Privacy Statement B&B Hotels Netherlands

PDF Version

Privacy Statement B&B Hotels Netherlands

Updated: June 2025

Introduction

Welcome to B&B Hotels Netherlands. We highly value your privacy and process your personal data with care, in accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). In this privacy statement, we explain in clear language what personal data we collect from our hotel guests, website visitors, and participants in our loyalty programs, why we need this data, and how we handle it.

This statement is intended for you as a guest or future guest of B&B Hotels in the Netherlands – whether you visit our website, use our mobile app, participate in a loyalty program, or stay with us.

Our goal is for you to know exactly what to expect. If you have any questions after reading this, please feel free to contact us using the contact details at the bottom of this statement.

Who are we (data controller)?

B&B Hotels Netherlands B.V., located at Zuidplein 36, 1077 XV Amsterdam, is the data controller for the processing of personal data described in this statement. This means that B&B Hotels Netherlands B.V. determines which personal data are processed and for what purpose.

B&B Hotels is part of the international B&B HOTELS Group. For some activities, we collaborate with our sister companies within the B&B HOTELS Group. For example, we use a shared reservation system and loyalty program for all B&B hotels. In these cases, we share responsibility (we are then joint data controllers).

You don't need to worry about this: you can simply contact us with all your questions, even if your data is processed within our hotel group.

If you have questions about your privacy or wish to exercise your rights, you can contact our privacy contact person or data protection officer via privacy-netherlands@hotelbb.com. You can also contact us in writing at the address above, marked "Privacy" or "Data Protection Officer".

What data do we collect and for what purpose?

We process different types of personal data depending on how you interact with us. Below, for each situation, you'll find what data that is and why we use it. We only collect the data necessary for the specific purpose.

Visiting our website and app

When you visit our website or use the B&B HOTELS app, we process some technical data. This includes your IP address, the type of browser and device you use, your language settings, and which pages you view. Our web server automatically logs this data in so-called log files. This is necessary for the site and app to function correctly and to protect against misuse (e.g., to detect hackers). We do not use this information to identify you, but purely for the technical operation and security of our online services.

Why? Without this data, the website cannot be displayed properly, or we wouldn't know what's wrong in case of malfunctions. The legitimate interest of B&B Hotels here is a fast, error-free website and the protection of our IT systems. We do not store these technical log data for longer than a few months and only look at them in case of problems or security incidents. For more information about cookies and similar technologies, please refer to our separate Cookie Statement on the website.

Reservations and check-in

When you book a room at B&B Hotels (online via our website/app, by phone, or through a travel agency), we process the personal data you provide for this purpose. This usually includes your name, contact details (email address, phone number, address), arrival and departure dates, number of guests, preferences (e.g., non-smoking, room with extras), and any comments or special requests.

If the booking is made through an external booking partner (such as a travel platform), we receive this data from that partner. We use this information to confirm your reservation, prepare your room, and provide you with the service you expect (such as a smooth check-in).

Upon arrival at the hotel, we ask you to*show identification to ensure that you are who you say you are. In the Netherlands, we are legally obliged to maintain a night register of our guests (name of the main booker, place of residence, arrival and departure date, number of guests, and identification shown). We record this data during check-in.

Please note: We do not make a copy of your identification document, nor do we record your Citizen Service Number (BSN), as this is not permitted under privacy laws. Showing your identification is sufficient.

Why? We need this data to perform the agreement with you (the booking/stay) – without this data, we cannot reserve a room for you or let you stay overnight. We also need to collect certain data to comply with our legal obligations. For example, the law requires us to maintain a night register for emergency services and tourist tax, and to be able to issue an invoice in your name upon check-out.

We also use your booking and stay data to improve our services. For example: we remember your preferences so that we can serve you even better during your next stay. We only do this if you return to us; in other cases, we archive or anonymize this information after your stay (see also "How long do we retain your data?").

Any special situations during your stay (such as an accident, damage, or complaint) will be recorded and used to handle it adequately (e.g., for an insurance claim or to improve our service). We do this based on our legitimate interest to resolve problems and protect our business operations.

Payments

For handling your payment, we work with an external payment provider. If you pay online (e.g., with a credit card or iDEAL) or at the reception, our payment service provider processes your payment data. We use Adyen N.V., a reputable payment provider based in Amsterdam. Adyen ensures that your payment is secure.

Sensitive payment information such as your card number, expiry date, and CVC code is sent directly to Adyen via a secure connection; we ourselves do not see or store these details. Instead, we receive a confirmation or a payment token from Adyen, so we know that your reservation has been paid.

Why? The processing of payment data is necessary for the performance of the payment and stay agreement with you. In addition, we must comply with financial legislation that prescribes secure payments and customer verification (e.g., to prevent fraud). In this context, Adyen can, for example, check whether the payment is fraudulent and request stronger verification (such as 3D Secure).

All this is done to protect your payment and our systems. If necessary for the payment, Adyen may transmit certain transaction data to your bank, card company, or another involved payment service (e.g., PayPal) – of course, only for the purpose of executing or verifying the payment.

We receive a confirmation from the payment provider when the payment is successful. We store this information (such as payment status, amount, payment method, and reference number) in our administration. We need this data for our accounting and to be able to trace the payment in case of any questions or refunds. By law, we also have to retain payment data (such as invoices) for a number of years (see "How long do we retain your data?").

Loyalty Programs (B&me and B&B Club)

B&B Hotels offers a loyalty program for loyal guests (currently the free B&me program, and in some countries the B&B Club). You can register for this voluntarily via our website or app. When you create an account for the loyalty program, we ask for certain data, such as your name, contact details (email), a password, and preferences (e.g., language).

We also record that you agree to the program's terms and conditions. You will then receive a confirmation email to verify your registration (double opt-in): in this, you click on a link to activate your B&me account. This ensures that it is your own email address and that no one signs you up without your permission.

In your B&me account, we store data about your bookings and stays at B&B Hotels, and the points or benefits you accumulate within the loyalty program. You can always view and manage this information yourself via your account, such as viewing your reservation history or your current discount level.

Why? We process this data to **perform the agreement** with you that belongs to the loyalty program. Without your data, we cannot create an account or track your membership.

Every time you use your member benefits (e.g., a discount on a room), we process this in our system to update your points or status. We also use your contact details to inform you about the program (e.g., a welcome message, changes in terms and conditions, or targeted offers as part of the loyalty program).

For any marketing communication outside the program, we ask for your separate consent (see "Marketing and newsletters" below).

You can unsubscribe from the loyalty program at any time via your account settings or by contacting us. We will then deactivate your account and delete or anonymize your data, with the exception of information we still need for our administration (e.g., to record that you are a former member, or for financial reporting of redeemed points).

Note: The loyalty program is offered in collaboration within the B&B HOTELS Group. Your data as a member may therefore be jointly processed by our group companies, for example, to ensure that your B&me benefits are valid in all participating hotels. This joint processing is based on our legitimate interest to provide our guests with a smooth international loyalty experience. Of course, we remain your point of contact and ensure that all our group members adhere to the same privacy rules.

Use of Wi-Fi internet in our hotels

In our hotels, you can use free wireless internet (Wi-Fi) for guests. When you connect to the guest Wi-Fi, we process certain technical data to give you access. This includes, for example, the MAC address (unique number) of your device, the assigned IP address, and the time you connect.

Sometimes we ask you on a portal page to enter your name or room number or to accept the terms of use before going online – we then also process this data, to the extent necessary to give you access.

Why? We process this data to provide you with internet access during your stay. It is in our legitimate interest to offer a stable and secure Wi-Fi connection. Therefore, we also technically record how the Wi-Fi is used so that we can manage the network, resolve problems, and prevent misuse (such as illegal downloads or cyber attacks via our network). We do not use the internet data for marketing purposes.

We do not store your Wi-Fi usage data longer than necessary. In practice, this means that log data from the guest Wi-Fi is automatically deleted after a short retention period – usually within ten weeks at the latest. Only if a concrete incident has occurred (e.g., misuse of the network during your stay) can relevant log data be stored longer to handle that incident.

Our Wi-Fi service may be managed in collaboration with a specialized IT supplier. This party acts under our instructions and is covered by a processor agreement, so your data is also well protected with them.

Camera surveillance in and around the hotel

The safety of our guests and employees is very important to us. Therefore, we use surveillance cameras (CCTV) in the public areas of our hotels. Signs are placed at the hotel entrance and in other relevant places to inform you that camera surveillance is in operation. The cameras film, for example, the lobby, reception, corridors, and parking areas.

Private areas such as hotel rooms and toilets are, of course, not filmed. The camera footage is only used for security purposes: to prevent incidents such as theft, vandalism, or other undesirable situations and, if something does happen, to be able to determine what occurred. This helps us to protect you and our property.

Why? We base the use of camera surveillance on a legitimate interest, namely the protection of our guests, employees, and property. We have carefully considered in advance that this interest outweighs your privacy in these public areas. Furthermore, we have no less intrusive means to achieve the same level of security. The cameras film continuously, but we do not review the footage live or on a routine basis – only if there is a reason (e.g., a suspicion of an incident).

The camera footage is not stored longer than necessary. As a rule, new footage automatically overwrites old footage after a maximum of 2 to 4 weeks. In many cases, we delete the recordings even earlier (after a few days), depending on the size of the storage medium.

Only if an incident is on the footage that has not yet been resolved can we store relevant fragments longer until the incident has been handled (e.g., until the police have investigated). After that, these recordings are also deleted. The camera footage is used exclusively internally or, if necessary, shared with investigative authorities (e.g., the police) or insurers in the context of an incident investigation.

Marketing and newsletters

Newsletter: You can subscribe to our email newsletter via our website or when booking. If you do this, we explicitly ask for your consent. We use a double opt-in method: after registration, you first receive an email with a confirmation link.

Only when you click on that link will your subscription be definitively registered. This prevents someone else from inadvertently subscribing your email address. We keep proof of your registration (date, time, IP address) to demonstrate that you have subscribed, as required by law for newsletters.

In the newsletter, we keep you informed of offers, promotions, and news about B&B Hotels. You will only receive these emails if you have given your consent.

You can withdraw your consent at any time: there is an unsubscribe link at the bottom of every newsletter. After unsubscribing, you will no longer receive newsletters. We process your name and email address for the newsletter based on your consent.

Offers after a stay: Have you been our guest? Then we may send you offers for similar services via email. Specifically, we may send you a one-time email after your stay, for example, with a discount for a next visit, or to point out a similar package.

For this type of direct marketing to existing customers, we do not need to ask for consent again, provided that it concerns our own comparable products and we have given you the opportunity to object when obtaining your email address.

Of course, you also have the option to object (unsubscribe) in each of these emails. You will always find an unsubscribe option at the bottom of the email. If you do so, you will no longer receive such offers.

We base this communication on our legitimate interest to inform our guests and encourage them to return, but we always respect your opt-out.

Please note: If you do not wish to receive any commercial emails from us at all, you can indicate this and we will completely exclude you from both the newsletter and targeted offers after a stay. You will then only receive emails from us that are necessary for our service (e.g., a booking confirmation or information about your arrival).

Guest reviews and feedback

Your opinion is very important to us. Therefore, after your stay, we may contact you once to ask if you would like to complete a guest review. This happens, for example, via email shortly after you have checked out. Participation is completely voluntary.

If you decide to give a review, we process the information you provide. This usually includes your hotel rating (score or stars), your comments or feedback in text, and possibly certain background data such as the purpose of your trip.

We may also ask for, for example, your name or initials, so that we can (with your consent) personalize the review, but you can also choose to post a review anonymously.

Why? We collect reviews to gain insight into the satisfaction of our guests and to improve our quality. This is done on the basis of our legitimate interest in continuously improving our services.

If you post a review via our website or app, we may make it public on our website or app (together with, for example, your first name and the first letter of your last name, and the date of the review) so that other customers can read your feedback. We will never publish your full name or contact details without your consent.

For the processing of guest reviews, we collaborate with a specialized partner (TrustYou). TrustYou helps us collect, analyze, and display reviews. When you fill out a feedback form, your answers and any personal data go directly to TrustYou's platform, which processes this data on our behalf.

TrustYou may further anonymize the review data and use it in aggregated form to compile general statistics about hotel reviews, but your personal feedback report is intended for us and other guests. With TrustYou, your data is also protected by strict contractual agreements (a processor agreement).

Are you no longer interested in our review requests? No problem: you can unsubscribe via the link in the review invitation or by letting us know that you do not wish to be contacted. We will respect your wishes and no longer contact you for reviews.

Contact and customer service

If you have questions, requests, or complaints, you can contact us in various ways: via the contact form on our website, via email, phone, or possibly via social media. To answer your question or handle your complaint, we process the personal data you provide to us.

This may include, for example, your name, contact details, and the content of your question/message. If you fill out a form, mandatory fields will be clearly marked as such – we really need that data to help you properly (e.g., your email address to be able to reply to you). You can also decide to provide additional information; we will then, of course, only use that for handling your request.

Why? If your question or request relates to a (future) booking or stay – for example, you request a quote, or you make a change request to your reservation – we process your data to fulfill (pre)contractual obligations.

In all other cases, we base this on our legitimate interest to respond effectively to questions and maintain good relations with (potential) guests. We therefore use the data you provide exclusively to contact you and process your question or complaint, and not for other purposes.

We store your correspondence with us (by email, via the web form, or phone notes) for as long as necessary to fully handle your issue and possibly follow up. In practice, we do not store most customer contacts for longer than one to three years after handling. This is so that we still have the context for follow-up questions and for internal analyses (e.g., of frequently asked questions).

Of course, you can always ask us to delete certain correspondence earlier. In some cases, we may have to retain communication longer due to legal obligations (e.g., claims or warranties) – in that case, we adhere to the legal retention periods.

Finally: if you contact us via social media (e.g., by sending us a message or mentioning us on Facebook or Instagram), we may also process that communication data to respond to you.

We advise you not to share privacy-sensitive information via public channels. If necessary, we will redirect you to a private channel. Any data we receive via social media will be processed on the same principle as above: to handle your request. Please note that the social media platform itself also processes data about you; we have no influence on that – please read the privacy statement of the relevant platform.

How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which it was collected, unless there is a legal obligation to retain it longer. This varies per type of data. Some examples:

* Reservation and invoice data must be retained for 7 years according to tax legislation (e.g., for the tax authorities). After that period, we delete or anonymize this administrative data.
* Guest night register information is retained for as long as the municipality requires it for control of night registration and tourist tax. This varies, but typically ranges from a few months to one year after your stay. After that, the register is cleared.
* Camera recordings are automatically deleted, as mentioned earlier, after a maximum of 2-4 weeks, unless there is an incident on them that has not yet been resolved (in which case we retain the relevant footage until the investigation is concluded).
* Wi-Fi log files for guest internet are retained for a maximum of approximately 10 weeks, unless there is a security incident that requires further investigation.
* Newsletter subscriptions remain active as long as you are subscribed. If you unsubscribe, we will put your email address on a deletion list so you no longer receive newsletters. We may retain minimal data (e.g., your email address) to remember that you have unsubscribed, so we don't accidentally email you again.
* Loyalty program accounts remain active as long as you are a member. After unsubscribing, we delete or anonymize your account data within a reasonable period, except for data still needed for, for example, financial accounting of points.
* Contact and complaint files are generally retained, as mentioned, for up to several years after handling, depending on the content. Pure requests for information can be deleted more quickly; complaints about service or accidents may be needed longer (up to several years for legal statute of limitations).

In all cases, we ensure that if there is no longer a legitimate interest or legal necessity to retain data, we **delete or anonymize** it. If you have specific questions about this ("How long do you retain this data?"), we will, of course, be happy to answer them.

With whom do we share your data?

We treat your data confidentially. However, there are situations in which we share personal data with **third parties**, but always under strict conditions. Here we list with whom and why we share data:

* Within our hotel group: As indicated earlier, we share data with other companies within the B&B HOTELS Group when necessary for business operations.
   For example, if you book a hotel in another country via our central website, we share your booking data with the operator of that specific B&B Hotel so that they can arrange your stay. The loyalty program is also group-wide: your points and status are therefore exchanged within the group.
   All B&B group companies have contractually committed to complying with the same privacy standards. An internal agreement has been concluded between the group members to divide responsibilities and ensure that your rights are guaranteed – regardless of which B&B hotel you book with.

* Payment service providers: For the execution of payments, we pass necessary data to our payment provider (such as Adyen, see above). This party, in turn, can share data with banks or credit card companies to execute the transaction or to comply with legal requirements (such as anti-money laundering legislation). Such parties are themselves also bound by privacy legislation and do not use your data for purposes other than payment.

* IT and cloud providers: We use external service providers for hosting our data (e.g., cloud servers), for maintaining our reservation systems, and for hotel IT (such as Wi-Fi management or our hotel management system). When they have access to personal data, this is exclusively for the stated purposes and under our instruction.
   We have concluded **processor agreements** with all these parties to guarantee that your data is treated as securely and confidentially as it is by us. Examples include our website host, email service, and the IT firm that maintains our Wi-Fi network.

* Newsletter and marketing partners: For sending our newsletter and possibly other mailings, we engage a specialized party (an email platform). This party processes your name and email address on our behalf to send the newsletter, but may not use your data for its own purposes. We also engage (as mentioned, TrustYou) as a data processor for the analysis of guest reviews. These parties are located within the EU or work under strict contractual conditions that comply with the GDPR.

* Government agencies and law enforcement: In certain cases, we are legally obliged to share personal data with authorities. This includes providing night register data to the municipality for tourist tax control, or sharing camera footage with the police if an incident has occurred.
   We will only share such data if we are legally obliged to do so or if a competent government body makes a legitimate request. We may also share your data if it is necessary to protect our rights in legal proceedings (e.g., with our legal advisors or insurance in case of a dispute).

* Other external parties: We do not sell or rent your personal data to third parties. In principle, we do not share data outside the categories mentioned above.
   Should a situation arise in the future where we want to provide data to another third party (e.g., in the context of a company acquisition or new service), we will only do so in accordance with the law and inform you in advance.

In short, third parties only receive your data with a clear purpose and on a legal basis. We have made **written agreements** with all parties who process personal data on our behalf to protect your privacy. They may not use your data for other purposes and must secure it properly.

Transfer of data outside the EU

The starting point is that we process and store your personal data as much as possible within the European Economic Area (EEA). Most of our servers and service providers are located in the EU. However, in some cases, your data may end up outside the EU/EEA.

This can happen, for example, if we use a cloud provider or IT supplier that is located in or has servers in a "third country" (e.g., the United States), or if we share data internally with a B&B Hotels branch outside Europe.

If such an international transfer of your data takes place, we always ensure appropriate safeguards. We will not simply send your data to countries that do not have an adequate level of privacy protection.

In situations where a recipient is located outside the EU, we first check whether the European Commission has designated that country as adequate (safe). If not, we work with the Standard Contractual Clauses approved by the European Commission or a similar legal guarantee. These are contractual agreements that oblige the recipient to protect your data according to European standards.

Where required by law, we also ask for your **consent** for such a transfer, for example, when you sign up for a service that clearly has an international component.

We do want to point out that, despite these measures, risks may exist in some countries outside the EU. For example, government agencies in certain countries (such as the US) may have broader access to data under their local laws. However, we take all possible measures to guarantee your privacy, and we assess on a case-by-case basis whether a transfer is justified. You can always ask us if your personal data is processed outside the EU and on what basis of protection. We are transparent about this.

How do we secure your data?

We take the security of your personal data seriously. Therefore, we have taken appropriate technical and and organizational measures to prevent misuse, loss, unauthorized access, or unauthorized disclosure. Some examples:

* Your data is stored on secure servers. Where possible, we encrypt sensitive information both during transmission (e.g., SSL encryption on our website) and in our databases.
* Only authorized personnel and service providers who need it have access to personal data, and then only on a need-to-know basis. Our employees are bound by confidentiality.
* We regularly test and evaluate our security measures. We also have our IT system periodically checked (e.g., through audits or penetration tests) to detect weaknesses in time.
* Paper documents with personal data (e.g., printed night registers or agreements) are stored securely and confidentially destroyed after use.
* We apply internal policies and training so that everyone within our organization knows how to handle personal data carefully.

Despite all precautions, of course, no 100% guarantee can ever be given that nothing will happen. Should a data breach unfortunately occur that affects your personal data, we will take the necessary steps according to the GDPR: we will report this to the Dutch Data Protection Authority if required and inform you if the breach is likely to have unfavorable consequences for you.

What are your privacy rights?

You have various rights under privacy law (GDPR). We believe it is important that you can easily exercise these rights. We briefly explain them below:

* Right of access: You can ask us what personal data we have about you. You will then receive a copy of that data, along with an explanation of how and why we process it.
* Right to rectification: If certain information is incorrect or outdated, you can ask us to correct or complete it.
* Right to erasure (right to be forgotten): You have the right to ask us to delete your personal data. For example, if the data is no longer necessary for the purpose or if you withdraw your consent. Sometimes we cannot erase all requested data, for example, because we have a legal retention obligation – we will then let you know.
* Right to restriction of processing: In certain situations, you can request a restriction of processing. This means that we (temporarily) only store your data and do not use it. You can do this, for example, if you dispute the accuracy of your data and we need time to check this.
* Right to data portability: You can receive the personal data you have provided to us, in a machine-readable format. You can also ask us to transfer it directly to another service provider. This right applies insofar as it concerns data that we process digitally based on your consent or a contract with you.
* Right to object: In certain cases, you can object to the processing of your data. For example, if we process your data based on a legitimate interest, and you have a specific personal reason for this, you can object. We will then stop the processing, unless we have compelling legitimate grounds to continue that outweigh your interests (e.g., if it is necessary for a legal claim). If it concerns direct marketing (such as emails), we always honor your objection – you can unsubscribe at any time, and we will stop the processing immediately.
* Right to withdraw consent: Insofar as we have asked for your consent for something (e.g., for the newsletter), you are free to withdraw that consent. If you do so, we will stop processing the data for which you gave consent as soon as possible. The withdrawal of consent does not affect previously processed data, but from that moment on we will no longer process that data (unless another legal basis applies).

To exercise any of these rights, you can simply contact us via the contact channels mentioned earlier (email privacy-netherlands@hotelbb.com or our postal address). Clearly state which right you wish to invoke and for which data, so that we can help you quickly.

We may ask for additional information to verify your identity with such a request – this is to prevent someone else from impersonating you. In principle, you will receive a response to your request within one month. If a request is complex or we receive many requests at once, we may extend that period by two additional months, but in that case, we will inform you within one month that we need more time.

In exceptional cases, we may have to refuse (part of) your request. For example, if someone else's rights would be violated by providing the data to you, or if a legal provision prohibits us from deleting certain data. In such a case, we will always explain why we cannot fully comply with your request. You also have the option to file a complaint about this.

Use of social media

We are active on social media to stay in touch with our guests and to promote our services. You can find us, for example, on Facebook, Instagram, LinkedIn, and other platforms. If you visit our pages or profiles on these social media channels, the providers of these platforms may collect and process your personal data. This usually happens via cookies, pixels, or other tracking technologies.

Please note: This largely happens beyond our control. The social media companies determine themselves what data they collect and how they use it. They process your data in many cases for their own purposes, such as personalized advertisements, usage analysis, or platform optimization.

Through these platforms, we only see anonymized statistics, for example, about the number of visitors to our page or popular posts. We can also send you a message via the platform if, for example, you ask a question or post a comment. We only use this data to respond to you or to manage our profile.

The platforms we work with include:

* Meta (Facebook and Instagram): See facebook.com/policy
* LinkedIn: See linkedin.com/legal/privacy-policy
* YouTube (Google): See policies.google.com/privacy

Please note: Some of these providers are located outside the EU, such as in the United States. They may store and process your data there. Most of these companies are certified under the **EU-US Data Privacy Framework**, which guarantees an adequate level of protection.

If you have questions about what these platforms do with your data, please consult the privacy statement of the relevant platform. If you want us to delete your data that came to us through such a channel, you can always let us know – for example, if you have sent us a private message.

Questions, complaints, and supervisory authority

Do you have questions or concerns about how we handle your data? Please let us know, we are happy to help. You can contact our privacy officer via privacy-netherlands@hotelbb.com. We take every privacy question seriously and will do our best to address your concerns.

Complaint with us: Are you not satisfied with how we handle your personal data, or with the handling of a privacy request? Please let us know. We will then try to find a solution together with you.

Complaint with the supervisory authority: If we cannot resolve it together, you have the right to file a complaint with the Dutch privacy supervisory authority, the Autoriteit Persoonsgegevens (AP). The AP supervises compliance with privacy legislation. You can contact the AP, for example, if you believe that we are violating the GDPR, or if we do not respond sufficiently to your requests. More information about filing a complaint can be found on the website of the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). Of course, we hope that it will not come to this and that we can resolve any complaints together.

Changes to this privacy statement

This privacy statement may be adjusted from time to time. Developments are rapid, and rules or our business processes may also change. If we make changes to how we handle your data, we will update this privacy statement. At the top of the statement, you can always see the date of the last change. In case of material changes, we will do our best to actively inform you (for example, via email or during your next booking). Nevertheless, we recommend that you consult this page occasionally.

If, after reading this updated statement, you continue to use our services or remain our guest, we assume that you agree to the changes. Of course, we will never restrict your rights under the GDPR through a change in this statement.

Do you still have questions after reviewing this privacy statement? Feel free to contact us via privacy-netherlands@hotelbb.com. We are always ready to answer your privacy questions!