Privacy statement
Hospitality Skills (Pieter de Hoochstraat 74-4, 1071 EH Amsterdam, Netherlands, Chamber of Commerce 34354692, [email protected]) is the controller for personal data of RevView users and visitors of revview.nl. For the booking data of hotels, Hospitality Skills is a processor; the data processing agreement with the hotel applies.
Who this covers and which data
| Group | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Users with an account | name, business e-mail, role, hotel, password (hashed), authenticator settings | account access and security | performance of the contract | up to 60 days after the account ends |
| Users with an account | sign-in times, IP address, browser type, country, notices on a new device or country, blocks | security, detecting misuse including use by AI assistants or scrapers | legitimate interest (security of the service and the hotel data) | 365 days |
| Users with an account | audit log of changes to settings, budgets and events | accountability, correcting errors | legitimate interest | 365 days |
| Revvy users | questions asked and answers given, account, time | running the assistant, improving answers, detecting misuse | performance of the contract and legitimate interest | 180 days |
| Report recipients without an account | name and e-mail address as given by the hotel; unsubscribe status | delivering the hotel's weekly and monthly report | legitimate interest of the hotel and Hospitality Skills (the hotel chooses its recipients); unsubscribe at any time via the link in the e-mail | until unsubscribed or removed by the hotel |
| Signers of an order | name, title, e-mail, IP address, time, signed order | proof of the agreement, invoicing | performance of the contract and statutory retention | 7 years after the agreement ends |
| Visitors of revview.nl | data from the contact or demo form (name, e-mail, hotel, message) | answering the request | legitimate interest (answering your question) | 12 months |
Hotel booking data
RevView retrieves reservations from the hotel's property management system. It does not retrieve guest names, addresses, e-mail addresses or phone numbers; it does retrieve per reservation the guest's country code, the channel, the room, the dates and the amounts. Hospitality Skills processes this data on the hotel's instructions as processor. The hotel remains controller and answers guests' requests.
Recipients and sub-processors
Hospitality Skills shares personal data only with parties needed to deliver RevView, under a data processing agreement: TransIP (servers and storage, Netherlands), Cloudflare (network, security and DNS; Ireland/US, EU-US Data Privacy Framework), Resend (e-mail sent from RevView; US, processed in the EU region), Microsoft 365 (Hospitality Skills' e-mail and documents, EU data centres), Anthropic (language model for report commentary and the Revvy assistant; US; no training on our data under its commercial terms), Mollie (payments, Netherlands), Bitwarden (key management; US). Hospitality Skills informs hotels in advance of a new sub-processor. Transfers outside the EEA take place only under the EU-US Data Privacy Framework or standard contractual clauses.
Password check
When a password is chosen, RevView checks it against known data breaches through the Have I Been Pwned service; only the first five characters of a hash leave the system, never the password.
Cookies
The app uses functional cookies only, for the session and for remembering a trusted device. There are no advertising or tracking cookies. If revview.nl adds an analytics tool, this statement will be updated.
Your rights
You can access, correct or delete your data, restrict processing, object to processing based on legitimate interest, and receive a copy of your data. E-mail [email protected]; we respond within one month. You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
Data is stored on servers in the Netherlands and encrypted in transit; passwords are hashed; Hospitality Skills administrators and hotel managers use two-step verification; there is a daily backup to a second location in the Netherlands and an audit log. A data breach affecting your data is reported to you and, where required, to the authority within 72 hours.
Changes
This statement may change; the date at the top shows the version. On a material change we inform users by e-mail or at the next login.