Privacy Policy
Bosilliac Escape respects your privacy and is committed to protecting your personal information. This privacy notice will inform you as to how we look after your personal information and tell you about your privacy rights and how the law protects you.
​
Please read the following information carefully to understand our views and practices regarding your personal data and how we will treat it.
By visiting www.bosilliacescape.com you are accepting and consenting to the practices described in this policy.
​
For the purposes of the Data Protection Act 1998 (the Act), where we process your personal information on our own behalf, the data controller is Bosilliac Escape, Penwarne Road, Mawnan Smith, Cornwall, TR11 5EN.
​
This Privacy Policy details our commitment to protecting the privacy of individuals who visit our Websites, who make bookings on our Websites or register to access information, products and services which we provide. For the purposes of this Policy, the term, “Websites”, shall refer collectively to www.bosilliacescape.com.
​
Any websites you access via our Websites may have different privacy policies and are not subject to this privacy policy. We recommend that you read the privacy statement of each such website to find out how they protect your personal information.
​
We ask for and may collect personal information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including participation in surveys, contests, promotions, downloading documents, requesting customer support, registering for events or otherwise communicating with us.
Please note that where you make a booking on our Website, we are collecting your personal information. We ask for and may collect personal information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including participation in surveys, contests, promotions, downloading documents, requesting customer support, registering for events or otherwise communicating with us.
This will include:
personal information about you which we ask you for (e.g. your name, address, and email address) when you register to receive a newsletter or download further content or enquire about one of our products and services or when you use a Website generally;
personal information in any surveys which you complete for us;
details of your use of the Websites.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.
​
Use of data
We may use this information to:
- Provide any service offered by us which you choose to use
- For the reservation of a room or service for you
- Pre-complete forms and other details on our Website to make your next visit to our Website easier (eg when amending or cancelling a booking)
- Personalise the content and advertising you will see on our website based on your personal characteristics or preferences
- Notify you of our promotions, relevant new products and services
- Notify you of promotions from members of our group which may be of interest to you (if you opt in to receiving such information)
- Send you newsletters informing you about our offers on independent hotels (if you have registered to receive a newsletter)
- Personalise your access to our Website (where you have registered on our Website)
-Ensure, as far as is practical, that our Website is compatible with the browsers and operating systems used by most of our visitors
- Contact you from time to time to ask for your opinion and suggestions on the services we are offering.
Our legal basis for collecting and using the personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you on our own behalf (where we are data controller) only where: (a) where we need the personal information to perform a contract with you (e.g. to deliver the services you have requested), (b) where we need to comply with a legal or regulatory obligation or (c) in most cases, where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms).
Generally we do not rely on consent as a legal basis for processing your personal information other than in relation to sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
Change of Purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Privacy & Cookie Policy
Cookies
A cookie is a small file which is placed on the user’s hard drive during a visit. This file allows the user to move quickly and easily around our website. It is used to identify returning users and to identify subscribers and registrants (a registrant – and subscriber – will have the cookie linked to their e-mail address as a way of identifying them).
​
We and our authorized partners may use cookies and other information gathering technologies for a variety of purposes. These technologies may provide us with personal information, information about devices and networks you utilize to access our Websites, and other information regarding your interactions with our Websites.
You can delete cookies from your hard drive at any time. Bear in mind, though, that if you delete these cookies, any settings such as your stored username and password will have to be reset when you log in again.
Privacy & Cookie Policy continued....
How Long We Retain Your Personal Information
We will retain your personal information for as long as is needed to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Disclosure of personal information
Where we are the data controller, we will ensure that any disclosure is permitted by applicable data protection laws. We may employ the services of a third party to help us in certain areas such as the provision of a booking engine, website hosting, credit card processing and email delivery. In some cases the third parties may receive your information.
We will require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
We will also disclose your information if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of use, or to protect the rights, property, or safety of Bosilliac Escape, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Where we are data processor, any disclosure will be in accordance with the data controllers instructions.
​
Your Rights
Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. All emails we send will carry a link to unsubscribe. Alternatively you can email us at bookings@bosilliacescape.com
You can also exercise the following rights as laid out by the applicable data protection legislation:
Right of access: you have the right to request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Right to Request correction: you have the right to request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Right of erasure: In certain circumstances, you may have a broader right to erasure of personal information that we hold about you – for example, if it is no longer necessary in relation to the purposes for which it was originally collected. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations.
Right to object to processing: you may have the right to request that Bosilliac Escape stop processing your personal information and/or to stop sending you marketing communications.
Right to restrict processing: you may have the right to request that we restrict processing of your personal information in certain circumstances (for example, where you believe that the personal information we hold about you is inaccurate or unlawfully held).
Right to data portability: In certain circumstances, you may have the right to be provided with your personal information in a structured, machine readable and commonly used format and to request that we transfer the personal information to another data controller without hindrance.
If you would like to exercise such rights, please contact us by emailing privacy@hotelrez.com. You can also view our policy for Response Procedures for Data Subject Requests, which can be found here. We will consider your request in accordance with applicable laws. To protect your privacy and security, we may take steps to verify your identity before complying with the request.
You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. A list of contact details for the EU data protection authorities is available here.
​
You will not have to pay a fee to access your personal information (or to exercise any of the other rights) unless we are charged a fee by any of our processors. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
​
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
​
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
​
We do not knowingly collect any personal information from children under the age of 13. If you are under the age of 13, please do not submit any personal information through our Websites or services. If you have reason to believe that a child under the age of 13 has provided personal information to us through the Websites or Services, please contact us at bookings@bosilliacescape.com, and we will use commercially reasonable efforts to delete that information.
Security Policy
We have put reasonable technical and organisational measures in place to ensure that users’ personal information is not misused, accidentally destroyed, lost or altered within our server environment. However the internet is an open system and we cannot guarantee that unauthorised third parties will never be able to defeat these measures or use your personal information for improper purposes.
​
Transfer of Personal information Overseas
Some of the companies who process personal information for us are based outside the European Economic Area (EEA) so their processing of your personal information will involve a transfer of data outside the EEA. Whenever we transfer your personal information out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
-
We will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission. For further details, see European Commission: Adequacy of the protection of personal information in non-EU countries.
-
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal information to third countries.
-
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal information shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA.