Staklio Privacy Policy

This policy explains how Synrfy B.V., trading as Staklio (Krabbedijk 4, 4503 GN Groede, the Netherlands, KVK 96804270, VAT NL867768605B01, “Staklio”, “we”) handles personal data. Contact: info@staklio.com.

Staklio provides a white-label owner portal for hospitality operators. That means we handle personal data in two distinct roles, and your rights work differently in each.

1. Our two roles

a. Staklio as controller. For visitors of staklio.com, prospects, and business contacts, we decide how and why data is processed. Sections 2 through 4 apply.

b. Staklio as processor. For the owner portals we host on behalf of hospitality operators (our customers), the operator is the controller and Staklio processes Owner data only on the operator’s instructions, under a Data Processing Agreement. Section 5 applies. If you are a property owner using a portal, your operator’s privacy policy governs; contact your operator first for any privacy request, and we will assist them.

2. Staklio as controller: what we process and why

We do not sell personal data and do not use it for third-party advertising.

3. Retention (controller role)

• •Prospect and inquiry data: up to 24 months after last contact.
• •Customer contract and billing data: 7 years (Dutch fiscal retention obligation).
• •Support correspondence: duration of the relationship plus 24 months.

4. Your rights (controller role)

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Email info@staklio.com; we respond within one month. You can also complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

5. Staklio as processor: owner portal data

When an operator uses Staklio for its owner portal, we process on the operator’s behalf:

• •Owner identification and contact details (name, email, address, phone);
• •unit and ownership details;
• •financial data relating to statements and payouts;
• •login and usage data of portal users.

What we commit to as processor (mirrored in every Data Processing Agreement):

• •We process this data only on the operator’s documented instructions, solely to provide the portal.
• •We do not sell or share this data, and do not use it for any other purpose (this also constitutes our service-provider commitment under the California Consumer Privacy Act, CCPA).
• •We apply the security measures in section 6.
• •We notify the operator of a personal data breach without undue delay and no later than 72 hours after becoming aware of it.
• •On termination, we delete or return the data at the operator’s choice, except where law requires storage.

Exercising your rights as an Owner (including GDPR and CCPA rights to know, access, correct, and delete): contact your operator, the controller of your data. We support every such request. If you contact us directly, we will forward your request to your operator and assist.

6. Security

We protect personal data with encryption of data in transit and, where applicable, at rest, multi-factor authentication for administrative access, regular backups, and access logging.

7. Sub-processors and recipients

We remain responsible for our sub-processors and inform operators of intended changes, giving them the opportunity to object.

8. International transfers

The Platform is hosted in the EU. Where personal data is transferred outside the EEA (for example to a US-based operator or PMS provider), we ensure an appropriate transfer mechanism, such as the EU Standard Contractual Clauses or an adequacy decision, as required by applicable data protection law.

9. Cookies

staklio.com uses strictly necessary cookies for the site and portal login sessions. We also use Google Analytics for aggregate website statistics; these non-essential analytics cookies are placed only after you accept them via our cookie banner, and analytics storage is denied by default until you consent.

10. Changes

We may update this policy; the current version is always available at staklio.com/privacy. Material changes affecting operators are announced in advance.

---

Synrfy B.V., trading as Staklio · Krabbedijk 4, 4503 GN Groede, the Netherlands · KVK 96804270 · VAT NL867768605B01 · info@staklio.com

Decline Accept all