Privacy and Personal Data Policy: applicable to users of this hotel website when making a booking.
Data Controller (us): the hospitality business that will provide you, the user, with the requested service. Our identification and contact details are available on the website you used to make your booking / send an enquiry. They will also appear on our bill that we send you.
Data compliance officer: not applicable to data controller activities.
User: you, who completed the booking form or any other related documentation.
Purpose: the purpose of processing the data provided via this form is to manage the bookings made by you, the user, and / or respond to your enquiries / requests.
Lawful basis:
- The need to perform our contract with you, the user, or the need to deal with your enquiry / request before entering into a contract.
- Your consent, as the user, by ticking the 'I accept' box of the Terms and Conditions, of which this Privacy and Personal Data Policy is an integral part
Duration: we will store the data provided by you, the user, for the time necessary to manage your booking and deal with the accommodation services you requested. Once this process has been completed, your data will be retained for six (6) months. If you agree to receive marketing and / or commercial information, your data will be stored until you withdraw your consent.
Third-party data: when you, the user, provide us with personal data belonging to another data subject, you are responsible for fulfilling this process and for obtaining the respective consent of said data subjects for the provision of their data.
Data transfer: we will not transfer personal data to a third country outside the EEA (European Economic Area).
Rights of data subjects: data subjects may exercise their rights of access, rectification and erasure of their data, as well as the right to object to its processing, by sending an email or a letter to the contact addresses on our booking website and on our bills.
Supervisory authority: if a data subject considers that their rights have not been attended, they may also lodge a complaint to the supervisory authority of the Member State in question. Further information: https://ec.europa.eu/ info/law/law-topic/data-protection/data-protection-eu_en