Arenal Hills (referred to as “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and disclose your personal data when you visit our website or use our services.
We use your Personal Information for providing and improving our services. By using our services, you agree to the collection and use of information in accordance with this policy.
We will not use or share your information with anyone except as described in this Privacy Policy.
Information Collected:
We may collect and process the following personal data from you:
- Contact Information: We may collect your name, email address, phone number, and city when you contact us or request information.
- Booking Information: We may collect your booking information including your name, email address, phone number, and payment information when you book a stay at Arenal Hills.
- Usage Information: We may collect information about your use of our website including your IP address, browser type, device type, pages viewed, and time spent on the website.
- Cookies: We may use cookies to collect information about your preferences, website usage patterns, and user interactions with our website.
Use of cookies
We use ‘cookies’ to collect information about you and your activity across our site.
Cookies are small data files that websites store on a user’s computer or device. They are used to remember the user’s preferences and settings, such as login information or language preferences, and to track their activity on the website.
Use of Information:
We use the information collected to:
- Provide our services to you and improve our performance.
- Respond to your queries, requests, and feedback.
- Analyze user behavior and usage patterns to improve our services.
- Protect against fraudulent or illegal activities.
- Comply with legal requirements.
Sharing of Information:
We do not sell or rent your personal data to third parties. We may share your personal data with service providers who help us provide our services, such as payment processors and website hosting companies. We ensure that any service provider that we work with is GDPR compliant and has appropriate security measures in place.
LOG DATA
Log data refers to information that is automatically collected and stored by a computer or server when a user accesses a website or online service. When you visit our website, our servers may automatically log the standard data provided by your web browser that is used for technical and analytical purposes, such as monitoring website performance, identifying and fixing errors, and analyzing user behavior to improve the user experience. It can also be used for security and compliance purposes, such as identifying and preventing fraudulent activity or ensuring regulatory compliance.
Data Security:
We take appropriate measures to ensure the security of your personal data. We have implemented technical and organizational measures to prevent the unauthorized disclosure, access, or misuse of your personal data. We regularly review and update our security measures to ensure that they remain effective.
Security of your personal information
While we will take commercially acceptable measures to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification of your data, we advise that no method of electronic transmission or storage is 100% secure and absolute data security cannot be guaranteed. You are responsible for selecting strong passwords and taking measures to ensure the security and confidentiality of your own information within the bounds of the service.
How Long We Keep Your Personal Information
Personal information collected for account registration may be kept for as long as the account remains active or as required by law, while information collected for marketing purposes may be kept until the user unsubscribes or requests that their information be deleted.
Disclosure of personal information to third parties
We may disclose personal information to:
A parent, subsidiary, or affiliate company for operational or administrative purposes. Third-party service providers to enable them to provide their services, such as IT service providers, data storage, hosting and server providers, ad networks, analytics, and payment systems operators.
Employees, contractors, and related entities for business operations.
Existing or potential agents or business partners for partnerships or collaborations.
The disclosure of personal information to credit reporting agencies, courts, tribunals, and regulatory authorities may be necessary in the event of non-payment or to comply with legal or regulatory requirements. Sharing personal information with third parties to collect and process data may be necessary for analytical or marketing purposes.
Lastly, the disclosure of personal information to an entity that buys or acquires substantially all of the website or online service’s assets and business may be necessary in the event of a sale or transfer of ownership.
Rights and control over your personal information
- Choice: You have the choice to provide your personal information to us or not. However, not providing it may affect your use of our website or the products and services offered.
- Information from third parties: If we receive your personal information from a third party, we will protect it as set out in this privacy policy.
- Marketing permission: You can change your mind and withdraw your consent for us to use your personal information for direct marketing purposes.
- Access: You can request details of the personal information that we hold about you.
- Correction: If you believe any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you can contact us to correct it.
- Non-discrimination: We will not discriminate against you for exercising your rights over your personal information.
- Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.
- Complaints: If you believe we have breached a relevant data protection law and wish to make a complaint, you can contact us, and we will promptly investigate your complaint and respond to you in writing. You also have the right to contact a regulatory body or data protection authority.
- Unsubscribe: You can unsubscribe from our email database or opt-out of communications. We may need to request specific information from you to confirm your identity.
CHILDREN’S PRIVACY
Our Service does not address anyone under the age of 13 (“Children”).
We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.
Changes to Privacy Policy:
We may update this Privacy Policy from time to time. If we make any changes, we will update the Privacy Policy on our website. We encourage you to review the Privacy Policy periodically for any updates.
Contact:
If you have any questions or concerns about this Privacy Policy or our services, please contact us at info@arenalhills.com.