Updated: 03 January 2020
- WE CARE ABOUT YOUR PRIVACY
This notice describes how we,Hotrovel.com("Hotrovel", "we", ), process your personal data that you provide to us when using our website https://www.hotrovel.com (the "Website"). Please read it carefully.
We care about your privacy. We have therefore implemented technical and organizational measures to protect the personal data that you provide to us when using our Website.
- WHICH CATEGORIES OF PERSONAL DATA DO WE COLLECT AND WHY?
2.1 Process Orders Made via our Website
In connection with an order, we collect information regarding your name (first name and last name), e-mail address, telephone number and address. We process the collected information for the purpose of administering your order, including to communicate with you regarding the order (e.g. for support purposes in the event of any issues with the delivery of the items), and to fulfill our contractual obligations in relation to you.
Furthermore, when paying via the Website you need to provide further information, such as debit or credit card information. We use third party payment providers in order to process payments via the Website. The payment providers are data controllers for their own processing of your personal data in order to process payments. If you wish to know how the payment providers will process your personal data, we recommend that you read their data privacy policies here. In short, all data is encrypted and they use the highest possible security PCI standards.
The provision of the categories of personal data outlined above is required in order for us to administrate your order. If you do not provide the required information, we will not be able to process your order.
We keep information regarding your order and transaction, including any support e-mail relating to the order should any issues arise with the delivered products and for accounting purposes.
2.2 Use of the Website and Newsletters
Based on your consent, we may also process personal data, e.g. your name and e-mail address, that you voluntarily provide to us when using the Website in connection with reviewing a product or signing up for our newsletter. Any posted review will be kept until further notice and we will keep sending our newsletter to you until you de-register from future communications from us.
Additionally, we collect visitor statistics, including content and pages visited, referring website and searches made on our Website. We use the data to personalize the online user and shopping experience, and to develop, test and to continuously improve our Website. We do not collect complete IP addresses. Thus, the collected data cannot be connected to or used to identify you.
2.3 Direct Marketing and Surveys
We may process your e-mail address to send direct marketing information to you in order to satisfy our legitimate interest of informing you of offers in relation to our products and services. Based on your consent, we may also process information regarding your order history, order value, payment method used and from which country you accessed our Website in order to send you relevant and tailored offers via e-mail and other similar ways of electronic communication.
You have the right to at any time oppose to our processing of your personal data for direct marketing purposes and de-register from future communications from us, please see contact details below.
Furthermore, we may process your name, e-mail address and order history to carry out customer surveys in order to satisfy our legitimate interest of obtaining further knowledge of how our customers view us and our products and services. The individual results of the surveys is only retained during such period that it takes for us to compile the result on an aggregated level and is thereafter deleted. The aggregated information is retained until further notice.
2.4 Statistics and Business Development
We may process the personal data that you provide to us, including location, purchased product categories and information regarding payment method, when using our Website for statistical purposes, e.g. in order to see how many individuals in a certain age range has purchased our certain product. This statistical information may be used for business development purposes. The processing of your personal data is necessary in order to satisfy our legitimate interest of continuously improving our business and providing new products and services.
- WHO HAS ACCESS TO YOUR PERSONAL DATA?
3.1 Third Party Payment Providers
We use third party payments providers to handle payments via our Website. In order to administrate the order and for the performance of the agreement between you and us, we will disclose information regarding your name, address, order information, and debit or credit card information and devise used for purchase to the third party payment provider. As stated above, the payment providers are data controllers for their own processing of your personal data in order to process payments.
3.2 Delivery and Storage Partners and other Third Party Service Providers
In order to handle orders, we use third party delivery service and storage partners. As such, for the purposes of administering the order and to fulfill our contractual obligations in relation to you we will share your personal data, including your name, address and telephone number in addition to order information with our delivery and storage partners.
Moreover, we may for the purposes outlined above in Section 2 engage additional third party service providers not mentioned in this section, e.g. to carry out customer surveys and to send tailored offers.
The third party service providers that we engage are contractually obligated to only process your personal data in accordance with our strict instructions and may not use your data for their own purposes. Additionally, they are obligated to implement technical and organizational security measures to protect and safeguard your personal data.
3.3 Other Third Parties
Finally, we may process and disclose the personal data that you have provided to other third parties than outlined above in order to fulfill our legitimate interest of complying with applicable law and regulations and lawful regulatory requests or relevant orders from competent courts and public authorities and to establish, exercise and defend legal claims. Additionally, we may disclose your personal data to third parties in case of a merger or a transfer of assets in order to fulfill our legitimate interest of carrying out such merger or transfer of assets.
- WHAT ARE YOUR RIGHTS?
You have the right to request access to the personal data that we store about you. You also have the right to request that incorrect or incomplete personal data is corrected. Furthermore, you have the right, to the extent our processing is based on your consent, to at any time revoke your consent to our processing of your personal data.
Should you have any issues regarding our processing of your personal data, please do not hesitate to contact us. Naturally, you also have the right to lodge a complaint with your local Data Inspection Board should you wish.
As of 25 May 2019, you also have, to the extent applicable data protection laws provide, a right to erasure of personal data, restriction of processing, to object to certain processing and a right to data portability.
The right to data portability covers such personal data that you have provided to us and which we process either based on your consent or in order to fulfill our contractual obligations in relation to you. This typically includes your name, e-mail address, telephone number, address, order information, order history. It may also include any products reviews that you have made on the Website and survey results.
- TRANSFER OF PERSONAL DATA OUTSIDE THE EU/EEA
We use third party delivery and storage partners which are based in hotrovel, Japan and the U.S. As such, your personal data may in connection with a purchase be transferred outside the EU/EEA to countries which do not have the same level of protection for personal data as countries within the EU/EEA. In order to ensure that your personal data is adequately protected, we ensure that there are appropriate safeguards in place by way of data transfer agreements which include standard data protection clauses adopted by the EU Commission.
As of 25 May 2019 you have the right to receive a copy of the clauses by contacting us on the contact details below.
- HOW WILL WE NOTIFY YOU OF CHANGES TO THIS NOTICE?
If you have any questions or concerns about our processing of personal data, please contact us using the following contact details.