Version: April 2025
Hotel Marktstad | Slot Hotel processes personal data of guests, visitors and other data subjects on a daily basis. We attach great importance to your privacy and handle your personal data with care and confidentiality. In this privacy statement, we explain which personal data we process, for what purposes and on what legal basis, and what rights you have as a data subject.
Hotel Marktstad | Slot Hotel is the controller for the processing of your personal data as described in this privacy statement. If you have any questions about this statement, you can contact us via the contact details provided in chapter 11.
This privacy statement has been drawn up in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
1. Scope
This privacy statement applies to all processing of personal data by Hotel Marktstad | Slot Hotel, including processing that takes place in the context of:
– stays at the hotel;
– use of restaurant and catering services;
– reservation of meeting and event spaces;
– use of the website www.hotelmarktstad.nl;
– participation in newsletters, promotions or competitions;
– application procedures;
– other points of contact with Hotel Marktstad | Slot Hotel.
This privacy statement does not apply to the processing of personal data by third parties, such as booking platforms or travel agencies. We recommend that you consult the privacy statements of these parties separately.
2. Controller
The controller within the meaning of the GDPR is:
Hotel Marktstad Hofstraat 8 1741 CE Schagen Telephone: 0224 – 230303 E-mail: receptie@hotelmarktstad.nl Chamber of Commerce number: 78481589
3. Which personal data do we process and for what purpose?
Below we explain per category which personal data we process, for what purpose and on what legal basis (in accordance with Article 6 GDPR).
a. Room and venue bookings
For the booking of a room, meeting room, hall or other facility, we process the following personal data:
– name, address, place of residence;
– date of birth (for age verification);
– telephone number and e-mail address;
– nationality;
– arrival and departure date;
– payment details;
– special requests and preferences (voluntarily provided);
– health data, exclusively if provided by you and only for the purpose of carrying out your stay (e.g. dietary requirements or accessibility needs).
We are required by the Dutch Compulsory Identification Act to verify your identity upon arrival. We do this on the basis of an identity document shown by you; we do not make a copy of this unless required by law.
We are also legally required to register the following guest data: name, place of residence, type of identity document, date of arrival and date of departure.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legal obligation (Art. 6(1)(c) GDPR); consent for health data (Art. 9(2)(a) GDPR).
b. Restaurant reservations
When making a reservation at our restaurant, we process: name, e-mail address, telephone number and language preference. Upon request, we also register allergy-specific information, solely to serve you safely.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); consent for health data regarding allergies (Art. 9(2)(a) GDPR).
c. Newsletter and e-mail marketing
If you sign up for our newsletter or other communications, we process your name and e-mail address. You can unsubscribe at any time via the unsubscribe link in the e-mail.
Legal basis: consent (Art. 6(1)(a) GDPR).
d. Contact form and customer service
When you contact us via the contact form or by e-mail/telephone, we process your name, e-mail address, telephone number and the content of your message.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) – to be able to respond to enquiries and provide services.
e. CCTV surveillance
Hotel Marktstad | Slot Hotel uses CCTV surveillance in and around the hotel to the extent necessary to ensure the safety of guests and staff and to protect property. CCTV footage is not retained for longer than four weeks, unless an incident gives reason for longer storage.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
f. Competitions and promotions
When participating in competitions or promotions, we process your name and contact details to notify winners and carry out the promotion.
Legal basis: consent (Art. 6(1)(a) GDPR).
g. Application procedure
For job applications, we process name, gender, contact details, cover letters, educational level and employment history. These data will be deleted no later than four weeks after the conclusion of the procedure, unless you give your consent for longer retention for the purpose of future vacancies.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR); consent for longer retention (Art. 6(1)(a) GDPR).
h. Evaluation of services
To evaluate our services, Hotel Marktstad | Slot Hotel may engage a third party. Participation is voluntary. You decide yourself whether you wish to leave personal data for the purpose of an evaluation.
Legal basis: consent (Art. 6(1)(a) GDPR).
4. Sharing personal data with third parties
Hotel Marktstad | Slot Hotel only shares your personal data with third parties to the extent necessary for the provision of services or on the basis of a legal obligation. We share your data in the following cases:
– IT service providers and software partners who perform services on our behalf (processors);
– booking platforms or travel organisations through which you made the booking;
– event organisations, if you are present as part of a group event or meeting;
– supervisory authorities or other government bodies, if a legal obligation requires us to do so.
With parties that process personal data on our behalf as processors, we enter into a data processing agreement that obliges them to comply with the GDPR. Parties acting as independent controllers are themselves responsible for compliance with the GDPR.
Transfer outside the European Economic Area (EEA)
Countries within the EEA offer an equivalent level of protection to the Netherlands. Hotel Marktstad | Slot Hotel only transfers your personal data outside the EEA if an adequate level of protection is in place, for example on the basis of Standard Contractual Clauses approved by the European Commission.
5. Retention periods
Hotel Marktstad does not retain your personal data for longer than necessary for the purpose for which they were collected, unless a statutory retention obligation requires a longer period. We apply the following guidelines:
– Booking and stay data: seven years (statutory tax retention obligation);
– CCTV footage: maximum four weeks, unless an incident gives reason for longer retention;
– Application data: four weeks after the conclusion of the procedure (or longer with your consent, maximum one year);
– Newsletter data: for as long as you remain subscribed, plus three months after unsubscribing;
– Contact form data: maximum two years after handling your request.
6. Security of personal data
Hotel Marktstad | Slot Hotel takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or unlawful processing. We apply, among others, the following measures:
– encrypted storage of personal data;
– access security based on the ‘need to know’ principle;
– periodic review of our IT systems and security measures;
– contractual security obligations for processors and IT suppliers.
Should a security incident nevertheless occur, we will immediately take measures to limit the consequences for your privacy as much as possible. If the incident is subject to a reporting obligation, we will report it to the Dutch Data Protection Authority and inform you if required.
7. Cookies and website
The website of Hotel Marktstad | Slot Hotel uses cookies. Cookies are small text files that are placed on your device when you visit a website. We use the following types of cookies:
• Functional cookies: necessary for the proper functioning of the website, such as remembering your reservation details within a session. These cookies do not require consent.
• Analytical cookies (including Google Analytics): used to gain insight into website traffic and improve our services. The data is processed anonymously and is not shared with third parties for commercial purposes.
• Marketing cookies: used for personalised advertisements and offers, only with your consent. We use tools such as the Facebook Pixel (Meta), Google Ads and Pinterest Tag. These tools allow us to measure the effectiveness of advertisements and show visitors personalised ads on platforms such as Facebook, Instagram and Google. These parties receive data about your website behaviour for this purpose.
On your first visit to our website, we ask for your consent via a cookie banner for the placement of non-essential cookies. You can change your cookie preferences at any time via the cookie banner or your browser settings.
The website contains buttons and/or links to social media platforms. In addition, the website uses third-party tracking scripts, including the Facebook Pixel (Meta) and Pinterest Tag, which may collect data about your website visit and transmit it to the respective platforms. Hotel Marktstad is not responsible for the further processing of your data by these parties. We recommend consulting the privacy policies of Meta, Pinterest and Google.
For more information about cookies and how to manage or delete them, please visit www.consuwijzer.nl
8. Liability
Hotel Marktstad | Slot Hotel is not liable for unauthorised or unlawful processing of personal data that cannot be attributed to Hotel Marktstad | Slot Hotel. Furthermore, Hotel Marktstad | Slot Hotel is not responsible for the actions or omissions of third parties to which the website refers.
Despite the care we devote to our website, it may contain inaccuracies. Hotel Marktstad is not liable for technical or content-related errors on the website, nor for damage resulting from the use of or temporary unavailability of the website.
9. Your privacy rights
Under the GDPR, you have the following rights with regard to your personal data:
9.1 Right of access (Art. 15 GDPR) You have the right to ask whether we process your personal data and to obtain access to the data concerned, the purposes of processing, the categories of data, the recipients and the retention periods.
9.2 Right to rectification (Art. 16 GDPR) You have the right to have inaccurate or incomplete personal data corrected or supplemented.
9.3 Right to erasure (‘right to be forgotten’) (Art. 17 GDPR) You may request us to erase your personal data if:
– the data are no longer necessary for the purpose for which they were processed;
– you withdraw your consent and there is no other legal basis;
– the data are being processed unlawfully;
– erasure is required on the basis of a legal obligation.
9.4 Right to restriction of processing (Art. 18 GDPR) You may request us in certain circumstances to restrict the processing of your data, for example when the accuracy of the data is contested by you.
9.5 Right to data portability (Art. 20 GDPR) If the processing takes place on the basis of your consent or in the context of a contract, you may request us to receive your data in a structured, commonly used and machine-readable format or to transmit it directly to another service provider.
9.6 Right to object (Art. 21 GDPR) You may object to the processing of your personal data on the basis of our legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds. In the case of processing for direct marketing purposes, we will always cease processing upon objection.
9.7 Right to withdraw consent If the processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of the processing carried out prior to the withdrawal.
10. Exercising your rights and complaints
Would you like to exercise one or more of the rights mentioned above, or do you have questions about this privacy statement? Please contact us at:
Hotel Marktstad – for the attention of the privacy officer Telephone: 0224 – 230303 E-mail: receptie@hotelmarktstad.nl Website: www.hotelmarktstad.nl
We will respond to your request within four weeks. To verify your identity, we ask you to provide a copy of a valid identity document, whereby you may cover the passport photo and BSN (citizen service number).
Do you believe that we are not processing your personal data in accordance with the GDPR? You then have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP), accessible via www.autoriteitpersoonsgegevens.nl.
11. Changes to this privacy statement
Hotel Marktstad reserves the right to update this privacy statement periodically in order to continue to comply with applicable laws and regulations or to reflect changes in our services. The most recent version will be published at www.hotelmarktstad.nl. We recommend that you consult this page regularly.
In the event of material changes, we will notify you by e-mail or via a notice on our website.
Hotel Marktstad | 0224 – 230303 | www.hotelmarktstad.nl | Version April 2025