Staycity Privacy Notice
updated: 31.08.2023
Welcome to Staycity Group Privacy Policy
We are committed to protecting your personal data and we look after your data whenever you provide it to us. Your personal data is collected and processed when you request information, contact us (or we contact you), when you make a reservation, use our website, our mobile application, use our kiosks, click a link to or from our website, connect with us via social media, or phone us through our contact centre or hotels, or any other engagement we have with you.
Who we Are & Contact Details
This Privacy Policy is issued by Staycity Group on behalf of the group and its subsidiaries. Staycity Ltd is the data controller and this policy applies to the relevant individual subsidiaries that act as data processors (eg a specific hotel you are staying in that is part of the group).
For any data protection and privacy concerns you can contact:
Legal entity: Staycity Ltd (Ireland) Address: Mission Hall, 11 Mill street, Dublin 8, Dublin
Data Privacy Manager: Paolo Dona – Email: [email protected]
Data Protection Officer: BH Consulting – Email: [email protected]
What information do we collect?
|
Purpose/Activity of processing personal data |
Type of Data |
Legal Basis of processing |
Retention |
|
Hotel Reservations and Bookings |
Contact Details such as Name, Email Address, Identification Information, Payment Information In certain countries to comply with local regulations we collect national ID cards or passport information (number, date and country of issue, expiry date and a photo scan of it) |
Legal Obligation Contract |
5 years |
|
Personalized Guest Experience |
Preferences, Special Requests, Feedback, Reviews, Surveys |
Legitimate interest |
3 years |
|
Communication with Guests |
billing address, home address, email address and telephone numbers. Communications history |
Performance of contract, to which you are party
|
5 years |
|
Handling Inquiries and Complaints |
Name, email address, mobile phone number
|
Legitimate interest |
5 years |
|
To process your payments and manage any refunds. |
Credit card details |
Performance of contract, to which you are party |
Not held; removed after used |
|
Marketing and Promotions |
Email Address, Marketing Preferences |
*Consent , Legitimate interest |
5 years |
|
CCTV Surveillance |
Images of individuals |
Legitimate interest |
30 days |
|
Staycity Online Services |
Browsing Behaviour (tracked via cookies or other means) |
*Consent |
6 months |
|
To process job applications from candidates for employment within Staycity |
Resume/CV, Employment History, Contact Details |
Legitimate interest prior to entering into a contract |
1 year |
|
To join our Stay Sweet Loyalty Club |
first name, last name and email address. |
*Consent |
For the membership lifetime |
Legal Basis
*Where consent is used as the lawful basis you have a right to withdraw it., this can be done by contacting [email protected].
How We Collect Your Personal Data
We may collect your personal data in the following ways:
- Directly from you when you make a reservation or communicate with us via phone, email, or in person;
- From third-party booking platforms when you make a reservation;
- From third-party providers of analytical tools and advertising networks;
How do we protect your information?
We implement a variety of security measures to maintain the safety of your personal information when you access our site. Your privacy and the security of your information is of vital importance to us. You are welcome to discuss with us any element of our site or our privacy statement should you wish to. Security measures to protect your data may include SSL protected URLs, encryption and secure data centres.
How We Share Your Personal Data
We may share your personal data with the following recipients:
- Our group companies, for administrative and business purposes;
- Our third-party service providers, such as payment processors, IT providers, and marketing agencies;
- Our business partners, such as loyalty programs, marketing purposes.
International Data Transfers
Some of the third parties that we may disclose your personal data to are based outside the EEA, so their processing of your personal data will involve a transfer of your personal data out with the EEA. Whenever we transfer your personal data out with the EEA, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the EU.
- Where we use certain service providers, we may use specific contracts or EU model clauses.
- Where we use providers based in the US, we may transfer data to them if there are secure standard contract clauses in place under GDPR which requires them to provide similar protection to personal data shared between the EU and the US.
Your Rights
You have the following rights in relation to your personal data:
- Right of access: You have the right to request access to your personal data and to receive a copy of it.
- Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure: You have the right to request the deletion of your personal data in certain circumstances, such as if it is no longer necessary for the purposes for which it was collected.
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as if you contest the accuracy of the data.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to object: You have the right to object to the processing of your personal data in certain circumstances, such as if the processing is based on our legitimate interests.
- Right to Withdraw Consent: If the processing of personal data is based on consent, data subjects have the right to withdraw their consent at any time.
- Right to Automated Decision-Making: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling,
Staycity continually strive to ensure that the information we hold provides the most benefit to you, our visitors. If you wish to avail of the enhanced rights of a data subject within the EU (restriction of processing, objection to processing, review of automated decisions, opting out, complaints, right to be erased, right to request or update information or right to portability), you may do so at any time by contacting us at [email protected].
Cookies and other technologies
The staycity.com domains uses “cookies” and may from time to time use other technologies such as pixel tags to monitor visitor information. These technologies help us better understand our visitors, typical user behaviour, tell us which parts of our website people have visited, and facilitate and measure the effectiveness of our website. We continually update our site based on this information to ensure we provide the best possible experience for our users.
We use this information to understand and analyse trends, to administer the site, to learn about user behaviour on the site, and to gather demographic information about our user base. We may use this information in our marketing and advertising services to improve our services for those using our site. Users are free to reject cookies from our site using our cookies preferences application. Depending on your preferences there might be the loss of some functionality on Staycity websites, but it is an option open to all users.
To reset your “Cookie Settings” click here.
Terms and Conditions
Please visit our terms and conditions section establishing the use, disclaimers and limitations of liability governing the use of our website.
Right to Lodge a Complaint
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA, you have the right to lodge a complaint with the Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Or email [email protected]
You can also contact the Information Commissioners Office in the Uk @ [email protected].
Updates to the Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website, and we encourage you to review the policy periodically.
Contacting Us
To exercise your rights, please contact us at [email protected]. We may require additional information from you to verify your identity and to process your request. If we are unable to comply with your request, we will explain the reasons for our inability to do so. You also have the right to lodge a complaint with the supervisory authority if you believe that your rights have been infringed.