This Privacy Policy explains how Euro Stay Finder (“we”, “us”) collects, uses, and protects your personal data when you use our website, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable national law.
1. Who we are
Euro Stay Finder is a curated marketplace for countryside stays across Europe, operated by Galit and Danny Navon, who are the data controllers responsible for your personal data. You can reach us at danny@bestsite.co.il.
2. What data we collect
- Account data — when you register, your name, email address, and login details (managed through our platform provider, Wix Members).
- Inquiry data — when you contact a property owner or us, your name, email, message, and any travel dates or details you provide.
- Wishlist data — the properties you save to your account.
- Owner listing data — if you list a property, the listing details and contact information you submit.
- Business prospect data — an accommodation business name, trading name, corporate identity and registration details, business location, public website, generic or role-based business contact details, and our records of the source, verification, outreach eligibility, objections, and suppression status.
- Technical data — IP address, device and browser type, and usage information collected through cookies and similar technologies.
3. How we use your data and our legal bases
- To provide the service (creating your account, showing listings, saving wishlists) — performance of a contract.
- To handle inquiries and connect you with property owners — performance of a contract and our legitimate interest in operating the marketplace.
- To secure the site and prevent fraud or abuse — our legitimate interests.
- To send service-related emails (e.g. confirmations, review notifications) — performance of a contract or legitimate interest.
- To identify and contact suitable accommodation businesses about a relevant Euro Stay Finder listing opportunity — our legitimate interests in developing the marketplace and establishing business relationships. Before relying on this basis, we assess necessity, the business context, the source and nature of the data, likely expectations, and the impact on the recipient. This does not mean that every record is eligible for outreach.
- To verify corporate identity and respect objections — our legitimate interests in keeping outreach accurate, accountable, and limited, and in preventing further marketing where a business or business contact has objected.
- For optional marketing, where applicable — your consent, which you may withdraw at any time.
- To comply with legal obligations — compliance with the law.
4. Public-source business prospecting
We may obtain business prospect data from the accommodation operator’s public website, Companies House, official tourism or business registers, and other public sources used to corroborate the identity and location of the business. We record the source and use only the business information needed to assess a potential listing relationship, complete compliance checks, and, if approved, send a limited and relevant business-to-business introduction.
Where the information relates to an identifiable business contact and was not collected directly from that person, we provide this privacy information within the period required by applicable data protection law and, where outreach occurs, no later than the first communication. You can ask us for the specific source of the information we hold about you. We do not treat a public email address or an unset subscription status as consent.
You may object to the use of your personal data for direct marketing at any time. If you object or opt out, we will stop using it for direct marketing and keep only the information needed on a suppression record so that your preference is respected. Contact us at danny@bestsite.co.il.
5. Cookies
We use cookies and similar technologies that are strictly necessary to run the site (for example, to keep you logged in and to secure forms). Where we use any non-essential cookies, we will ask for your consent. You can control cookies through your browser settings; disabling essential cookies may affect how the site works.
6. Who we share data with
We do not sell your personal data. We share it only with:
- Service providers (processors) who help us run the site — including Wix (hosting, content, member accounts, infrastructure, and transactional email) and Google Maps (map display).
- CRM and communication providers — where needed to manage a verified business contact, record preferences and suppression, or deliver a communication that has passed our approval process.
- Property owners — when you send an inquiry, the relevant owner receives the contact details and message you provide so they can respond.
- Authorities or advisors — where required by law or to protect our legal rights.
7. International transfers
Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
8. How long we keep your data
We keep personal data only for as long as necessary for the purposes described above, or as required by law. Account data is kept while your account is active; inquiry and listing data is kept for as long as needed to provide and support the service. We periodically review business prospect records and delete or anonymise them when they are no longer needed for the prospecting purpose. Where someone objects or opts out, we retain only the minimum suppression information needed to ensure that we continue to respect that preference. We do not assign a fixed retention period where one has not yet been formally adopted.
9. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to certain processing, including an absolute right to object to the use of your personal data for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent; and
- lodge a complaint with your national data protection supervisory authority.
To exercise any of these rights, email us at danny@bestsite.co.il. If you are in the United Kingdom, you can also complain to the Information Commissioner’s Office.
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Children
Our service is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.
13. Contact us
For any privacy question or request, email danny@bestsite.co.il or use our contact form.