Privacy Policy

Who are we?
Digister, trading under the name Homadu, provides an online SaaS platform that allows owners of accommodations, holiday homes, apartments, B&Bs and other stays to manage and present their rental activities through their own website.

Company details
Digister trading under the name Homadu
Hoolhof 16
5521JR Eersel
The Netherlands

Chamber of Commerce number: 84723580
VAT number: NL863332997B01

Email: info@homadu.com
Website: www.homadu.com

Applicability
This privacy policy applies to:

our website(s)
our SaaS platform
customer accounts
trial accounts
support requests
communication with customers
all services offered by Homadu

Which personal data do we process?
We may process the following personal data:

Customer data
When a customer creates an account or uses our services, we may process:

name
company name
address details
email address
phone number
invoice details
payment information
IP address
account and login information

Data of customers’ guests
Our customers may process personal data of their guests through the platform, such as:

name
email address
phone number
address details
booking information
stay details
communication data

These data are processed exclusively on behalf of our customers.

Automatically collected data
When using our website or services, data may be collected automatically, such as:

browser type
device data
IP address
pages visited
time of visit
session data

Purposes of processing
We process personal data for:

providing our SaaS services
account management
customer service and support
invoicing and payments
securing our systems
improving our services
communication with customers
legal obligations
fraud prevention

Legal bases
We process personal data on the basis of:

performance of a contract
legal obligations
legitimate interest
consent of the user, where required

Processor role and responsibilities
For personal data of guests processed by customers through the platform, the following applies:

customer = controller
Homadu = processor

We process these data exclusively in accordance with the customer’s instructions.
A data processing agreement forms part of our services.

Payments
Payments are processed through Stripe.
We do not store complete credit card or payment details ourselves. Stripe’s privacy terms also apply to payments.

Cookies
Our website and services may use cookies for:

functional operation
security
user sessions
analytics and statistics
preference settings

Our website may use analytical cookies, for example through Google Analytics, to gain insight into the use of our website and services.
Where legally required, we request prior consent for non-functional cookies.

Retention periods
We do not retain personal data longer than necessary.

Examples:
account data: as long as the account is active
account and website data after expiry or termination of the subscription or free trial period: maximum 3 months
invoice data: 7 years
support requests: no longer than necessary for support
backups: according to our backup cycle

After the expiry or termination of a subscription or free trial period, we retain the account and the associated website data for a maximum of 3 months. During this period, the user can secure data, potentially reactivate the account or still take out a subscription.

After this period, the account, website, accommodation data, texts, images, settings and other linked website data will be deleted or anonymised, unless we are legally required to retain certain data for longer.

Backups may temporarily still contain these data, but are automatically overwritten or deleted according to our backup cycle.

Sharing personal data
We only share personal data where necessary with:

hosting providers
IT service providers
payment providers
email providers
security services

We never sell personal data to third parties.

Sub-processors
To provide our services, we may use sub-processors, including:

hosting providers
cloud providers
Stripe
email services

We ensure that sub-processors take appropriate security measures.

International transfers
Because our services are available worldwide, personal data may be processed outside the European Economic Area.
If personal data are processed outside the EEA, we ensure appropriate safeguards in accordance with the AVG/GDPR, such as standard contractual clauses (SCCs).

Security
We take appropriate technical and organisational measures to protect personal data against:

loss
misuse
unauthorised access
unwanted disclosure

Examples of measures:

encrypted connections (SSL/TLS)
access security
backups
monitoring
software updates

Rights of data subjects
Users have, to the extent legally applicable, the right to:

access
rectification
erasure
restriction of processing
data portability
object to processing

Requests can be sent to:
Email: info@homadu.com
We may request additional verification of identity.

Data breaches
If a security incident or data breach occurs, we will take appropriate measures and, where required, inform the relevant parties in accordance with applicable law.

Minors
Our services are not specifically aimed at persons under the age of 18.

External services and integrations
Our services may contain connections with external platforms or third-party integrations, such as reservation platforms, channel managers or payment providers.
Additional third-party privacy terms may apply to the use of such services.

Changes
We reserve the right to amend this privacy policy.
The most current version will be published on our website.

Applicable law
This privacy policy is governed by Dutch law.
If this privacy policy is available in multiple languages, the Dutch version shall prevail in the event of differences in interpretation.

Contact
For questions about this privacy policy or privacy-related requests:

Email: info@homadu.com
Website: www.homadu.com