At HandalStay, data privacy is a matter of trust, and your trust is of utmost importance to us. We are committed to ensuring that your personal data is protected and that its collection, processing, and use in connection with HandalStay’s services—through our app and website HandalStay.com—fully comply with legal requirements. In this Privacy Policy, we aim to provide a clear overview of how we collect and use your data, so you can understand how your personal information is handled.
1. Overview
This Privacy Policy explains how and to what extent HandalStay processes personal data. Personal data includes any information that can directly or indirectly identify an individual, such as names, email addresses, and other identifying details.
2. Scope and Contact Information
This Privacy Policy covers all data processing activities conducted by HandalStay.com. For any questions or concerns regarding data privacy, you can contact HandalStay's Data Protection Officer at info@HandalStay.com.
3. Data Processing Purposes, Legal Basis, and Recipietns
This section outlines the purposes for which your data is processed, the legal basis and legitimate interests pursued by HandalStay or third parties, and the categories of recipients who may have access to your data.
3.1. Accessing our website/application
When you access our website or application, the browser on your device automatically transmits certain information to our server, where it is temporarily stored in a log file. This process is beyond our control. The following information is collected automatically and stored until it is deleted:
- IP address of the internet-enabled device requesting access
- Date and time of access
- Name and URL of the requested file
- Website/application from which access occurred (Referrer URL)
- Browser used, and potentially the operating system of your device
- Name of your access provider
- Device type (e.g., desktop or smartphone)
- Language settings of the browser
The collection of this data is based on our legitimate interest in fulfilling the purposes outlined below. We assure you that no direct conclusions about your identity can be drawn from this data, nor do we attempt to do so.
We use the IP address and other data mentioned for the following purposes:
- Ensuring a seamless connection to our website/application
- Optimizing user experience for comfortable navigation
- Evaluating system security and stability
Data is erased as soon as it is no longer needed for its original purpose. In the case of enabling website functionality, this typically occurs when the session ends. Data stored in log files is automatically deleted after a set period, ensuring it can no longer be linked to a specific user.
Additionally, we use cookies, tracking tools, targeting methods, and social media plug-ins on our website/application.
3.2. Creating and using a user account, bookings, booking inquiries
3.2.1. Creating an account
When you create a user account with us, we process your personal data in one of the following ways:
- If you log in using Google (social login), we process your Gmail address and the information transmitted from your Google account (such as name, profile picture, link to your Google account, top-level domain, gender, and hosted domain).
- If you log in using your email, we process your email address.
A user account is also created when you enter your email address and make a booking or booking inquiry through our website (see section 3.2.2). These services require a user account for technical purposes, and we store your email address, name, and travel dates.
Each time you log in, we store technical information about your device and browser, as well as details about your searches. This helps us enhance your user experience and improve our overall services.
You provide this data as part of the contractual relationship between you and us. Additionally, we process this data to protect your identity and prevent fraudulent activities.
HandalStay may request you to submit a copy of their ID to verify the identity and ensure secure transactions. The submitted ID copy will not be shared under any circumstances except for legal reasons and will be securely stored on the HandalStay server.
3.2.2. Bookings and booking inquiries
HandalStay does not provide travel services directly. When we receive a booking inquiry, we collect the following information to forward to providers:
- Desired place, arrival and departure dates
- First and last name
- Number of guests
- Email address
- Phone number
- Payment method (processed securely by a third-party payment service under a data processing agreement)
- (Optional) Message to the provider
Collecting and transmitting this data to our providers is essential for facilitating the booking process and is a necessary step toward entering into a contract with the provider.
3.3. Social logins (logging in with Google)
When you log in using Google, Google identifies that you have used your login credentials with HandalStay. We do not access your Google Account information directly. Instead, Google notifies you about the specific data it will share with us as part of the login process.
Your registration and login via Google are subject to Google’s Privacy Policy and Terms of Service (https://policies.google.com/privacy?hl). With your explicit consent, Google shares certain personal data with us, which we use to create your HandalStay account. The following data is transmitted to and stored by us:
- Your email address
- The name on your Google account (first and last name)
- Your profile image (or avatar) used on Google
- A link to your Google account
- Your gender
- The top-level domain of your Google account
- The hosted domain (HD) associated with your Google account
This data is used for the following purposes:
- To identify you as a contractual partner
- To create and manage your HandalStay user account
- To verify the accuracy of the provided information
The collected data will be deleted when you terminate your usage of our platform.
You can block the connection to HandalStay through your Google account at any time. For more details regarding Google’s data collection, processing, and use, as well as your rights and privacy settings, please refer to Google’s Privacy Policy (https://policies.google.com/privacy?hl).
3.4. Email / SMS / Kakao Talk Notification service
We use an email, SMS and Kakao Talk Notification service to send various types of information, including booking and inquiry confirmations, notifications, and promotional messages. To personalize these emails, we process your email address & phone number, along with your first and last name.
3.5. Data processing for advertising purposes
3.5.1. Newsletter
We offer the option to sign up for our newsletter on our website. You can withdraw your consent at any time with future effect by simply clicking the unsubscribe link provided in each newsletter.
3.5.2. Product recommendations
We may send you emails, SMS, MMS and Kakao Talk Notifications containing product recommendations based on your recent searches. You will receive these recommendations even if you are not subscribed to our newsletter. This helps us inform you about products from our offerings that might interest you.
If you prefer not to receive product recommendations, you can opt out at any time. You can contact us sending emails to help@HandalStay.com, or simply click the unsubscribe link included in each email or in the message.
3.5.3. Interest-based advertising
To ensure that you receive information relevant to your interests, we categorize your user profile based on your search history. This allows us to tailor the content of our newsletter and promotional emails to better match your preferences. Our aim is to provide you with advertising that aligns with your actual needs and to minimize irrelevant or unnecessary messages.
3.6. Cookies: General Information
We use cookies on our website to enhance and optimize your experience. Our use of cookies is based on legitimate interests as defined by applicable laws.
Cookies are small files that your browser automatically creates and stores on your device (such as a laptop, tablet, or smartphone) when you visit our website or use our app. These cookies do not harm your device and are free from viruses, Trojans, or other malicious software. They are linked to the specific device used, but this does not immediately reveal your identity to us.
Cookies serve various purposes:
- Session Cookies: These cookies help make our service more convenient by remembering your visits to specific pages or your login status. They are automatically deleted once you leave our website.
- Temporary Cookies: These cookies are stored on your device for a specified period and help remember information and settings between visits, so you do not need to re-enter them.
- Account-Related Cookies: If you have an account and are logged in, or if you activate the "Stay logged in" feature, cookies will store information related to your account to maintain your login status.
- Statistical and Optimization Cookies: We use these cookies to gather statistical data on website usage, optimize our services, and provide information tailored to your preferences. These cookies are deleted after a defined period.
Most browsers are set to accept cookies by default. However, you can configure your browser to reject cookies or prompt you before creating new ones. Please note that disabling cookies may impact your ability to use all features of our website. The storage duration of cookies depends on their purpose and varies accordingly.
3.7. Analytical tools
To tailor and continually enhance our websites to better meet users' needs, we use analytical tools that allow us to analyze how our website is used.
3.7.1. Google Analytics
We use Google Analytics, a web analytics service provided by Google. This service creates pseudonymized usage profiles and utilizes cookies to collect information about your use of our website, including:
- Browser type and version
- Operating system
- Referrer URL (the previously visited page)
- Hostname of the accessing computer (IP address)
- Time of server request
This information is transmitted to a Google server in the U.S. and stored there. Google adheres to the U.S. Privacy Shield Framework and is registered with the U.S. Department of Commerce's Privacy Shield Program. Additionally, we have a data processing agreement with Google, ensuring that data is handled in compliance with the General Data Protection Regulation (GDPR) and safeguarding data subject rights.
The collected data is used to analyze website usage, generate reports on website activity, and provide additional services related to website and internet usage for market research and user experience improvement. This data may be shared with third parties if required by law or if third parties are engaged to process the data. However, your IP address will not be combined with other Google data, as IP addresses are anonymized to prevent personal identification ("IP masking").
You can prevent the use of cookies by adjusting your browser settings. Disabling cookies may limit your ability to use all features of our website. You can also prevent the collection and processing of data generated by cookies (including your IP address) by downloading and installing the browser add-on available here: Google Analytics Opt-Out Browser Add-On. This will set an opt-out cookie to prevent future data collection on this website. Note that the opt-out cookie is valid only for this browser and our website; if you delete cookies in this browser, you will need to set the opt-out cookie again. For more information on Google Analytics data privacy, visit the Google Analytics Privacy Support.
3.7.2. Google Tag Manager
We use Google Tag Manager, a service provided by Google that allows us to manage website tags through a centralized interface. Google Tag Manager itself does not set cookies or collect personal data. Instead, it triggers other tags that may collect data. Google Tag Manager does not have access to this data.
If you deactivate cookies or tracking at the domain level, this deactivation will apply to all tracking tags implemented through Google Tag Manager. For more details, please refer to the Google Tag Manager use policy: Google Tag Manager Use Policy
3.8. Targeting
We use targeting techniques to deliver advertisements that are relevant to your interests. By employing these measures, we aim to ensure that the ads you see are tailored to your preferences and displayed on your devices.
3.8.1. DoubleClick
We use Google's targeting technology, DoubleClick, to collect and analyze information for optimizing advertisements on our website (see section 3.6). This technology helps us deliver personalized, interest-based advertising by using cookies to gather data on your interactions with our products. The information collected enables us to show you relevant ads on third-party websites based on your previous interests and behaviors. All data is processed in a pseudonymized manner, ensuring that we cannot personally identify you, and is not linked to any personally identifiable information.
You can manage your preferences for interest-based advertising through the Google Ads Settings Manager here. For more details on Google's advertising practices and privacy policy, please refer to Google's Privacy Policy and Terms of Service.
3.8.2. Google AdWords
HandalStay utilizes Google's AdWords service, which includes conversion tracking to assess the effectiveness of our ads, offers, and features. When you click on a Google ad, a cookie is placed on your device. This cookie does not personally identify you but helps us determine whether you return to the page with the specific offer within the 30-day validity period of the cookie.
Each AdWords advertiser receives a unique cookie, which prevents tracking across different AdWords advertisers' websites. The data collected through the conversion cookie is used to generate conversion statistics for AdWords advertisers who use conversion tracking.
You can prevent the storage of Google conversion cookies by adjusting your browser settings. For more information on Google's conversion tracking, please refer to Google's Privacy Policy.
3.8.3. Google Dynamic Remarketing
We utilize Google Dynamic Remarketing in conjunction with the cross-device capabilities of Google AdWords and Google DoubleClick. This feature enables us to link the advertising audiences created through Google Dynamic Remarketing with the cross-device features of Google AdWords and Google DoubleClick. Consequently, personalized advertising messages tailored to your interests and past behavior on one device (e.g., smartphone) may also appear on other devices you use (e.g., tablet or PC).
If you have consented to Google, Google will connect your web and app browsing history with your Google Account. This allows the same personalized ads to be shown on any device where you are signed into your Google Account.
To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.
You can opt out of cross-device remarketing and targeting by disabling personalized advertising in your Google Account. To do so, visit Google Ads Settings.
For further details on data privacy and related provisions, please refer to Google's Privacy Policy.
3.8.4. Google AdSense
We use Google AdSense on our website to display advertisements that may be relevant to your interests. These ads are identified by the label "Google Ads." To serve these ads, Google employs web beacons and cookies (see section 3.6). The information collected through these cookies and web beacons, including your IP address and details about your use of the website and ad delivery, is sent to a Google server in the U.S. and stored there. Google may also share this information with third parties.
We have enabled third-party ads through Google AdSense. Data collected through these ads may be shared with third parties, as detailed at Google's support page.
You can prevent Google AdSense from placing cookies by opting out of interest-based ads through Google Ads Settings.
For more information on data privacy and Google’s practices, please refer to Google's Privacy Policy.
4. Google Maps
We use the Google Maps API to integrate interactive maps directly into our website and to facilitate the use of map functionalities. To enable this service, your IP address is transmitted and stored on Google's servers in the US (refer to section 3.7.1 regarding the US Privacy Shield).
For more details, please review the Google Maps Terms of Service and Google's Privacy Policy.
5. Your rights
5.1. Overview
In addition to the right to withdraw any consent you have previously given, you may have the following rights, subject to applicable legal requirements:
- Right to Access: You can request information about the personal data we hold about you.
- Right to Rectification: You can request the correction of inaccurate personal data or the completion of incomplete personal data.
- Right to Erasure: You can request the deletion of your personal data that we hold.
- Right to Restrict Processing: You can request a restriction on the processing of your personal data.
5.2. Right to object
You have the right to object to the processing of your personal data on grounds related to your particular situation.
This general right to object applies to all data processing activities described in this Privacy Policy. However, unlike the specific right to object to data processing for advertising purposes, we are only required to honor a general objection if you provide compelling reasons, such as a potential threat to life or health. Additionally, you can also reach out to the supervisory authority responsible for HandalStay at Email: help@HandalStay.com.
