Privacy Policy

We respect your privacy

1. WHO WE ARE

Corendon greatly values your trust in our company. In this privacy policy, we inform you about how we handle your personal data. When we refer to “we”, “us” or “our” in this privacy policy, we mean the hotel entity with which you book your stay:

• Corendon Hotels Holding Nederland B.V. (NL)
• Corendon Hotels & Resorts B.V. (NL)
• Corendon Amsterdam New-West, a Tribute Portfolio Hotel
• Corendon Amsterdam Schiphol Airport, a Tribute Portfolio Hotel
• The College Hotel Amsterdam, Autograph Collection
• Corendon Curacao Holding B.V. (Curaçao)
• Livingstone Jan Thiel Beach Resort
• Mangrove Beach Corendon Curacao All-Inclusive Resort, Curio by Hilton
• The Rif at Mangrove Beach Corendon Curacao All-Inclusive, Curio Collection by Hilton

2. ABOUT THIS PRIVACY POLICY

This privacy policy applies when you use www.corendonhotels.com and/or the services offered by the hotels. Exceptions are services with a separate privacy policy from the specific entity without reference to this privacy policy.

In this privacy policy, we explain what categories of personal data we process, why we process them, and with whom we may share them. Our processing complies with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG). This means that we:

• Clearly state the purposes for which we process personal data;
• Do not collect more personal data than necessary;
• Request your explicit consent where required;
• Take appropriate technical and organizational measures to protect your data;
• Respect your rights regarding your personal data.

3. HOW AND WHAT PERSONAL DATA WE COLLECT

When you visit our website

• Your travel and/or accommodation preferences
• Composition of your travel group
• Language settings
• Surfing behavior on our websites depending on your settings
• When and how you click on our ads, even if they appear on third-party websites
• Information about how you access our digital services (e.g., operating system, IP address, browser info)

When you book a stay, make a purchase, or use our services

• Identity data (name, address, date of birth, passport details)
• Contact information (phone number, email)
• Insurance details
• Relevant (medical) data or special needs
• Purchase info (what, where, when, payment details)
• Travel companion data (with consent and understanding)

When you contact us or participate in promotions/services

• Personal data via email, letter, phone, or social media
• Recorded calls for training or fraud prevention
• Interaction with emails and newsletters (e.g., clicked links)
• Survey or questionnaire feedback

If there is nuisance or misuse of our services

• Details of the individual(s), booking, and incident description
• Safety measures taken
• Police report, if applicable

Personal data from other sources

• Tour operators for booking execution
• Insurers, intermediaries, and medical staff in emergencies
• Social media login data (e.g., Facebook, Twitter)

4. LEGAL BASIS FOR DATA PROCESSING

We process your personal data based on the following legal grounds:

• Consent – e.g., for marketing cookies; you may withdraw it at any time.
• Performance of a contract – to book rooms or deliver services.
• Legal obligation – e.g., keeping a night register.
• Protection of vital interests – in emergencies with third parties.
• Legitimate interest – e.g., for marketing or fraud prevention.

Medical or special categories of data

We only process these under specific GDPR conditions, such as explicit consent or vital interests.

Children’s Personal Data

Not processed unless provided by a parent/guardian. We delete data if collected without valid consent.

Refusal to Provide Personal Data

If you refuse to share required data, we may not be able to deliver the requested services.

5. PURPOSES

We are happy to explain how we use your personal data.

To provide the products and services you request

Your personal data is necessary to manage your booking and to deliver the products and services you wish to use.

For business operations and improving our services

Based on the personal data you provide, we aim to improve our services and products, including our website, app, and related offerings. To protect your data and prevent fraud or misuse of our services, we monitor the use of our products.

We may use your personal data during security operations, accidents, or similar incidents, as well as for medical and insurance purposes. Additionally, your personal data may be used for market research and research & development within Corendon.

We conduct research into the effectiveness of our services using statistical analysis. We use this information to understand how our information and services contribute to business results. For example, we assess whether people respond to our website offers and newsletters, and which services are most popular. These results are reported in aggregated form and cannot be traced to individuals.

Corendon maintains a list of guests who have caused disturbances in our hotels or have misused our services. Depending on the severity of the behavior, we may exclude these individuals from our services for a certain period.

Personalizing user experience

If you have opted in, you may see advertisements and other marketing communications from Corendon that are tailored to you. By analyzing your browsing behavior, we can show you offers that match your interests.

If you prefer not to receive personalized information, you can update your preferences online, by phone, in writing (e.g., via privacy@corendonhotels.com), or by unsubscribing from the newsletter. We will update your data as soon as possible.

Contact

We use your personal data when you contact us, for example by email, post, phone, or social media.

Marketing communication

If you have indicated that you wish to receive marketing communications, or if you have previously used our services, we will send you relevant travel offers or news about our services. You can adjust your preferences at any time via the newsletter, our website, phone, or email at privacy@corendonhotels.com. You may still receive service-related messages in connection with your reservation.

Recruitment and selection

If you apply for one of our vacancies, we process the data you provide to decide whether to invite you for an interview and whether to offer you a job. For more information about applications, visit https://werkenbijcorendonhotels.nl/

6. SHARING DATA WITH SUPPLIERS AND THIRD PARTIES

We may share your personal data with travel suppliers such as tour operators, partner hotels, and transport companies. We also share your data with external service providers, such as IT vendors and third parties that analyze and personalize your website usage. With these third parties, we establish agreements regarding the careful handling of personal data. We only share the necessary personal data with our suppliers and partners.

Sometimes we share personal data in order to establish, exercise, or defend our legal rights; in this context, we may provide data to others to prevent fraud.

Additionally, we may share personal data with government bodies or authorities as necessary to comply with a legal obligation or an official order from an authority. For example, the police may request access to our night register.

7. SHARING PERSONAL DATA WITHIN CORENDON HOTELS & RESORTS

Where necessary, we may share your personal data with other companies within the Corendon Hotels & Resorts group or within the Corendon Holiday Group. We do this solely to deliver the services you request, to manage and improve our services and daily operations, to personalize your experience, to contact you where applicable, and for marketing or market research purposes.

8. TRANSFERRING PERSONAL DATA OUTSIDE THE EEA

In certain specific cases, we transfer your data to partners or other Corendon hotels/entities located outside the European Economic Area (EEA), because this is necessary to execute the agreement we have with you. This applies, for example, when you book a hotel in a country outside the EEA.

These countries may not have legislation that offers the same level of data protection as within the EEA. In such cases, we implement appropriate contractual and security measures to ensure that such transfers comply with European law, such as by using standard data protection clauses approved by the European Commission.

9. PROTECTING YOUR PERSONAL DATA

We take appropriate security measures to protect your data from accidental loss and from unauthorized access, use, alteration, or disclosure. You are also responsible for safeguarding your own data—for example, by not sharing your password or booking details with third parties.

10. RETENTION PERIODS

We retain your data only as long as necessary for the purposes described in this privacy statement and to comply with laws and regulations.

Specifically:

• Personal data collected in connection with bookings, purchases, or to perform other agreements will be retained as long as needed to complete your booking(s), including administration, feedback, complaints, damages, insurance matters, etc. After completion, we retain the data for a maximum of four years for marketing purposes.
• After this period, the data will be deleted unless a legal obligation requires us to keep it longer. For example, payment data must be retained for seven years due to tax laws.
• Personal data obtained through contact via email, post, phone, or social media is retained as long as necessary to process and follow up on your request. We may then retain it for up to four more years for marketing purposes.
• Data collected in the context of job applications will be deleted no later than one month after the recruitment process concludes, unless you have given consent for us to retain your data for future vacancies.

After the applicable retention periods, your personal data will be deleted. In some cases, we may anonymize your data for analytical, historical, or other business purposes.

11. LINKS TO OTHER WEBSITES

Our websites may contain links to websites managed by other organizations with their own privacy statements. Be sure to read their terms and privacy policies carefully before submitting any personal data on another organization’s website. We accept no responsibility or liability for these third-party websites.

12. SOCIAL MEDIA FEATURES

Our websites include social media features such as Facebook and Twitter, which have their own privacy statements. Please ensure you read their terms and privacy policies carefully before submitting any personal data; we accept no responsibility or liability for these features.

13. YOUR RIGHTS AND COMPLAINTS

Every individual whose data we process has the following rights:

• Right to access your personal data: You have the right to know what personal data we have registered about you and for what purposes.
• Right to correction or deletion of your personal data: You have the right to correct your personal data if it is inaccurate. You can also request deletion of your data. We can only comply if we are not legally required to retain it and it is no longer needed for our purposes. We will inform you accordingly.
• Right to object and restrict processing: You may object to the use of your data at any time. If you previously gave consent, you may withdraw it. You may object free of charge if your personal data is being used for purposes not necessary for fulfilling a contract or complying with a legal obligation.
• Right to data portability: You can request that we provide the data we hold about you in a format you can transfer electronically.

Requests can be sent to: privacy@corendonhotels.com. We will respond within a month, extendable due to complexity.

You can also file a complaint with the Dutch Data Protection Authority (DPA): www.autoriteitpersoonsgegevens.nl

Mailing address:

Corendon Hotels & Resorts
Attn. Legal
PO Box 253
1170 AG Badhoevedorp

Email:

privacy@corendonhotels.com

Before handling your request or complaint, we may ask for additional information to verify your identity. If you contact us on behalf of someone else, we may also request confirmation of your authorization to act on their behalf.

14. CHANGES TO THIS POLICY

This policy replaces all previous versions. We may update it at any time, so please check our website regularly for changes. If there are significant changes, we will clearly notify you on our website, possibly including an electronic notification regarding the updates.

Last updated: January 2025