We want you to know that when using the Clandeboye Lodge you can trust us with your information. We are determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information we collect about you, how it is used and shared, and your rights regarding it.
Data Controller
We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process. Our registered address is 10 Estate Road, Bangor, BT19 1UR, our registration number is ZA212110, and our Data Protection Lead (DPL) is Giacarla Giovannoli. Our Data Protection Lead (DPL) can be contacted at reception@clandeboyelodge.co.uk
Data Collection
All of the information that we hold about you is provided to us by yourself when you seek to use our services. We will tell you why we need the information and how we will use it.
Our Lawful Basis for processing your information
The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the GDPR are:
- Consent of the data subject
- Performance of a contract with the data subject or to take steps to enter into a contract
- Compliance with a legal obligation
- To protect the vital interests of a data subject or another person
- Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
Examples of legitimate interests include:
- Where the data subject is a client or in the service of the controller;
- Transmission within a group of undertakings for internal administrative purposes;
- Processing necessary to ensure network and information security, including preventing unauthorised access;
- Processing for direct marketing purposes, or to prevent fraud; and
- Reporting possible criminal acts or threats to public security.
Our Lawful Basis is contract and our Legitimate Interest is where the data subject is a client or in the service of the Clandeboye Lodge as a controller.
We use your information to:
- Provide goods, services, deliveries, quotations, and information, for example, email e-zines and postal mailings;
- Process or support payments for goods and services;
- Conduct data analysis, testing, and research (including for product development), and to monitor and analyse usage and activity trends;
- Maintain the safety, security and integrity of our services;
- Direct your enquiries to the appropriate customer support staff;
- Investigate and address your concerns;
- Communicate with you about products, services, promotions, studies, surveys, news, updates and events;
- Process promotions/competitions, including prizes, and send you information about our services and those of our business partners;
- Investigate or address legal proceedings relating to your use of our services/products, or as otherwise allowed by applicable law;
We do not use automated decision-making in the processing of your personal data.
We collect and process both personal data and special categories of personal data as defined in the GDPR. This includes:
Customer/client data
- Full Name;
- Email;
- Phone number including mobile phone numbers;
- Address;
- Financial information about you, including bank details, credit card details or other payment details;
- Location details;
- Device IP address;
- Details of contracts you have entered with third parties for us to provide a service to you;
- Details of your relationship to other parties
- Details of your membership of professional or other organisations
- Medical details, including details of allergies
- Details of your car registration number
- Details of your location whilst on the property via key cards
- Any other data you ask us to process on your behalf for us to fulfil our role to you as providing accommodation, events, leisure or food/beverage related services to you.
When you use the WIFi network at the hotel/events, we may collect personal data about your device, the volume of data you use/the websites and applications which you access/your usage by time, frequency and location.
Employee Data
- Name;
- Email;
- Phone number including mobile phone numbers;
- Address;
- Financial information about you, including bank details
- Date of birth;
- Family & next-of-kin details;
- Family dependants;
- Medical details, including details of allergies.
We may share your personal data with:
- Suppliers for business fulfilment purposes;
- Booking agents for business fulfilment purposes;
- Our legal advisors in the event of a dispute or other legal matter;
- Law enforcement officials, government authorities, or other third parties to meet our legal obligations;
- In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, refinancing, or acquisition of some or all of our business by another company;
- Accounting Software;
- Equality Commission;
- Insurance and risk management consultants;
- The People’s Pension;
- Any other party where we ask you and you consent to the sharing.
We do not rent or trade emails lists with other organisations/businesses.
Transfers to third countries and international organisations
We do not transfer any personal data to third countries or international organisations.
We retain your personal data while you remain a customer/client/employee/supplier, unless you ask us to delete it. Our Retention and Disposal Policy (copy available on request) details how long we hold data for and how we dispose of it when it no longer needs to be held. We will delete or anonymise your information at your request unless:
- There is an unresolved issue, such as claim or dispute;
- We are legally required to; or
- There are overriding legitimate business interests, including but not limited to fraud prevention and protecting customers' safety and security.
Your Rights
The General Data Protection Regulation gives you specific rights around your personal data. For example, you have to be informed about the information we hold and what we use it for, you can ask for a copy of the personal information we hold about you, you can ask us to correct any inaccuracies with the personal data we hold, you can ask us to stop sending you direct mail, or emails, or in some circumstances ask us to stop processing your details. Finally, if we do something irregular or improper with your personal data you can seek compensation for any distress you are caused or loss you have incurred. You can find out more information from the ICO’s website http://ico.org.uk/for_the_publ... and this is the organisation that you can complain to if you are unhappy with how we deal with you.
Accessing and Correcting Your Information
You may request access to, correction of, or a copy of your information by contacting us at reception@clandeboyelodge.co.uk.
You can edit your personal data by contacting us at reception@clandeboyelodge.co.uk.
Marketing Opt-Outs
You may opt out of receiving emails and other messages from our organisation by following the instructions in those messages.
We will occasionally update our Privacy Notice. When we make significant changes, we will notify you of these through either mail or email. We will also publish the updated Notice on our website.
Contact Us
Questions, comments, requests, and complaints regarding this Policy and the information we hold are welcome and should be addressed to us at reception@clandeboyelodge.co.uk.
All requests will be dealt with promptly and efficiently.
Registered Office
Country Inns Ulster Limited trading as Clandeboye Lodge Hotel located and trading at 10 Estate Road, Bangor, Co Down, BT19 1UR is a private company limited by shares registered in Northern Ireland.
Registered office address: 10 Estate Road, Bangor, Co Down, BT19 1UR
