Privacy

What this site knows about you

Very little, and this page says exactly what. No tracking, no advertising, no profile built in the background.

Last updated: September 2026

Who is responsible

Custom Hospitality is a hospitality consultancy founded by Carmen Mladenovic, based in Haarlem in the Netherlands. It decides what this website collects and why, which under the GDPR makes it the controller. Carmen answers these questions herself, at the address at the foot of this page.

What is collected

Three things, and nothing else.

What you send through the form

Your name, your email address and your message. A company or vessel name and a subject are optional. Nothing is asked for that is not needed to write back.

A record that a page was opened

Which page, the site you came from, whether the request looked automated, and when. No visitor identifier, no IP address, no device fingerprint, so one visit cannot be tied to another or to you.

Ordinary server logs

As on every web server, each request writes a line that includes the IP address it came from, kept for security and troubleshooting. Enquiry text is filtered out of these logs.

Why, and for how long

Your details are used to reply to you and for nothing else. There is no mailing list. The anonymous page counting shows which pages are read, and the logs and the limit on form submissions are what keep the site standing. In GDPR terms, replying to you is processing at your request before any agreement exists; the counting and the security rest on a legitimate interest in a site that works and is not broken into. Nothing here runs on consent, so there is none to give and none to withdraw.

Writing to us is entirely your choice and no law or contract requires it. The only consequence of giving nothing is that there is no way to answer you.

Enquiries are kept while a conversation is live and while there is a working reason to keep them, then deleted. Ask sooner and they go sooner. The page records identify nobody, so they stay as a running count.

Cookies

One cookie, holding a short lived session. It proves a form submission came from the page it claims to, and carries the token that lets the browser tell this site's own code from anything injected into the page. Both are security measures. It holds nothing about you.

There are no analytics, advertising or third party cookies. The one that is set is strictly necessary, the category European law exempts from asking permission, which is why there is no consent banner. A Do Not Track signal finds nothing here to switch off.

Who else sees it

Nothing is sold and nothing is shared for anyone's marketing. Three parties see anything at all. The company that hosts the site stores the data on Custom Hospitality's behalf and may not use it for its own purposes. Carmen's email provider holds the reply, because from the moment she writes back the thread also sits in an ordinary mailbox, exactly as it would had you emailed her directly. And Google serves the two typefaces, so your browser asks Google for them and Google sees the IP address making that request; a content blocker stops it and the site falls back to a standard face.

Enquiries are stored inside the European Economic Area. The font request is the one thing that may travel further, since Google operates worldwide; it relies on the EU to US Data Privacy Framework, which the European Commission recognises as adequate. Nothing you type is part of it.

Links to cruise lines, events and LinkedIn are ordinary links with nothing embedded, so those companies know nothing until you follow one. After that you are under their privacy practices. Information may also be disclosed where the law requires it.

What never happens

No decision here is made by a machine. There is no scoring, no ranking of enquiries and no profiling, so the right not to be subject to an automated decision has nothing to bite on. There is no session recording, heat mapping or third party script running in the background. This site is aimed at the people who run hospitality operations, is not directed at children, and knowingly collects nothing from anyone under sixteen.

Your rights, and how to ask

Where anything about you is held, which in practice means an enquiry you sent, you can ask to see it, correct it, delete it, restrict or object to its use, or receive a copy to take elsewhere. Email and you will have an answer within a month, usually much sooner, at no charge. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

The site is served over an encrypted connection, enquiries can only be read after signing in, and repeated wrong passwords are shut out. If personal information were ever exposed, the Autoriteit Persoonsgegevens would be told within seventy two hours, and you directly if the risk to you warranted it. If any of this changes, the page changes with it and the date at the top moves.

Custom Hospitality