Privacy policy

Privacy Policy Fortuna Suites

Version 15 August 2026 — registered office Middelburg

Fortuna Suites (“we”, “us”, “our”) places great value on the protection of your personal data. In this privacy policy, we explain what data we collect from you (“you”, “your”), why, and what rights you have. This policy has been drawn up in accordance with the General Data Protection Regulation (GDPR).

1. Who is responsible for your data

Fortuna Suites, based in Middelburg, is the data controller for the personal data collected via our website, booking forms and communication.

  • E-mail: info@fortunasuites.nl

2. What data we collect

Depending on how you contact us, we process the following data:

When making a booking:

  • First name and surname
  • Email address and phone number
  • Address details (street, postcode, town/city, country)
  • Arrival and departure dates, number of guests
  • Payment details (processed via our payment provider Stripe — we do not store full credit card details ourselves)
  • Any discount code or special requests that you pass on to us

When contacting us by email, phone or contact form:

  • Name, email address and/or phone number
  • Content of your message

Automatically collected when visiting our website:

  • Technical data such as IP address, browser type and pages visited, via cookies or similar technologies (see article 7).

3. What we use your data for

We process your data for the following purposes:

  • Processing and confirming your booking, and performing the agreement during your stay.
  • Processing payments.
  • Communication with you regarding your booking (confirmations, amendments, questions).
  • Compliance with legal obligations, such as the municipal registration obligation for accommodation providers and the fiscal retention period.
  • Improving our website and services.
  • The sending of any newsletters or offers, exclusively if you have given consent for this.

4. Lawful basis for processing

We process your personal data on the basis of:

  • Performance of the agreementto process your booking and facilitate your stay.
  • Legal requirementfor example, for the guest or night registration and fiscal administration.
  • Legitimate interestsuch as optimising our website and preventing fraud or abuse.
  • Permission: for example, to the extent that we send you newsletters or place non-essential cookies.

5. Who we share your data with

For our services, we use third parties that process (a part of) your data under our responsibility:

  • Smoobu — our booking and channel management system, in which your reservation data is recorded.
  • Stripe — our payment provider, for the secure processing of your payment.
  • Our hosting provider — for the technical management of our website and the storage of data sent via our website.

We never sell your personal data to third parties. Where required, we enter into a data processing agreement with parties that process personal data on our behalf.

Some of these parties may process data on servers outside the European Economic Area (EEA). In that case, we ensure that this is done with appropriate safeguards, such as the EU standard contractual clauses.

6. Retention period

We do not retain your personal data longer than necessary for the purposes described in this policy, and in any case no longer than legally required. For example, we retain booking and payment data for the statutory fiscal retention period of 7 years.

7. Cookies

Our website uses cookies and similar technologies to ensure the website functions properly and, where applicable, to analyse the use of the website.

You can manage or delete cookies yourself via your browser settings.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • AccessYou can request which data we process about you.
  • CorrigendumYou can have incorrect or incomplete data corrected.
  • RemovalYou can request us to delete your data, provided we are not still legally required to retain it.
  • Restrictionyou can request us to temporarily restrict the processing of your data.
  • ObjectionYou can object to the processing of your data based on our legitimate interest.
  • Data portabilityyou can request that we transfer your data to you or another party in a structured, commonly used format.
  • Withdrawal of consentinsofar as processing is based on consent, you may withdraw it at any time.

To exercise one of these rights, you can contact us at info@fortunasuites.nl. We will respond to your request within four weeks.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) if you believe that we are not handling your data with care.

9. Security

We take appropriate technical and organisational measures to secure your personal data against loss or unlawful processing, including the use of a secure (SSL/TLS-encrypted) connection on our website and the processing of payments via a certified payment provider.

10. Changes to this privacy policy

We may update this privacy policy from time to time, for example in response to changes in our services or legislation. The most up-to-date version can always be found on our website.

11. Contact

Do you have any questions about this privacy policy or how we handle your personal data? Then please contact us:

  • E-mail: info@fortunasuites.nl