Here you can find helpful tools relating to your personal information. As a company we are committed to the ethical and transparent use of data and giving our customers as much control as we can about how and when their data is being used.
(Official EU wording)
This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.
This Regulation protects fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.
The free movement of personal data within the Union shall be neither restricted nor prohibited for reasons connected with the protection of natural persons with regard to the processing of personal data.
This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.
This Regulation does not apply to the processing of personal data:
a) in the course of an activity which falls outside the scope of Union law;
b) by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;
c) by a natural person in the course of a purely personal or household activity;
d) by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
For the processing of personal data by the Union institutions, bodies, offices and agencies, Regulation (EC) No 45/2001 applies. Regulation (EC) No 45/2001 and other Union legal acts applicable to such processing of personal data shall be adapted to the principles and rules of this Regulation in accordance with Article 98.
This Regulation shall be without prejudice to the application of Directive 2000/31/EC, in particular of the liability rules of intermediary service providers in Articles 12 to 15 of that Directive.
This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not.
This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:
a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or
b) the monitoring of their behaviour as far as their behaviour takes place within the Union.
This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of public international law.
We follow the general principles of the GDPR when we collect and process your personal data. These are:
Your data is accurate and, where necessary, kept up to date. We take every reasonable step to ensure that inaccurate data, having regard to the purposes for which they are processed, are erased or rectified without delay.
The data we collect will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (this is called ‘data minimisation’);
We process personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Your personal data will be processed lawfully, fairly and in a transparent manner in relation to you;
Your data is collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
Your data will be kept in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data are processed.
We process personal data on the following basis:
We will use your email address to email you your booking confirmation and other related information regarding your booking or cancellations, you may receive email prior to your arrival, while on-site or immanently after your departure. You have given us consent to process your personal data.
We need to comply with certain legal obligations.
It is necessary to for the purpose of our legitimate interests or a third party (except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child).
If you would like to request changes, removal or access to your personal data, please contact us via email: firstname.lastname@example.org
Please provide your current contact information (both to validate your identity and discuss your request if we need to) and how we can help.
Where the basis for our processing is in our own legitimate interests or the public interest, you have the right to object to us processing your data. We have to stop processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or we need the data in order to establish, exercise or defend legal rights. Your rights under the current ePrivacy Directive are not affected.
You have the right NOT to be evaluated solely on the basis of automated processing of your personal data.
You have the right to object to us processing your data for direct marketing, including profiling.
You have the right to object under Art 21(6) & 83(1) if we are processing your data for scientific, historical research or statistical purposes.
These are the recipients of personal data that we work with.
If we send out large email campaigns, we use Mailchimp. For paying contractors we will need to input their bank details into our bank website, to make the payments, their bank details are stored on the bank's portal.
We do not profile to predict your performance at work, economic situation, health, personal preferences, reliability, behaviour, location or movements. We may use automated profiling where we have proper safeguards in place, where it's authorised by law, where you've already told us we can or where it's necessary for the performance of a contract.