Effective Date: July 1, 2023
1. Data Collection and Use
1.1. Personal Data
When you make a reservation through the Service, we collect certain personal data that is necessary to process and manage your reservation. The types of personal data we may collect include:
- Full name
- Contact information (e.g., email address, phone number)
- Payment information
- Reservation details (e.g., check-in/check-out dates, room preferences)
- Special requests or preferences
1.2. Purpose of Data Processing
We process your personal data for the following purposes:
- To process and manage your reservation
- To communicate with you regarding your reservation and provide relevant information
- To facilitate payment processing and complete transactions
- To send you reservation confirmations, updates, and related notifications
- To respond to your inquiries and provide customer support
- To comply with legal obligations or enforce our rights
1.3. Lawful Basis for Processing
We process your personal data based on the following lawful bases:
- The processing is necessary for the performance of a contract with you or for taking steps at your request prior to entering into a contract (e.g., processing your reservation and providing related services).
- The processing is necessary for compliance with a legal obligation (e.g., tax or accounting requirements).
- The processing is based on your consent, which you may withdraw at any time (e.g., for receiving marketing communications, if applicable).
1.4. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.
2. Sharing of Personal Data
2.1. Service Providers
We may share your personal data with trusted service providers who assist us in providing the Service, such as payment processors, customer support providers, and IT service providers. These third parties are authorized to process your personal data only as necessary for the provision of their services and are required to maintain the confidentiality and security of your personal data.
2.2. Compliance with Law
We may disclose your personal data if required by law or in response to valid requests by public authorities (e.g., government or law enforcement agencies).
2.3. Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred or disclosed as part of the transaction. We will notify you via email or a prominent notice on our website of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.
3. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or your country of residence. We will take appropriate safeguards to ensure that your personal data is adequately protected in accordance with applicable data protection laws. This may include implementing standard contractual clauses approved by the European Commission or relying on the Privacy Shield framework for transfers to the United States, where applicable.
4. Data Subject Rights
4.1. Access, Rectification, and Erasure
You have the right to request access to the personal data we hold about you, to request rectification of any inaccurate or incomplete data, and to request the erasure of your personal data under certain circumstances.
4.2. Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit such data to another data controller, where technically feasible.
4.3. Withdrawal of Consent
If we process your personal data based on your consent, you have the right to withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4.4. Objection and Restriction
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. You may also request the restriction of processing under certain circumstances.
4.5. Exercising Your Rights
To exercise your data subject rights or if you have any questions or concerns about our data practices, please contact us using the information provided in Section 8 (Contact Information).
5. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security.
6. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to remove the information from our systems.
7. Changes to this Policy
We may update this Policy from time to time. We will notify you of any material changes by posting the revised Policy on our website or by other means as required by applicable law. We encourage you to review this Policy periodically for the latest information about our data practices.
8. Contact Information
If you have any questions, concerns, or requests regarding this Policy or our data practices, please contact us at firstname.lastname@example.org.