This privacy policy is effective as of 21 December 2025. It replaces any previous versions.
Legal basis: Article 5(1)(a) and Article 24(1) of the GDPR (principles of transparency and accountability).
This privacy policy sets out the principles for the processing and protection of personal data provided by Guests in connection with the use of short-term accommodation services offered by eindhovenapart.com.
1. Data Controller
The controller of your personal data is eindhovenapart.com, represented by the owner, with its registered office in Eindhoven, Spalaan 6, 5628 ZG, the Netherlands.
VAT ID (BTW): NL004592834B50
Email: hello@eindhovenapart.com
Correspondence address: Spalaan 6, 5628 ZG Eindhoven, the Netherlands
Accommodation address: Penelopestraat 243, 5631 CL Eindhoven, the Netherlands
2. Purposes and Legal Bases for Data Processing
The Controller processes your personal data for the following purposes:
a) Provision of accommodation services – for the purpose of concluding and performing the short-term rental contract, including guest registration.
Legal basis: Article 6(1)(b) of the GDPR (performance of a contract).
b) Compliance with legal obligations – including tax and accounting regulations (invoicing) and the obligation to maintain a guest register (nachtregister) as required by Dutch local law.
Legal basis: Article 6(1)(c) of the GDPR (legal obligation).
c) Payment processing – handling direct transactions via the website.
Legal basis: Article 6(1)(b) of the GDPR.
d) Communication and inquiries – handling messages sent via the contact form or email.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest).
3. Types of Personal Data Processed
The Controller processes the following categories of personal data:
Identification data: First and last name.
Contact data: Email address, phone number, home address.
Identity Verification: Data from identity documents (e.g., document number, nationality) only to the extent required by applicable law for guest registration. The Controller does not make or store photocopies or scans of identity documents.
Transaction data: Invoicing data, payment status.
4. Data Retention Period
Your personal data will be retained for the period necessary to fulfil the purposes:
Contractual data: For the duration of the stay and up to 7 years thereafter (tax/accounting requirements).
Guest Register: According to local regulations for the required period of time.
Inquiries: Until the communication is resolved or for the period necessary to defend legal claims.
5. Recipients of Personal Data
To ensure professional service, your data is shared with:
Smoobu GmbH (Germany): Our Property Management System used for booking management and synchronization.
Stripe, Inc.: For processing online payments (acting as an independent controller).
IT & Hosting: Server providers (OVH) and technical maintenance.
Authorities: Only when required by law (e.g., tax authorities, local municipality for tourist tax purposes).
6. Data Storage and Transfers
EEA Storage: Your personal data is stored on servers located within the European Economic Area (EEA). The website eindhovenapart.com is hosted by OVH with infrastructure located in France.
Third Country Transfers: Due to the use of Stripe, some data may be processed in the USA. This is based on Standard Contractual Clauses (SCCs) ensuring an adequate level of protection.
7. Data Security Measures
The Controller implements high-security standards:
Encryption via TLS/SSL protocol.
Use of Multi-Factor Authentication (MFA/2FA) or hardware security keys (FIDO) for all systems containing Guest data.
Strict access control for employees and collaborators.
8. Your Rights
You have the right to access, rectify, or erase your data ("right to be forgotten"), the right to restrict processing, and the right to object. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise your rights, contact us at: hello@eindhovenapart.com