Privacy Policy with regards to The General Data Protection Regulation

Transcription

1 Privacy Plicy with regards t The General Data Prtectin Regulatin Created May

2 Plicy Statement We take yur privacy seriusly and understand that yu trust us use and stre yur persnal identifiable infrmatin (PII) in a respnsible manner. This Privacy Plicy (The Plicy) sets ut hw we will handle yur persnal data securely and in accrdance with yur rights. Westprt Hspitality Partnership including the Tayside Htel and the Athll Inn (tgether referred t as we, us, ur ) are registered data cntrllers under the terms f the General Data Prtectin Regulatin (GDPR). Details f ur ntificatins t the data prtectin regulatr may be fund in the Infrmatin Cmmissiner s Office Public Register f Data Cntrllers at ic.gv.uk. Our business addresses are: Tayside Htel, Mill Street, Stanley, Perthshire, PH1 4NL The Athll Inn, Main St, Bankft, PH1 4AA Our Data Prtectin Officer is: Neil Hardy (Partner) General Infrmatin This Privacy Plicy explains what infrmatin we cllect abut yu when yu visit ur website and/r when yu make a reservatin with us and hw we handle yur infrmatin t ensure that we prtect yur rights. Please read this Privacy Plicy carefully t understand hw we will treat yur persnal data. In this Plicy, references t yu r yur shall mean yu as a user f r (ur sites) and/r as a user f ur accmmdatin and/r dining, bar r functin services (ur services). This Privacy Plicy shuld be read tgether with ur terms and cnditins. By using ur site and/r using ur services, yu will be regarded as having accepted the terms f this Plicy. Yu shuld nt use ur site and/r ur services if yu d nt agree t the terms f this Plicy. What infrmatin d we cllect? When yu register t use ur services we may ask yu t prvide certain persnal infrmatin including yur full name, pstal and address, cntact number(s) and payment details. When yu visit ur site we may als cllect infrmatin n an nging basis thrugh Ggle Analytics, by use f ckies, abut what pages yu access r visit, and infrmatin abut yur use f ur site, fr example the pages viewed, the website frm which yu came t visit ur site. What d we use yur infrmatin fr? We may use yur infrmatin fr the fllwing purpses: in the nrmal curse f ur business, t allw us t register yu t use ur services and t prvide yu with ur services n the basis that prcessing is necessary in rder t perfrm ur cntract with yu t prvide ur services; t allw us t manage yur reservatin n the basis that prcessing is necessary in rder t perfrm ur cntract with yu t prvide ur services; we manage ur bkings using a clud based system called LittleHtelier. This is perated by an internatinal cmpany called Siteminder. Yu can read their GDPR Privacy Plicy at t stre yur data n ur website t aut cmplete fields t make it easier fr yu t prvide infrmatin when yu return t ur sites; 2

3 t validate yur infrmatin (and, in sme cases, match it against infrmatin that has been cllected by a third party) t check that the data we hld abut ur custmers/users is accurate, cnsistent and up t date n the basis that prcessing is necessary in rder t perfrm ur cntract with yu t prvide ur services; in pursuit f ur legitimate interests, t recrd CCTV ftage t ensure the safety and security f ur premises, staff and custmers; t cmply with any legal bligatins t which we are subject; and We shall peridically check that the persnal data we stre fr yu is accurate. If yu wuld like t update the persnal data we hld abut yu, please cntact ur Data Prtectin Officer n neil@taysidehtel.c.uk with yur request. The prvisin f certain persnal infrmatin is mandatry if yu are t use ur services. If yu fail t prvide such data we shall be unable t prvide ur services. Wh d we share yur infrmatin with? As part f using ur services, yu cnsent t us sharing yur persnal infrmatin with the fllwing parties: ur agents, ther service prviders and third party partners, wh prcess and stre data n ur behalf; we manage ur bkings using a clud based system called LittleHtelier. This is perated by an internatinal cmpany called Siteminder. Yu can read their GDPR Privacy Plicy at Bking channels (ie bking.cm, htels.cm) als cllect data frm yu, thrugh their wn systems and websites, t place reservatins with us. Yu shuld make yurself aware f the GDPR Privacy Plicy f any site thrugh which yu chse t make a reservatin with us. prfessinal advisrs; such as ur accuntants, lawyers, etc) law enfrcement agencies; including HMRC, the Plice, etc any member f ur Partnership, which means The Tayside Htel and The Athll Inn and ther cmpanies and/r businesses which may be added t ur grup. We may als share yur persnal infrmatin with third parties: in the event that we, ur business, r substantially all f its assets are acquired by a third party in which case persnal infrmatin abut custmers will be ne f the transferred assets; if we are under a duty t disclse r share yur persnal data in rder t cmply with any legal bligatin, r in rder t enfrce r apply any cntract with yu; r t prtect ur rights, prperty, r safety f ur emplyees, custmers, r thers. This includes exchanging infrmatin with ther cmpanies and rganisatins fr the purpses f fraud prtectin and credit risk reductin. We may transfer yur persnal data utside f the Eurpean Ecnmic Area (EEA). We shall ensure that any such transfers are lawful and that yur infrmatin is kept secure in accrdance with the GDPR. Hw lng d we stre yur persnal data fr? We nly stre yur persnal infrmatin fr as lng as necessary fr the purpses listed abve under what d we use yur infrmatin fr?. 3

4 What are yur rights? Access t yur persnal data: Yu may request access t a cpy f yur persnal data. Right t withdraw: Where yu have given yur cnsent fr us t use yur persnal data, yu may withdraw yur cnsent at any time. Please cntact us using the details lcated at the ft f this Plicy if yu wuld like t withdraw yur cnsent and we will delete yur data in line with yur right t erasure belw. Rectificatin: Yu may ask us t rectify inaccurate infrmatin held abut yu. If yu wuld like t update the data we hld abut yu, please cntact us using the details at the ft f this Plicy and prvide the updated infrmatin. Erasure: Yu may ask us t delete yur persnal data. If yu wuld like us t delete the persnal data we hld abut yu, please cntact us using the details at the ft f this Plicy, specifying why yu wuld like us t delete yur persnal data. Prtability: Yu may ask us t prvide yu with the persnal infrmatin that we hld abut yu in a structured, cmmnly used, machine readable frm, r ask fr us t send such persnal data t anther data cntrller. Right t bject: Yu may bject t ur prcessing f yur persnal data pursuant t this Privacy Plicy. Please cntact us using the details at the ft f this Plicy, prviding details f yur bjectin. Make a cmplaint: Yu may make a cmplaint abut ur data prcessing activities t a supervisry authrity, fr the UK this is the Infrmatin Cmmissiner s Office, at T make enquires and/r t exercise any f yur rights in this Privacy Plicy please cntact us using the details at the ft f this Plicy. Ckies plicy Ckies are small files saved t yur cmputer s hard drive that track, save and stre infrmatin as well as yur interactins and usage f ur website. The primary purpse fr cllectin f data frm users t ur site is t allw us t prvide a smth efficient and persnalised experience while using ur site. Where applicable this website uses a ckie cntrl system allwing yu n yur first visit t the website t allw r disallw the use f ckies n yur cmputer/device. Yu are advised that if yu d nt cnsent t the use and saving f ckies frm this website n t yur cmputer hard drive then yu shuld take necessary steps within yur web brwser security settings t blck all ckies frm this website and its external serving vendrs. Our website uses ckies sftware prvided by Ggle Analytics t mnitr visitr usage t better understand hw the website is used. The sftware will save a ckie t yur cmputer hard drive in rder t track and mnitr yur engagement and usage f ur website, but will nt stre, save r cllect persnal identifiable infrmatin. If yu wuld like t read Ggle s privacy plicy please search fr Ggle Analytics Privacy Plicy Other ckies may be stred n yur cmputer hard drive by external vendrs when this website uses referral prgrams, spnsred links r adverts. Such ckies are used fr cnversin and referral tracking and typically expire after 30 days, thugh sme may take lnger. It shuld be nted that n persnal identifiable infrmatin is stred, saved r cllected. Security and Data Strage We will treat all f yur infrmatin in strict cnfidence and we will endeavur t take all reasnable steps t keep yur persnal infrmatin secure nce it has been transferred t ur systems. We adpt apprpriate data cllectin, strage and prcessing practices and security measures t prtect against unauthrised access, alteratin, disclsure r destructin f yur persnal infrmatin, and data stred n the website and assciated database. 4

5 Please nte that the internet is nt a secure medium and it is nt pssible t guarantee t 100% the security f any data yu disclse nline. Yu shuld accept the inherent security risks f prviding infrmatin via the internet and make an infrmed decisin as t whether yu feel safe ding s. Third Party Websites Our website may, frm time t time, cntain links t and frm the websites f ur partner netwrks, advertisers and affiliates. If yu fllw a link t any f these websites, please nte that these websites have their wn privacy plicies and that we d nt accept any respnsibility r liability fr these plicies. Please check these plicies befre yu submit any persnal data t these websites. Changes t this Privacy Plicy We may mdify this Privacy Plicy frm time t time, s please review it regularly. If we change this Privacy Plicy we shall ntify yu by means f ntice n ur site hmepage. This Privacy Plicy was last amended n 23 May Cntact If yu have any queries relating t this Privacy Plicy r ur use f yur persnal data, please cntact ur Data Prtectin Officer via neil@taysidehtel.c.uk 5