Privacy Policy
Paping Hotel & Spa attaches great importance to the protection of your personal data. In this Privacy Policy we want to provide clear and transparent information about how we handle personal data.
We do everything we can to guarantee your privacy and will therefore handle personal data with care. Paping Hotel & Spa adheres in all cases to the applicable laws and regulations, including the General Data Protection Regulation. This means that we will in any case:
- Process your personal data in accordance with the purpose for which they have been provided, these purposes and types of personal data are described in this Privacy Policy;
- Processing your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
- Asking for your explicit permission if we need it for processing your personal data;
- Have taken appropriate technical and organizational measures to ensure the security of your personal data;
- Do not pass on personal data to other parties, unless this is necessary to fulfill the purposes for which they were provided;
- To be aware of your rights concerning your personal data, to point these out to you and to respect these.
As Paping Hotel & Spa, we are responsible for processing your personal data. If after reading our Privacy Policy, or in a more general sense, you have any questions about it or wish to contact us, you can do so via the contact details at the bottom of this document.
Processing of personal data of customers or suppliers
Personal data of customers or suppliers are processed by Paping Hotel & Spa for the following purpose(s):
- Administrative purposes;
- Communication about the assignment and/or invitations;
- Carrying out or issuing an assignment.
Basis for these personal data is:
- The agreed assignment;
For the above purpose(s) Paping Hotel & Spa may request the following personal data from you:
- Name, address, place of residence, telephone number, e-mail address, gender, relevant medical data, bank account number (suppliers)
Your personal data will be stored by Paping Hotel & Spa for the purpose of the aforementioned processing(s) for the period:
- For the duration of the agreement and thereafter only in the administration for up to 7 years.
Processing of personal data of newsletter subscribers
Personal data of newsletter subscribers are processed by Paping Hotel & Spa for the following purpose(s):
- Informing the person by means of news announcements.
Basis for these personal data is:
- The subscription form Newsletter;
For the above purpose(s) Paping Hotel & Spa may request the following personal data from you:
- Name, e-mail address
Your personal data will be stored by Paping Hotel & Spa for the purpose of the aforementioned processing(s) for the period:
- For the period that you are registered.
Processing of personal data of prospect, stakeholder/lobby contacts and/or interested parties
Personal data of prospect, stakeholder/lobby contacts and/or interested parties are processed by Paping Hotel & Spa for the following purpose(s):
- Provision of information in the form of newsletters and/or targeted contacts.
Basis for this personal data is:
- Verbal consent, issue of business card and/or via link on LinkedIn;
For the above purpose(s) Paping Hotel & Spa may request the following personal data from you:
- Name, address, place of residence, telephone number, e-mail address.
Your personal data will be stored by Paping Hotel & Spa for the purpose of the aforementioned processing(s) for the period:
- For the period that you are seen as a prospect, stakeholder/lobby contact and/or interested party.
Your personal data will be stored by Paping Hotel & Spa for the purpose of the aforementioned processing(s) for the period:
- For the period that one has a contract and thereafter only in the administration for up to 7 years.
Provision to third parties
We may provide the data you provide to us to third parties as necessary to carry out the purposes described above.
For example, we use a third party for:
- Providing the internet environment of the AVG program;
- Taking care of the administration;
- Providing newsletters and invitations;
We never pass on personal data to other parties with whom we have not concluded a processing agreement. With these parties (processors) we make the necessary agreements to ensure the security of your personal data.
Furthermore, we will not provide your personal data to other parties, unless this is legally required and permitted. An example of this is when the police request (personal) data from us as part of an investigation. In such a case we are obliged to cooperate and hand over this data. We may also share personal data with third parties if you give us written permission to do so.
Within the EU
We do not provide personal data to parties located outside the EU.
Minors
We only process personal data of minors (persons under 16 years of age) if written consent is given by the parent, guardian or legal representative.
Retention period
Paping Hotel & Spa does not retain personal data longer than necessary for the purpose for which it is provided or required by law.
Security
We have taken appropriate technical and organizational measures to protect personal data from unlawful processing, for example, we have taken the following measures;
- All persons who may have access to your data on behalf of Paping Hotel & Spa are bound to secrecy.
- We maintain a username and password policy on all our systems;
- We pseudonymize and ensure the encryption of personal data if warranted;
- We make backups of personal data in order to restore it in case of physical or technical incidents;
- We regularly test and evaluate our measures;
- Our employees are informed about the importance of protecting personal data.
Rights regarding your data
You have the right to inspect, correct or remove the personal data we have received from you. You can also object to the processing of all or part of your personal data by us or one of our processors. You also have the right to have us transfer the data you have provided to us to yourself or on your behalf directly to another party. We may ask you to identify yourself before we can comply with the aforementioned requests.
Should we process your personal data on the basis of a consent given by you, you always have the right to withdraw this consent.
Complaints
If you have a complaint about the processing of your personal data, please contact us immediately. If we cannot work it out with you, we will of course find this very annoying. You always have the right to lodge a complaint with the Personal Data Authority, the supervisory authority in the field of privacy protection.
Questions
If you have any questions or comments about our Privacy Statement, please contact us!