Privacy Policy
Privacy Policy
Last updated: July 2026
1. Data Controller
This website is operated by:
Bjoern Russack
Bjoern's Holiday Homes
Email: [email protected]
Licensed Holiday Home Operator in Dubai, United Arab Emirates.
Operator Permit No.: HO26/000025368
2. Scope of this Privacy Policy
This Privacy Policy explains how we collect, use, process and protect your personal data when you visit our website, contact us or book accommodation through Bjoern's Holiday Homes.
We are committed to handling your personal data responsibly and, where applicable, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
3. Website Hosting
This website is hosted using the HolidayFuture website platform operated by Hostaway.
When you access our website, technical information necessary for the operation, delivery and security of the website may be processed by our hosting provider.
Processing is carried out on the basis of our legitimate interest in providing a secure, reliable and efficient website (Article 6(1)(f) GDPR).
Where applicable, Hostaway acts as a data processor on our behalf.
4. Server Log Files
When you visit this website, certain information is automatically recorded in server log files.
This information may include:
IP address
Date and time of access
Browser type and version
Operating system
Device information
Referrer URL
Requested pages
HTTP status codes
These log files are processed solely for ensuring the stability, security and proper operation of the website and are not used to identify individual visitors unless required for security purposes.
5. Personal Data We Collect
Depending on your interaction with our website and services, we may collect:
Full name
Email address
Telephone number (if provided)
Booking details
Payment information (processed securely by Stripe)
Passport or other government-issued identification where required by law
Communications submitted through our contact form or email
Technical information relating to your use of the website
6. Purpose of Processing
We process your personal data for the following purposes:
Processing reservations
Managing your booking and stay
Communicating with you before, during and after your stay
Verifying guest identity
Complying with legal obligations in the United Arab Emirates
Responding to enquiries
Preventing fraud and unauthorised bookings
Maintaining accounting and legal records
Protecting the security, availability and functionality of our website
7. Legal Basis for Processing
Where the GDPR applies, personal data is processed on one or more of the following legal bases:
Performance of a contract (Article 6(1)(b) GDPR)
Compliance with legal obligations (Article 6(1)(c) GDPR)
Legitimate interests (Article 6(1)(f) GDPR)
Consent where required (Article 6(1)(a) GDPR)
8. Guest Registration
As a licensed Holiday Home Operator in Dubai, we are legally required to register guests with the relevant government authorities.
Guests may therefore be asked to provide a copy of a valid passport or other government-issued identification before check-in.
This information is processed solely for compliance with applicable legal requirements and building security regulations.
9. Payments
Payments are processed securely by Stripe.
We never receive or store your complete payment card details.
For further information, please refer to Stripe's own Privacy Policy.
10. Booking Management
Reservations, calendar management, guest communication and the operation of this website are provided through Hostaway and its website platform HolidayFuture.
Personal information is processed only to the extent necessary to manage reservations and provide our accommodation services.
If a reservation is made through third-party booking platforms such as Airbnb or Booking.com, the initial collection of personal data is governed by the respective platform's privacy policy.
Once a booking has been confirmed, we process the information received only for the purpose of fulfilling the accommodation contract and complying with applicable legal obligations.
11. Contact Form
If you contact us through our website or by email, we use the information you provide solely to respond to your enquiry and, where appropriate, to establish or perform a contractual relationship.
Enquiries are retained only for as long as necessary to process your request and comply with applicable legal obligations.
We do not use your personal information for unsolicited marketing.
12. Google reCAPTCHA
To protect our website against spam, automated abuse and malicious activity, we use Google reCAPTCHA, a service provided by Google.
reCAPTCHA analyses certain technical information, including your IP address, browser information, device characteristics, interaction patterns and other technical data, in order to determine whether a visitor is a human user.
This processing is based on our legitimate interest in protecting our website against misuse and ensuring the security of our online services (Article 6(1)(f) GDPR).
Data may be processed on servers located outside the European Economic Area (EEA). Where required, appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, are implemented.
Further information is available in Google's Privacy Policy.
13. Cookies
Our website uses cookies and similar technologies that are necessary for:
Website functionality
Booking functionality
Security
Fraud prevention
Google reCAPTCHA
Remembering user preferences
We currently do not use advertising cookies or behavioural profiling technologies.
You may configure your browser to refuse cookies. Please note that disabling cookies may affect the functionality of certain parts of the website.
Should analytical or marketing cookies be introduced in the future, an appropriate cookie notice and consent mechanism will be implemented where required by law.
14. Disclosure of Personal Data
We may disclose personal data only where necessary to:
Stripe (payment processing)
Hostaway / HolidayFuture (booking and website management)
Google (reCAPTCHA security service)
Government authorities in the United Arab Emirates where legally required
Carefully selected service providers supporting the operation of our business
We never sell, rent or trade personal data.
15. International Data Transfers
As our accommodation is located in Dubai, personal information may be processed in the United Arab Emirates and by carefully selected international service providers.
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented where required by applicable law, including:
Standard Contractual Clauses (SCCs);
contractual safeguards with service providers; or
other recognised legal transfer mechanisms.
16. Data Retention
Personal information is retained only for as long as necessary to:
Complete your reservation
Provide our accommodation services
Comply with legal obligations
Resolve disputes
Fulfil accounting and regulatory requirements
Retention periods vary depending on the type of information and applicable legal requirements.
Data that is no longer required is securely deleted or anonymised where appropriate.
17. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction.
Access to personal information is restricted to authorised persons who require such access for the provision of our services.
Although no method of transmission over the Internet is completely secure, we apply recognised industry standards to safeguard your information.
18. Your Rights
Subject to applicable law, you may have the right to:
Access your personal data
Correct inaccurate personal data
Request deletion of your personal data
Request restriction of processing
Object to processing based on legitimate interests
Request data portability
Withdraw consent where processing is based on consent
Requests may be sent to:
19. Complaints
If you are located within the European Economic Area (EEA), you may have the right to lodge a complaint with your competent data protection authority if you believe your personal data has been processed unlawfully.
We encourage you to contact us first so that we can resolve any concerns directly.
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The most current version will always be published on this page together with the latest revision date.
21. Contact
Bjoern Russack
Bjoern's Holiday Homes
Licensed Holiday Home Operator – Dubai, United Arab Emirates
Operator Permit No.: HO26/000025368
Email: [email protected]
Effective Date: July 2026