy policy

Norman Voellings, Urbanização Quinta da Torre 20, 8365-184 Armação de Pêra, Portugal

Email: kontakt@direktstay.de

Phone: +351 927 483 323

When you contact us through a form (project enquiry, bespoke design), we process the details you provide — name, email address, information about your property and uploaded images — in order to handle your enquiry and prepare a contract.

Legal basis: UK GDPR Article 6(1)(b) (pre-contractual steps) and Article 6(1)(f) (handling enquiries).

Server operation: Hostinger International Ltd. Technically necessary server logs are processed. A data processing agreement is in place.

Database: Supabase. The provider is Supabase Inc., established in the United States; transfers take place on the basis of the European Commission's standard contractual clauses.

Payments: once you place a paid order, Stripe Payments Europe Ltd., Dublin, processes the data required for it. Transfers to Stripe Inc. in the United States take place on the basis of the standard contractual clauses. No processing by Stripe takes place without an order.

We do not run analytics. We do not embed third-party fonts, maps or video services.

We use only technically necessary cookies, for example for session handling and security. No consent banner is required for these.

Where we process data on behalf of a hotel client — in particular data about its guests — that hotel is the controller, not us. We act solely on its documented instructions under a data processing agreement. Please direct requests about such data to the property you booked with; we forward any request we receive without delay.

Details and images from project enquiries are deleted twelve months after the last contact if no contract is concluded.

For editor credentials the hotel business is the controller and we process them on its behalf. What happens to them at the end of the contract follows clause 8 of Annex 1 to the terms and conditions — the business chooses between return and deletion.

Server logs are processed solely to fix faults and to defend against attacks. They rotate continuously and are overwritten in the process; no further analysis takes place.

Order and invoicing data is kept for the statutory retention periods applicable at the Provider's seat and is processed solely for that purpose until then.

You have the right to access the data we hold about you, and to its rectification, erasure, restriction of processing and portability.

Where you have given consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow SK9 5AF, ico.org.uk. You may also contact the authority where you habitually reside.

You have the right to object at any time, on grounds relating to your particular situation, to processing of your data based on our legitimate interests.

A message to kontakt@direktstay.de, a call to +351 927 483 323 or a letter to the address in our legal notice is sufficient; any one of them will do, and none needs a reason. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment or defence of legal claims.