Vale Resort Customer Privacy Notice
When you make an enquiry about the services we supply or purchase services from us, you will need to provide us with certain personal data relating to you. Your privacy is extremely important to us so we want you to know exactly how we will use that personal data.
Our full name is Vale Hotel Ltd and we trade as The Vale Resort and we are considered to be the data controller of any personal data you provide to us. This term is a legal phrase used to describe a person or entity that controls the way personal data is used and processed.
When do we collect your personal data?
Frequently asked questions:
1. What information will we hold about you?
As a customer or potential customer of The Vale Resort, we will ask you to provide us with some personal information when you make an enquiry or when you make a booking with us. This information may include:
2. What will we use your information for and what are our legal bases for doing so?
We use the personal information we hold about you for a few different purposes, which we list below. Under data protection law we need to have a valid legal basis for using your personal information, we also set out below the legal bases which we will be relying upon.
Information you give to us
We will use this information:
In these cases the legal basis that we will be relying upon to process your personal information is because it is necessary for the performance of the contract between us.
We will also use the personal information we hold about you for the following reasons:
In this case, our legal basis for processing your personal information will be because the processing is in our legitimate interests, namely, to provide you with a high level of service, resolve issues and to promote our business, or in the case of credit checks to protect our financial position.
We will also use the personal information we hold about you to comply with any regulatory requirements or applicable laws and our legal basis for doing so will be that it is necessary for us to so to comply with legal obligations to which we are subject.
Some of the personal data we request will be required because we have a legal or contractual requirement to obtain and use the information or it is necessary for us to obtain the information to be able to enter into a contract with you. Failure to provide such information will prevent us from providing you with such goods and/or services.
While we do not carry out any automated decision-making or profiling in relation to you directly if you decide to take advantage of one of our finance offers, our finance providers use an automated system to check your credit history and confirm eligibility.
3. Who do we share your information with?
From time to time we will need to share your information with other people and organisations. We will only do so where we have a legitimate legal basis for doing so and in compliance with our obligations under data protection laws.
Your information may be disclosed to other organisations or individuals in the circumstances set out below:
Business Transfers: In the unlikely event that The Vale Resort or substantially all of its assets are acquired, customer information will of course be one of the transferred assets but still subject to the promises made in this Privacy Notice.
We do not transfer any of your personal data outside the European Economic Area unless the organisation we are sharing the data with is either approved by the European Commission as providing adequate protection or there are appropriate safeguards in place in accordance with GDPR.
We review the ways we use your information regularly. In doing so, we may change what kind of information we collect, how we store it, who we share it with and how we act on it. If we make any such changes, and it is relevant to you, we will contact you to notify you.
4. How long do we keep your information for?
To make sure we meet our legal data protection and privacy obligations, we only hold on to your personal data for as long as we actually need it for the purposes, we acquired it for in the first place.
The only exceptions to this are for documents that we may need to rely on in evidence against a future claim against the business; for example, accident forms, which we hold indefinitely. We will retain your contact details for direct marketing purposes unless and until you inform us that you no longer wish to receive direct marketing information from us.
5. How do we protect your personal data
We know how important data security is to all our customers and we always take the utmost care with your data and take all necessary steps to protect it.
All transactional areas of our website use https technology ensuring that your information is safe. You will notice this in the corner of your screen, there will be a padlock showing you our website is secure.
Access to your personal data is password-protected, and sensitive data such as payment card information) is secured and encrypted to ensure it is protected.
We monitor our system for possible vulnerabilities and attacks.
6. Individual rights
Data protection legislation provides individuals with a number of different rights in relation to their data. For example, you have the right to ask us whether we hold information about you and if so, to obtain certain details about that information and/or the information itself. Exercising this right is commonly known as a “subject access request”. Certain exemptions and conditions apply to this right.
There are other rights which you also may be able to exercise such as the right to have inaccurate personal data rectified, to object to the processing of personal data, to require the erasure of personal data or to have the processing of your personal data restricted as well as the right to have electronic data made portable. All these rights are subject to certain conditions and exemptions.
To obtain further information about these rights please see the ICO website - www.ico.gov.uk. If you wish to exercise any of these rights or if you want to advise us of changes to your personal details, you can email us at [email protected] or write to us Privacy Team, Vale Resort, Hensol Park, Hensol, Vale of Glamorgan,CF72 8JY
7. Where to get more information about your data protection rights
The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make relevant information accessible on their website – www.ico.gov.uk. You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue you have with us first. We will always do our very best to solve any problems you may have.
8. Contact us
You are welcome to get in touch with us to discuss your information at any time. Our contact details are here you can email [email protected], or write to us at Privacy Team, Vale Resort, Hensol Park, Hensol, Vale of Glamorgan, CF72 8JY
