Privacy policy
This privacy policy applies to the processing of personal data concerning:
- GRAND HOTEL CRAVAT’s clients;
- visitors of the GRAND HOTEL CRAVAT’s website (www.hotelcravat.lu)
(« you»).
GRAND HOTEL CRAVAT committed to hand your personal data in compliance with applicable data protection laws, including as of 25 May 2018, the General Data Protection Regulation (“GDPR”).
This privacy policy explains how we collect, use, store, and share your personal data, as well as the options you have to control your personal information when you use our services and in particular the following:
:
- WHO IS RESPONIBLE FOR YOUR PERSONAL DATA?
- WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU, FOR WHICH PURPOSES AND ON WHAT BASIS ?w/a>
- HOW WE OBTAIN YOUR PERSONAL DATA?
- WHO WE SHARE YOUR PERSONAL DATA WITH ?
- WHICH COUNTRIES WE TRANSFER YOUR PERSONAL DATA TO?
- COOKIES
- THIRD PARTY APPLICATIONS, WEBSITES, AND SOCIAL MEDIA
- HOW LONG WE KEEP YOUR PERSONAL DATA ?
- YOUR RIGHTS REGARDING YOUR PERSONAL DATA
1. WHO IS RESPONIBLE FOR YOUR PERSONAL DATA?
Your personal data is processed by Grand HOTEL-CRAVAT S.à r.l., a limited liability company, registered with the Luxembourg Business Registers under the registration number B 226020 (“GRAND HOTEL CRAVAT” or “we”).
Under the GDPR, GRAND HOTEL CRAVAT is the “data controller” in respect of the processing of your personal data.
For any concerns regarding your personal data feel free to contact our representative or management by:
- e-mail: contact@hotelcravat.lu; or
- téléphone: +352 22 19 75; or
- télécopie (le cas échéant) : +352 22 67 11; or
- regular mail: GRAND HOTEL CRAVAT, 29, Boulevard Roosevelt, L - 2450 Luxembourg.
2. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU, FOR WHICH PURPOSES AND ON WHAT BASIS?
| Who is concerned ? | What personal data do we collect ? | For which purposes ? | On what basis? | Are you required to provide us with your personal data ? |
|---|---|---|---|---|
| CLIENTS |
Identification and contact information, such as your name, surname, email, phone number(s), address (street, city, country of residence) |
In order to provide you with the requested services notably:
|
Processing is necessary for the performance of the contract to which you are party and in order to take steps at your request prior to entering into the contract. |
The provision of this type of personal data is necessary to provide you with the requested services. If you do not provide us with this information we will not be able to enter into a contract with you and offer you accommodation. |
|
Personal data contained in the traveller accommodation form, namely your name, first name(s), date of birth, place of birth, nationality, ID card or passport number, postcode, city and country of residence, street number and street, date of arrival, presumed date of departure, purpose of the stay (business/congress or leisure/other), the total number of persons accompanying the main traveller (including all the children and all the persons travelling in a group). |
In order to complete and retain traveller accommodation forms. | Processing is necessary for compliance with our legal obligation to complete and retain traveller accommodation forms. |
Under the Law of 24 June 2008 on the control of travellers in accommodation establishments, you are legally required to provide us with these personal data in the following cases:
In addition, you must show us your ID document (such as ID card or passport) to allow us verifying whether the personal data you provided us with is accurate. * street number and street are optional indications.
If you travel in a group or if you attend an organized trip and you are not the person in charge of the group/trip, you will have to provide us with the following personal data:
If you do not provide us with your personal data according to the legal requirements described above, we will not be able to offer you accommodation in our hotel. Inaccurate data could result in a fine of EUR 25 euros to EUR 250, without prejudice to other penalties which might be applicable under the Criminal Code. |
|
|
Payment-related information such as name and surname of the credit card holder, credit card number |
In order to process payments and manage payment-related claims. | Processing is necessary for the performance of the contract to which you are party. |
The provision of this type of personal data is necessary to provide you with the requested services. If you do not provide us with this information we will not be able to enter into a contract with you and offer you accommodation. |
|
|
Your preferences such as room facilities, room size, type of bedding |
In order to provide you with the requested services notably:
|
Processing is necessary for the performance of the contract to which you are party. |
The provision of this type of personal data is necessary to provide you with the requested services. If you do not provide us with this information we will not be able to enter into a contract with you and offer you accommodation. |
|
|
VISITORS OF THE WEBSITE |
Cookies | In order to improve the browsing experience on our website www.hotelcravat.lu | Processing is necessary for the purposes of our legitimate interest to improve the quality of our website www.hotelcravat.lu. |
The provision of this data is optional. For more information please see the Section 6. Cookies below. |
|
Identification and contact information, such as your name, surname, email, address, postal code, city, country of residence |
In order to allow you to contact us via the contact form available on our website www.hotelcravat.lu. | Processing of this data is based on your consent. |
The provision of this data is mandatory if you wish to contact us using the contact form available on our website www.hotelcravat.lu.
Without this information we will not be able to process your request. |
3. HOW WE OBTAIN YOUR PERSONAL DATA ?
We may collect the above-identified personal data directly from you on several occasions such as:
- when you book a room;
- when you check-in or pay for your stay;
- when you navigate on our website www.hotelcravat.lu;
- when you complete the contact form available on our website www.hotelcravat.lu
4. WHO WE SHARE YOUR PERSONAL DATA WITH ?
We must share the traveller accommodation form containing your personal data with the Grand Ducal Police (Police grand-ducale) and subsequently with the STATEC (the Luxembourg national institute of statistical information and of economic researches) in order to comply with our legal obligations.
We may share your personal data with the following service providers:
| Name and address of the provider | Countries where your data may be stored | Type of service | Concerned data |
|---|---|---|---|
|
WorldHotelsTM GMBH Main Airport Center, Unterschweinstiege 2-14, 60549 Frankfurt am Main |
Germany USA |
Management of Hotel accommodation and loyalty program |
Contact information, payment information, reservation information, and accommodation preferences. https://www.worldhotels.com/content/luxury-hotels/en_US/legal/privacy-policy.html |
|
Amazon Web Services Inc. 410 Terry Avenue North Seattle, Wa 98109-5210 Etats Unis |
Germany, France, Irland | Website hosting |
The data you provide us with by completing the contact form available on our website (https://www.hotelcravat.lu/en/contact ) |
|
Google Llc 1600 Amphitheatre Parkway Mountain View, CA 94043 Etats Unis |
European Union Member States & United States of America | Analytics statistics (Google Analytics), Google fonts, Google Maps |
Cookies: page views, clicks, technical data of the browser and the tool used to connect to our website www.hotelcravat.lu. |
We may also share your personal data with other trusted third parties in accordance with contractual agreements in place with them, including:
- our local national processor for payment purposes;
- our IT service providers for our client management system of bookings and stay;
- if you stay at our hotel as part of a group, information collected for the group stay may be shared with the organizers of the group stay;
- other selected partners: we may help arranging rental cars or taxi services and may share personal data with our business partners in order to provide you with the requested services;
- our corporate travel partners to help them assess their travelling policies;
- our business booking partners
- our business partner as Member of WorldHotels in order to allow you to earn and redeem rewards, points, or credits in connection with your loyalty program membership and in accordance with your chosen earning and spending preferences.
5. WHICH COUNTRIES WE TRANSFER YOUR PERSONAL DATA TO?
Your data will generally be hosted within Luxembourg or within the EU, locations that offer the highest level of data protection regulation.
Where any personal data is processed by suppliers outside the EEA the EU have not assessed as providing an adequate level of protection, we ensure that personal data is adequately protected in accordance with applicable data protection law, and in particular Article 46 of the UK GDPR and the EU GDPR, by using the EU approved model contract clauses to cover the transfer.
6. COOKIES
What are cookies ?
Cookies are pieces of information stored on your hard drive by the server of websites you visit. They are sometimes stored on your device in a simple text file, accessed by a server to read and record information.
We use several types of cookies:
Essential cookies
This kind of cookies is essential for the running of our website. If these cookies are blocked by the browser, you may no longer be able to enjoy certain features of our website. These cookies are sent exclusively by our website.
Preferences cookies
These cookies improve and optimize the functioning of our website by offering you personalized features (e.g. language preferences). If these cookies are blocked by the browser, you can no longer enjoy the customized features. These cookies are sent by our website and by third parties.
Analytics cookies
These cookies allow us to create usage statistics of our website. This information helps us to improve the functionalities of our website.
Business Partner Cookies
Our website may use cookies used by certain of our business Partners, if necessary, in order for us to control the proper functioning of our website and for analytics purposes. Please be aware that you can agree with or refuse the use of such cookies.
Our website uses Google Analytics. In this framework, your personal data, namely cookies, IP address, (page views, clicks, technical data of the browser and the tool used to connect to our website www.hotelcravat.lu. ) https://policies.google.com/privacy?hl=en. Google Analytics is a service performed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. According to Google, information processed in relation with our web users can be transferred to Google Servers located in the United States. However, this service use anonymised data.
Google Analytics provides an "opt-out" mechanism that blocks the tracking of its services. Most web browsers can be configured to warn users of attempts to set cookies or to limit the type of cookie they accept. Please refer to the help section of your browser to find out what options your browser offers and to https://tools.google.com/dlpage/gaoptout?hl=en.
We also use Google Maps, service performed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service helps us to show our location and how to find our Hotel. For more information, please refer to https://www.google.com/intl/en_en/help/terms_maps/. You can object to the use of cookies by setting your browser accordingly.
7. THIRD PARTY APPLICATIONS, WEBSITES, AND SOCIAL MEDIA
As mention above re business partners cookies, we have no control over the privacy practices of websites or applications that we do not own.
Our website or our communications may also contain plug-ins and other features that integrate third party social media platforms.
If you interact with these, the third parties who operate these platforms may be able to identify you, determine how you use our website, and link and store this information with your social media profile.
8. HOW LONG WE KEEP YOUR PERSONAL DATA?
We commit to keep your personal data only for the period necessary for the purposes set out in this privacy notice.
In determining this period we take into account the following criteria:
- Legal and regulatory requirements to retain the personal data for a minimum period such as
- the requirement to retain invoices including the value-added tax for a period of 10 years;
- the requirement to retain the traveller accommodation form containing your personal data for a period of 12 months.
- Limitation periods for taking legal action such as the limitation period of 6 months for taking legal action against clients who did not pay for hotel services.
9. YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Under the GDPR, you are entitled to:
- obtain details of the personal data we hold about you and how we process it (including a copy of that data) (“right of access”);
- have your inaccurate personal data rectified or have your incomplete personal data completed (“right to rectification”)
- ask us to delete your personal data in certain cases (for example, when your personal data is no longer necessary for the purposes for which it was collected, or when, your personal data have been unlawfully processed (“right to be forgotten”);
- in some circumstances, restrict our processing of your personal data (“right to restriction of processing”);
- if we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time (“right to withdraw consent”);
- ask us to stop processing your personal data, and we will do so, if we are relying on our own legitimate interest to process your personal data, except if we can prove compelling legal grounds for the processing (“right to object”);
- in some circumstances, have personal data relating to you transferred to another company (“right to data portability”);
- lodge a complaint in relation to processing of your personal data with a local supervisory authority. For Luxembourg, the Supervisory Authority is the Commission Nationale pour la Protection des données (CNPD) https://cnpd.public.lu/en/particuliers/faire-valoir/formulaire-plainte.html
- In order to exercise any of the above rights, feel free to contact us by:
E-mail: contact@hotelcravat.lu; or
Telephone: +352 22 19 75; or
fax (if available) : +352 22 67 11; or
GRAND HOTEL CRAVAT S.à r.l., 29, Boulevard Roosevelt, L - 2450 Luxembourg
