What lawful basis do we rely on for processing your personal data?
Under data protection laws we must have a legal basis under which we process your data. When we collect and use your information, we do so under one of the following:
- Processing necessary for the performance of a contract (GDPR Art 6 (1)(b));
- Where you have given us your consent (GDPR Art 6 (1)(a));
- Processing is necessary for compliance with a legal obligation to which we are subject (Art 6(1)(c)); and
- Processing for legitimate interest (Art 6(1)(f).
Performance of a contract means processing your data where it is necessary for the performance of a contract to which you are a party, such as entering into a contract with us to receive hotel accommodation services, or to take steps at your request before entering into such a contract.
Where you have given consent can be relied on by us as a legal basis for processing where your consent has been freely given, is unambiguous and clear (i.e. you have actively opted into a service we provide by ticking a box). If you provide us with your consent to process your data at any point on our website, or in connection with the hotel services we provide to you, you can withdraw it at any time, and we will stop all processing activities that were based on your consent as a legal basis for processing. Please note that we may still process the data if we have another lawful basis for processing (in most cases this will be for a more limited purpose such as to record a withdrawal).
Compliance with a legal obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to, such as anti-money laundering legislation.
Processing for legitimate interests means conducting and managing our business to enable us to give you the best service and to promote and grow our business. We make sure that we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We will not use your personal data for activities unless we have a compelling interest which is not overridden by the impact on you (unless we have your consent or are otherwise permitted or required to by law).
Where we need to collect your personal data due to a legal or regulatory obligation, or in relation to the performance of a contract, and you do not provide that data when requested, we may not be able to perform the contract that we have or are trying to enter into with you (for example, to provide you with hotel accommodation services). We will notify you of this at the time.