Privacy Policy
Last updated: 28 June 2026
Allinclusive.eu ("we", "us") respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and what rights you have.
Allinclusive.eu is an informational guide to all-inclusive resorts in Europe. You cannot book with us; we refer you via affiliate links to providers, where the booking takes place.
1. Data controller
The controller is Allinclusive.eu, established at Frankhuizerallee 182, Zwolle (company reg. no. 93630751), reachable at allin@allinclusive.eu.
2. What data we collect
We only collect what is necessary:
- Automatically: shortened IP address, browser and device type, pages visited and referring site (via server logs and cookies).
- Data you provide yourself: your email address if you subscribe to the newsletter, and your name and message if you contact us.
3. Purposes and legal bases
- Displaying and securing the website — legitimate interest.
- Statistics and site improvement — consent or legitimate interest.
- Sending the newsletter — your consent.
- Measuring affiliate bookings — consent.
- Answering your query — legitimate interest.
4. Cookies
Cookies are small files stored on your device. We use three categories:
- Necessary/functional: required for the site to work (e.g. language choice and security).
- Analytical: to understand how the site is used.
- Affiliate/marketing: from our partners, to attribute a booking made via an affiliate link.
5. Affiliate links
Our site contains affiliate links. If you click one, you are redirected to an external provider that may set its own cookies to attribute a possible booking to us (for which we receive a commission). We do not share personal data with these partners ourselves; their own privacy policy applies on their sites.
6. Sharing with third parties
We do not sell your data. We use processors (such as hosting and CDN providers) who act solely on our instructions under a data processing agreement.
7. Transfers outside the EEA
Some providers (such as our CDN and security partner Cloudflare) may process data outside the European Economic Area. This is done with appropriate safeguards, such as the EU Standard Contractual Clauses.
8. Retention periods
We do not keep data longer than necessary: technical logs briefly, newsletter data until you unsubscribe, and contact messages until your query is resolved.
9. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS).
10. Your rights
You have the right to:
- access, rectify and erase your data;
- restrict and object to the processing;
- data portability;
- withdraw your consent.
11. Complaints
Send your request to allin@allinclusive.eu. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
12. Changes
We may update this privacy policy. The current version is always on this page, with the date of the last change.
This text is a general template for an affiliate website and not legal advice. Have the text reviewed by a lawyer before final publication.