Ellinhome

Privacy policy

What data the Demo Rentals site processes, why, and who sees it — briefly and without the padding.

Draft: this text awaits the legal review of the site owner.

1. What we collect

We process only what a booking request needs:

  • guest account data: email address, password (stored as a hash), name and phone if you gave them, interface language;
  • request data: the property, check-in and check-out dates, number of guests, special requests, the fixed price and the status;
  • a review after your stay, if you leave one;
  • technical server logs (address, time and path of a request) for abuse protection and troubleshooting; they are kept for a limited time.

2. Cookies

The site sets one functional cookie, the session identifier, after you sign in to your account. It keeps you signed in, is not readable by scripts (httpOnly) and is removed when you sign out. There are no advertising or analytics cookies. The fact that you closed the cookie notice is kept in your browser’s storage (localStorage) and is not sent to us.

3. Third-party services

The map on the search and property pages loads map images from the OpenStreetMap servers (openstreetmap.org). When the map loads, your browser sends a request to that server, which sees your IP address like any website you open. On phones the map loads only when you tap to show it. See the OpenStreetMap Foundation’s privacy policy for details.

Property photos are stored in an S3-compatible object storage run by our hosting provider; showing a photo makes your browser request it from that storage.

Emails about requests (received, confirmed, declined, cancelled) are sent from our mail server to the address you gave.

4. Who sees your data

Request data is seen by the property manager and the site administrators. We do not sell or share data with third parties for advertising. Data may be processed by technical contractors (hosting, mail server) only to run the site.

5. Newsletters

We send selections and offers only to those who ticked the box at registration. You can opt out at any time by writing to us.

6. Retention

The account and the requests are kept while the account exists. On your request we delete the account and anonymise the requests unless we must keep them longer (for example accounting records).

7. Your rights

You can ask for a copy of your data, have it corrected or deleted, and withdraw your newsletter consent. Write to the address on the Contacts page.

8. Data controller

The name and address of the data controller will appear here after the legal review by the site owner.

Updated: 9 November 2026