Privacy Notice.

Privacy Notice

How we process your personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR / AVG) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, UAVG).

1. Controller

The controller responsible for the processing of personal data within the meaning of the GDPR is:

Schuessler Private Travel, owner: Tobias Schuessler ,André Voltenlaan 116, 3541 AG Utrecht E-mail: tobias@schuessler-private-travel.com

We have not appointed a Data Protection Officer, as this is not legally required given the nature and scope of our processing. For any privacy question you can reach us directly at the e-mail address above.

2. Collection and storage of personal data

When you visit this website

This website is hosted on Squarespace (see section 4). When you access the site, your browser automatically transmits technical information to the server, which is recorded in server log files. This typically includes:

  • your IP address (in abbreviated or full form, depending on the service)

  • the date and time of the request

  • the name and URL of the file accessed

  • the amount of data transferred

  • the browser type and version, and the operating system

  • the referring URL

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in the stable, secure operation and presentation of the website). This data is processed by Squarespace as our processor and is retained for the period set by Squarespace.

When you use the contact form

If you use the contact form, we process the data you provide: your name, your e-mail address, optionally your phone number, and the content of your enquiry. We use this data solely to respond to your enquiry and to prepare a possible engagement. Form submissions are received and stored through Squarespace.

Legal basis: Art. 6(1)(b) GDPR (taking steps at your request prior to entering into a contract) and, where applicable, Art. 6(1)(a) GDPR (your consent). Retention: until your enquiry has been fully dealt with, and at most 24 months thereafter, unless statutory retention obligations require otherwise.

3. Disclosure of personal data

We disclose your personal data to third parties only in the following cases:

  • To the travel suppliers and intermediary parties we arrange for you (e.g. hotels, cruise lines, tour operators, and booking or reservation platforms). Where you ask us to arrange a booking, passing on the data required for that booking — such as your name, contact details, travel dates and any relevant traveller information — is necessary to perform the contract or to take steps at your request prior to entering into it. We only share the data needed for the specific booking. Legal basis: Art. 6(1)(b) GDPR.

  • To technical service providers such as our hosting provider, acting as processors under a data processing agreement within the meaning of Art. 28 GDPR.

  • Where we are under a legal obligation to do so.

4. Services we use

Hosting — Squarespace

This website is hosted by Squarespace. For visitors and customers based in the European Economic Area, the provider is Squarespace Ireland Limited, with the underlying infrastructure operated by Squarespace, Inc. in the United States. Squarespace acts as our processor on the basis of its Data Processing Addendum (squarespace.com/dpa).

Transfer to the United States: because Squarespace transfers personal data from the EEA to Squarespace, Inc. in the United States, your data is processed in a third country. Squarespace provides an appropriate safeguard for these transfers under Chapter V of the GDPR by relying on the European Commission's Standard Contractual Clauses and on the EU–U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR). Further information: squarespace.com/privacy.

Cookies

Squarespace sets a small number of strictly necessary cookies that are required for the website to function securely (for example to keep the site available and to handle form submissions). These do not require consent under Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet).

In addition, this website uses analytics cookies (see below). These are not strictly necessary and are only placed once you have given your consent through our cookie banner. Until you consent, no analytics cookies are set. You can withdraw your consent at any time with effect for the future via the cookie settings on the site. Legal basis: Art. 6(1)(a) GDPR (your consent), in conjunction with Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet).

Squarespace Analytics

We use the built-in analytics provided by Squarespace to understand how visitors use the site (for example page views, traffic sources and general device information), so we can improve our content and presentation. Squarespace Analytics relies on cookies and similar technologies. It is activated only after you consent via the cookie banner. Legal basis: Art. 6(1)(a) GDPR.

Google Analytics

We also use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies to analyse how you use the website; the information generated (including a shortened IP address) is transmitted to and stored by Google. This may involve a transfer of data to Google LLC in the United States, for which Google relies on the European Commission's Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.

Google Analytics is loaded only after you consent via the cookie banner. Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw your consent at any time through the cookie settings, and you can additionally install Google's browser opt-out add-on (tools.google.com/dlpage/gaoptout).

5. Your rights

To the extent provided by law, you have the right to:

  • obtain access to the personal data we hold about you (Art. 15 GDPR)

  • have inaccurate data corrected (Art. 16 GDPR)

  • have your data erased (Art. 17 GDPR)

  • restrict the processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • object to the processing (Art. 21 GDPR)

  • withdraw any consent you have given, at any time (Art. 7(3) GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, contact us at the e-mail address in section 1.

6. Supervisory authority

As we are established in the Netherlands, the competent supervisory authority is the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens Postbus 93374, 2509 AJ Den Haag, The Netherlands autoriteitpersoonsgegevens.nl

7. Updates and changes

This privacy notice is currently valid and dated June 2026. We will update it whenever our services or the applicable legal requirements change.