GDPR Compliance Statement

Kolibri Oasis Escape B.V. ("we", "us") is committed to protecting personal data and complying with the EU General Data Protection Regulation (GDPR). This statement confirms that we have the capability to comply with data subject rights requests, including those submitted through Booking.com.

Data Subject Rights We Support

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

How to Exercise Your Rights

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

Cookies & Tracking on This Website

This website sets no tracking cookies unless you allow it. On your first visit a banner asks whether you accept marketing cookies, and nothing is loaded from Meta until you choose "Accept".

• What is used: the Meta pixel (Facebook), which stores the cookies _fbp and _fbc in your browser.
• Purpose: to measure how our advertising performs, how many visitors watch our product video and how many get in touch with us.
• Recipient: Meta Platforms Ireland Ltd., which may receive your IP address, browser information and the pages you viewed on this site. Data may be transferred outside the EU on the basis of the EU-US Data Privacy Framework and standard contractual clauses.
• Legal basis: your consent under Art. 6(1)(a) GDPR. We never set these cookies without it.
• If you decline: the website works exactly the same. No cookie is needed for it to function.
• Your choice itself is stored locally in your own browser, not in a cookie and not on our servers, so that we do not have to ask again on every visit.

You can change or withdraw your decision at any time - it takes the same single click as giving it:

Cookie settings

WhatsApp Messages in KoopsDesk

KoopsDesk, the property management software we operate, can connect a property's WhatsApp Business number through the WhatsApp Business Platform of Meta. When the property you book with uses it, this applies to the messages you exchange with that property:

• What is processed: your WhatsApp number and profile name, the messages you exchange with the property and their time and delivery status. Photos, voice messages and documents are only noted as sent, not stored. When the property connects a number it already uses in the WhatsApp Business app, up to 180 days of earlier chats with you and the name the property saved for you may be added.
• Purpose: answering your questions and sending you information about your stay, such as booking confirmations, arrival details and payment reminders.
• Responsibility: the property you book with decides how your guest data is used (controller). Kolibri Oasis Escape B.V. operates KoopsDesk and processes the messages on the property's behalf, and is itself the controller for its own property, Kolibri Oasis Escape.
• Recipient: Meta Platforms Ireland Ltd., which operates WhatsApp, transmits the messages and processes them under the WhatsApp Business terms. Data may be transferred outside the EU on the basis of the EU-US Data Privacy Framework and standard contractual clauses.
• Legal basis: your booking contract and the steps you ask for before booking (Art. 6(1)(b) GDPR), and our legitimate interest in answering messages you send us (Art. 6(1)(f) GDPR). Promotional messages are only sent with your consent (Art. 6(1)(a) GDPR).
• Storage and deletion: the messages are kept with your guest record in KoopsDesk. To have them deleted, write to the email address below or to the property; we delete them within 30 days. The copies in WhatsApp on your own phone are yours to manage in the app.
• You can stop the messages at any time by telling the property or by blocking its number in WhatsApp.

Service Providers

KoopsDesk and this website use the following service providers. They process personal data only on our behalf and only for the purpose named here.

Hosting and email

Kreativ Media GmbH, Switzerland, runs the servers that KoopsDesk and this website run on, and the mail server that sends the emails from KoopsDesk, such as booking confirmations and invoices. Everything a property stores in KoopsDesk, such as bookings, guest details and messages, is kept there. The EU recognises Switzerland as providing an adequate level of data protection.

Channel manager and booking platforms

Channex.io Ltd, United Kingdom, connects KoopsDesk with online booking platforms such as Booking.com, Airbnb and Expedia. It keeps the property's availability and prices up to date there, and passes bookings and guest messages from the platforms to KoopsDesk, and replies back. The EU recognises the United Kingdom as providing an adequate level of data protection. If you book through such a platform, the platform itself is responsible for the data you give it, under its own privacy policy.

Tour operator

Guests who book a stay through ByJune, the small-accommodation brand of the Corendon travel group, give their data to Corendon. KoopsDesk takes over those bookings from ByJune's booking list and booking emails. Corendon is responsible for the data you give it, under its own privacy policy.

Online payments

Sentoo B.V., Curaçao, processes online payments when you pay through a payment link or Pay Now. KoopsDesk sends Sentoo only the amount, the booking reference and your name; you pay in your own bank's online banking.

Translation

DeepL SE, Germany, translates texts when staff use the translate function in KoopsDesk, for example a guest message or a reply to a guest. Only the text to be translated is sent.

Text suggestions

Anthropic PBC, USA, drafts suggested replies when a property uses this feature. The conversation with the guest and the property information needed for the answer are sent. Staff review and edit every suggestion before it is sent. Data is transferred to the USA on the basis of standard contractual clauses.

Push notifications

If you allow notifications in the Guest App, they reach your device through the push service of your browser or phone maker (Apple, Google or Mozilla). The content is encrypted, so the push service only delivers it and cannot read it.

Data Controller & Contact