Privacy & Cookies
No lawyer-speak, no 40 pages. Here's what we collect, why we collect it, and how to tell us to stop.
Who we are
Backstage Hotel, Leidsegracht 114, 1016 CT Amsterdam, the Netherlands. We're the ones responsible for the personal data described here — the "controller", in the language of the GDPR.
Questions, requests, complaints: info@backstagehotel.com or +31 20-624 40 44.
What we collect, and why
When you book a room
Our booking engine is run by Mews. Booking a room means giving your name, contact details, stay dates and payment details, which go to Mews and to us. We need them to hold your room, take payment, and check you in — that's a contract, so we don't ask for separate consent. Dutch law also requires hotels to keep a guest register, and tax law requires us to keep invoices for seven years.
When you use the contact form
The form on our Info & Contact page is handled by Formspree, which forwards your name, email and message to info@backstagehotel.com. We use it to answer you, and nothing else. We keep the email as long as it's useful to have the conversation on record.
When you chat with us
The chat widget is provided by Runnr and hands over to WhatsApp. Whatever you type there goes to us, and WhatsApp's own terms apply to the conversation.
When you just visit
Our site is served by Cloudflare, which logs technical data — IP address, browser, which page you asked for — to serve the site and block attacks. That's a legitimate interest and it happens whether you accept cookies or not; it's how any website on the internet works.
Analytics and advertising — only if you say yes
If you accept cookies, we load Google Tag Manager, Google Analytics 4 and Google Ads. We use them to see which pages people read and whether our ads are worth the money. If you decline, these still run in a stripped-down mode that sets no cookies, sends no identifiers and redacts your IP address — so we get anonymous counts and nothing that points at you.
Cookies, specifically
| Cookie | Set by | What for | Needs consent? |
|---|---|---|---|
bsh-consent | Us (stored on your device, never sent anywhere) | Remembers your cookie choice so we stop asking | No |
__cf_bm | Cloudflare | Tells bots and humans apart | No — security |
__AntiforgeryToken | Mews | Stops forged requests in the booking engine | No — security |
_ga, _ga_* | Google Analytics | Counts visits and measures which pages work | Yes |
The Mews and Cloudflare cookies above are set as soon as the booking engine loads on a page, because they're what keeps it working and un-abused. They don't track you around the internet.
Changed your mind?
Withdrawing consent should be as easy as giving it, so here it is — one button. It clears your saved choice and asks again.
You can also clear cookies and site data for this site in your browser, which does the same thing plus a bit more.
Who else sees your data
Only the companies above, only for the job they do for us: Mews (bookings), Formspree (contact form), Runnr (chat), Cloudflare (hosting and security), Google (analytics and ads). We don't sell your data, and we don't share it with anyone for their own marketing.
Google, Cloudflare and Formspree are US companies, so some data is processed outside the EU. Those transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Your rights
You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask us to send it somewhere else. Email info@backstagehotel.com and we'll sort it out — normally well inside the one month the law allows.
If we get it wrong and you'd rather escalate, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Last updated: 8 August 2026.