{"id":7748,"date":"2024-02-15T01:02:26","date_gmt":"2024-02-14T19:32:26","guid":{"rendered":"https:\/\/medusabungalow.com\/?page_id=7748"},"modified":"2026-09-03T06:14:56","modified_gmt":"2026-09-03T00:44:56","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/medusabungalow.com\/de\/privacy-policy\/","title":{"rendered":"Privacy notice"},"content":{"rendered":"
Deutsche Fassung:<\/strong> Die verbindliche deutsche Fassung dieses Dokuments finden Sie unter Datenschutzerkl\u00e4rung<\/a>.
German version: the binding German text of this document is at Privacy notice (German)<\/a>.<\/span><\/div>\n

Privacy notice<\/h1>\n

Last updated 3 September 2026<\/p>\n

This notice explains what we do with your personal information when you book a stay, send us an enquiry, or use medusabungalow.com. It describes what actually happens \u2014 not a template.<\/p>\n

Who is responsible<\/h2>\n

Hasitha Dias, sole proprietor trading as Medusa Bungalow
Business registration no. 1\/16\/85\/2021-03-08\/59
Akmeemana, Galle, Sri Lanka
bungalowmedusa@gmail.com<\/a> \u00b7 +94 77 770 5398<\/p>\n

What we collect, and why<\/h2>\n

When you book.<\/strong> Your name, email address, the number of guests, your arrival and departure dates, any extras you choose, the currency you pay in, and the date and time you accepted our cancellation policy. We need all of it to hold the villa for you and to prove what was agreed. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/em><\/p>\n

When you send an enquiry.<\/strong> Your name, email address, your message, your phone number if you give one, and the dates you asked about. Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).<\/em><\/p>\n

When you pay.<\/strong> Card payments are handled by Sampath Bank<\/strong> on the bank’s own secure page. We never see your card number, and it is never stored on our systems.<\/strong> What we keep is the amount, the currency, whether the payment was approved or declined, and the bank’s transaction reference \u2014 enough to match a payment to a booking and to refund you if you cancel. Legal basis: performance of a contract, and our legal obligation to keep accounting records (Art. 6(1)(b) and (c) GDPR).<\/em><\/p>\n

When we write to you.<\/strong> We send booking confirmations, cancellation notices and replies to enquiries by email, through Google’s mail service. If you message us on WhatsApp we reply there, using the WhatsApp Business platform operated by Meta. We also read booking-notification emails sent to us by Airbnb and Booking.com so that reservations made there appear in our calendar.<\/p>\n

When you visit the website.<\/strong> Our hosting provider records ordinary server logs, including your IP address, for security and to keep the site working. We limit how often a single address can submit the booking form, to prevent abuse. Legal basis: our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).<\/em><\/p>\n

Cookies and tracking<\/h2>\n

This website sets no cookies on your device, and we use no analytics or advertising trackers.<\/strong> There is nothing here to consent to and nothing to opt out of. Two small exceptions, for accuracy:<\/p>\n