28 September 2026
This statement explains which personal data we process about you, why we do so, with whom we share it, and what rights you have. A short summary comes first, followed by the full text.
Coral Estate Rentals is a trade name of Coral Estate Services N.V., Curaçao.
The main points, in plain language. Everything is set out in full below.
WHO WE ARE – Coral Estate Services N.V. in Curaçao, which rents out properties under the name Coral Estate Rentals. We determine what happens with your data and are responsible for it.
WHAT WE COLLECT – Your name and contact details, date of birth, booking details and payment details, and data about your visit to our website. Beyond that, only what you tell us yourself, for example a dietary requirement or your arrival time.
WHY – To arrange your booking and make your stay run smoothly, to keep our accounts and file our tax returns, and, if you choose to receive it, to send you our newsletter with promotions.
WHO WE SHARE IT WITH – With parties that are needed to make your stay possible, such as our reservation system (Guesty), our payment provider (Stripe), the owner of your accommodation and the resort. We never sell your data.
OUTSIDE EUROPE – We are based in Curaçao, outside the European Economic Area. Your data is processed outside the EEA.
HOW LONG – We keep booking and invoice data for 10 years, as required by tax law. For the newsletter: until you unsubscribe.
YOUR RIGHTS – You may request access to the data we hold about you, have it corrected or deleted, and object to its processing. Email info@coralestaterentals.com.
COOKIES – We always place necessary cookies. Analytical and marketing cookies are placed only if you give your consent. You can change your choice at any time.
NOT SATISFIED? – Please let us know first; we will always find a solution. You can also lodge a complaint with the data protection authority in your own country.
This summary is an aid only. The full text below is what applies.
Coral Estate Rentals is a trade name of Coral Estate Services N.V., established at Rif St. Marie z/n, La Puerta Business Centre, St. Willibrordus, Curaçao. We are the controller for the personal data described in this statement.
This statement applies to our websites, to bookings you make with us directly or via a booking platform, to your stay in one of our accommodations, and to all contact you have with us. It does not apply to the websites and services of other organisations that we link to; their own privacy statements apply to those.
Because our websites actively target guests in the European Economic Area, the General Data Protection Regulation (GDPR) applies to those guests. In addition, as a Curaçao company, we are subject to the National Ordinance on the Protection of Personal Data (Landsverordening bescherming persoonsgegevens).
Data you give us yourself
Data we receive from others
If you book via a platform such as Booking.com, Airbnb, Expedia, Marriott or Vrbo, we receive your booking and contact details from that platform. We use this data for the same purposes as for a direct booking. For what data the platform itself processes about you and why, please read that platform's privacy statement.
Data generated automatically
We do not ask for special categories of personal data, such as data about your health, religion or origin. If you voluntarily tell us something in that category – for example an allergy or a disability we should take into account – we use it solely to ensure your stay runs smoothly and for no other purpose.
We process your data only for the purposes below, in each case on the GDPR legal basis stated.
Where we process data on the basis of a legitimate interest, we have first weighed whether your privacy outweighs that interest. You may object to such processing – see article 9.
We do not sell your data and share it only when necessary. We do so with the following parties.
Parties that work for us
These parties process your data on our behalf and may not use it for their own purposes. We have concluded a data processing agreement with each of them.
Parties that are independently responsible
These parties decide for themselves what they do with your data. Their own privacy statements apply.
We are based in Curaçao. Your data is therefore processed outside the European Economic Area, in a country for which the European Commission has not adopted an adequacy decision. Some of our suppliers also process data outside the EEA.
We do not keep your data longer than necessary for the purpose for which we received it, or for as long as the law requires.
A cookie is a small file stored on your device when you visit. We use three types.
If you click a social media button, the relevant platform may place its own cookies. That platform's privacy statement applies to them.
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include encrypted connections, access to data only for employees who need it, and agreements with our suppliers about their security.
Do you think your data is not properly secured, or do you see signs of misuse? Please let us know immediately at info@coralestaterentals.com.
You have the following rights. You do not have to give a reason, and it costs you nothing.
Send your request to info@coralestaterentals.com. We will respond within one month. If your request is complex, we may extend that period by two months; we will then inform you within the first month. To avoid giving data to the wrong person, we may ask you to prove your identity.
We use tools based on artificial intelligence (AI) in the following places.
If you disagree with how we handle your data, please let us know first at info@coralestaterentals.com. We would be glad to resolve it with you ourselves.
You also always have the right to lodge a complaint with a supervisory authority: the authority in the country where you live or work – in the Netherlands the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) – or the supervisory authority in Curaçao.
We may amend this statement, for example if we offer new services or start using other suppliers. The current version is always available on our website, with the date of the last change at the top.