Privacy policy

When you fill out a contact or booking form: your name, email, phone number, country, and message. When you confirm a booking: the dates, apartment, number of guests, and any special requests. When you visit the site: anonymous traffic metrics (page views, country, device type) only if you accept analytics in the cookie banner.

To reply to you, confirm your dates, send check‑in details, and (with your consent) email you when our calendar opens for the next season. We don't sell your data, ever.

We rely on a small set of trusted services to run the site and manage stays. They process data on our behalf under their own GDPR‑compliant terms:

• Vercel (hosting, EU region) — serves the site and stores form submissions in transit.
• Neon Postgres (Frankfurt) — stores your enquiries, bookings, and reviews.
• Cloudinary — serves apartment photos.
• Resend — delivers transactional emails (booking confirmation, check‑in details).
• Brevo — handles the newsletter list, only if you subscribed.

Enquiries and bookings are kept for 5 years for tax and dispute‑resolution reasons. Newsletter subscriptions stay until you unsubscribe. Analytics data is aggregated and anonymised after 14 months.

You can ask us to send you a copy of everything we have about you, correct anything that's wrong, or delete your data entirely. Write to nagy@dahabcore.com — we'll respond within 30 days.

Our servers are in the European Union (Frankfurt). Some of our processors (Vercel, Cloudinary, Resend, Brevo) may also process data in the United States under Standard Contractual Clauses.

If we change anything material we'll update the date above and notify newsletter subscribers.

Privacy questions go to nagy@dahabcore.com. We'd rather answer them ourselves than route you through a generic form.