1. Data controller
HolidaiButler is a trading name of Frank Spooren, based in the Netherlands.
Email: info@HolidaiButler.com
If you have any questions about this privacy policy or the processing of your personal data, please contact us at the email address above.
2. What data do we process?
2.1 Contact form / Demo requests
When you fill in a contact form or request a demo, we process:
- Name
- Email address (work)
- Organisation and role
- Telephone number (optional)
- Your message (optional)
- IP address and user-agent (for security and fraud prevention)
2.2 Website analysis
We use Simple Analytics (Amsterdam, Netherlands) for website analytics. Simple Analytics does not collect any personal data, does not set any cookies and is fully GDPR-compliant. No IP addresses are stored or shared with third parties.
3. Purposes and legal basis
| Processing | Objective | Legal basis (GDPR) |
|---|---|---|
| Contact form / Demo request | Responding to your request, and any follow-up | Art. 6(1)(a): Consent |
| IP address when submitting a form | Security, fraud prevention, rate limiting | Art. 6(1)(f): Legitimate interest |
| Website analysis (Simple Analytics) | Insights into website usage | Art. 6(1)(f): Legitimate interest |
4. Retention periods
| Details | Retention period |
|---|---|
| Contact form / Demo requests | Up to 12 months after the last contact, unless a customer relationship is established |
| IP addresses and security data | 30 days |
| Website analysis (Simple Analytics) | No personal data, so no retention limit |
5. Sharing with third parties
We do not share your personal data with third parties for commercial purposes. We use the following data processors, all of which are European companies:
- Hetzner Online GmbH (Gunzenhausen, Germany): server hosting and databases
- Mistral AI (Paris, France): AI-powered content generation and chatbots
- DeepL SE (Cologne, Germany): translations
- Simple Analytics BV (Amsterdam, Netherlands): anonymised website analysis
- MailerLite (Vilnius, Lithuania): email communication
- Adyen N.V. (Amsterdam, Netherlands): payment processing
- Apify Technologies s.r.o. (Prague, Czech Republic): automated collection of publicly available reviews and business information for travel recommendations
Guest and platform data are processed exclusively within the European Economic Area (EEA). When collecting publicly available data via Apify, processing may technically take place outside the EEA; in such cases, the Standard Contractual Clauses (SCCs) set out in the data processing agreement with Apify apply.
6. Security
We take appropriate technical and organisational measures to protect your data:
- Encrypted storage (AES-256) and encrypted transmission (TLS 1.3)
- Server and database located exclusively within the EU (Hetzner, Germany)
- Role-based access control (RBAC)
- Rate limiting and honeypot protection on forms
- Regular security audits
7. Cookies
This website (holidaibutler.com) does not set any cookies and does not use any tracking technology that requires consent under the GDPR or the ePrivacy Directive.
8. Your rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15). You may request details of the personal data we process about you.
- Right to rectification (Art. 16). You may have any incorrect information corrected.
- Right to erasure (Art. 17). You may request that your data be erased. We process erasure requests within 72 hours.
- Right to restriction (Art. 18). You may request that the processing be restricted.
- Right to data portability (Art. 20). You may request your data in a structured, commonly used and machine-readable format. We will provide this as soon as possible and within 30 days at the latest.
- Right to object (Art. 21). You may object to processing on the grounds of legitimate interest.
- Right to withdraw consent (Art. 7). You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to withdrawal.
You can exercise your rights by sending an email to info@holidaibutler.com. We will respond to your request within 30 days.
9. EU AI Act: Transparency
The HolidaiButler platform uses artificial intelligence (Mistral AI, Paris) for content generation, chatbot interactions and translations. All AI-generated content is labelled in accordance with the EU AI Act. Human oversight is guaranteed: content goes through an approval workflow before it is published.
10. Complaints
If you believe that we are not processing your personal data correctly, you have the right to lodge a complaint with the supervisory authority:
Dutch Data Protection Authority
PO Box 93374, 2509 AJ The Hague
autoriteitpersoonsgegevens.nl
If you are based in another EU Member State, you can lodge a complaint with the supervisory authority in your own country.
11. Amendments
We reserve the right to amend this privacy policy. Any substantial changes will be announced on the website 30 days in advance. The date at the top of this page indicates the date of the last amendment.
In the event of discrepancies between language versions, the Dutch version shall prevail.
© 2026 HolidaiButler. All rights reserved.