Privacy statement Heuvelpoort Hotel B.V.
Heuvelpoort Hotel B.V. (hereinafter: Heuvelpoort), located at Heuvel 37, (5038 CP) Tilburg with KvK number: 18072526, is responsible for the processing of personal data as reflected in this privacy statement. We process information about individuals on a daily basis in order to offer our services. This privacy statement therefore applies to the hotel (Mercure Hotel Tilburg), restaurants (Taste and Grand Café Puur), its wellness facility City Sauna and events (including room hire). We handle your data with care and are happy to be transparent about the processing. In this privacy statement, you can read more about how we process your data.
1 What personal data do we process and for what purpose?
Heuvelpoort processes different personal data for different purposes. Heuvelpoort processes your personal data because you use our services and/or because you provide them to us yourself.
Guests:
When you book an overnight stay, we are legally obliged to process from you your first and last name, day of arrival, type of ID/travel document, day of departure and country of origin. In addition, Heuvelpoort is legally obliged to verify your identity. In this context, we may also store a copy of your identity document with the exception of the BSN number.
Also, if you make a booking for an overnight stay, a table reservation for the restaurant, rent a meeting room or plan an event, you are entering into an agreement with Heuvelpoort. To execute the agreement, we process your gender, date of birth, telephone number, e-mail address, nationality, payment details and any membership ALL (Accor Live Limitless) in addition to the personal data required by law when booking an overnight stay.
To make a reservation at our restaurant, sauna or rent a meeting room, we may process your first and last name, phone number and/or email address.
We may also ask you for additional data for the performance of our services, such as dietary requirements or other preferences. This data is only processed when you have given your consent.
Cookies
Our website uses cookies. Cookies are small pieces of information stored on your computer by your browser. We place functional cookies to make the website more user-friendly for visitors. We also use analytical cookies, for instance to analyse visitor statistics.
By law, we are allowed to store cookies on your device if they are strictly necessary for the functioning of the site (so-called functional cookies). For all other types of cookies, we need your consent. When you visit the website, a notification to accept cookies will be displayed and more explanation will be given about the cookies in question.
If you do not accept cookies or set your browser so that it does not accept cookies, that could mean that you cannot make the best use of our website.
Camera surveillance
Heuvelpoort has a legitimate interest to use camera surveillance in public places, as necessary, to secure its property and protect its guests and employees. Through the camera footage and audio recording, Heuvelpoort obtains insight into the activities of individuals.
Heuvelpoort does not make decisions about matters that could (significantly) affect individuals on the basis of automated processing. Camera images are automatically deleted after 3 weeks unless the images have captured an incident that is still under investigation.
2 Partners
Hill Gate does not share your data with third parties except in the following circumstances:
- when this is necessary for the performance of the agreement. For example, we use a third party to take care of processing (online) payments, subcontractors, our franchisor and suppliers.
- when parties at our instruction and in accordance with our policy take care of the processing of personal data. Here you can think of our IT suppliers and managers of IT systems. Heuvelpoort has concluded a processing agreement with these parties to ensure the same level of security and confidentiality of your data. Heuvelpoort remains responsible for this processing.
- When, based on a legal obligation, it is necessary for Heuvelpoort to share data. Examples include fraud investigations, national statistics surveys, tax inspectors, municipality in connection with tourist tax.
- when indicated at the time you leave your personal data with us.
Some of these partners process personal data outside the European Economic Area. A transfer to a country outside the European Economic Area will only take place if legal requirements are met.
3 How long do we keep your data?
Hill Gate will not retain your personal data for longer than is strictly necessary to fulfil the purposes for which your data is collected. Most data are kept according to a statutory retention period. For example, you can think of the personal data that can be found in our financial records, for which the legal term of 7 years is applied.
When you make a restaurant reservation through our digital reservation system, your reservation is automatically deleted after two years. However, a copy of the proof of identity is destroyed immediately once the guest checks out.
If you have any questions about retention periods, please feel free to contact us.
4 Exercising rights
You have the right to access, correct or delete your personal data. You also have the right to withdraw your possible consent to data processing or object to the processing of your personal data by Heuvelpoort, and you have the right to data portability. This means that you can submit a request to us to send the personal data we hold on you in a computer file to you or another organisation named by you. You can send a request to inspect, correct, delete or transfer your personal data or a request to withdraw your consent or object to the processing of your personal data to privacy@mercure-tilburg.nl.
We will respond to your request as soon as possible. Heuvelpoort would also like to inform you that you have the opportunity to lodge a complaint with the national regulator, the Personal Data Authority. You can do so via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-on
5 Security
Heuvelpoort takes the protection of your data seriously and takes appropriate measures to counter abuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. For example, our reservation systems, payment system and terminals are PCI compliant and our employees attend PCI training courses. If you have the impression that your data is not properly secured or there are indications of abuse, please contact us at privacy@heuvelpoort.n.
6 Other
This privacy notice is in accordance with the General Data Protection Regulation. We reserve the right to update this privacy statement periodically. The latest version will be published on our website. We therefore recommend reviewing the privacy statement with some regularity.
7 Contact
If you have any questions about the content of this privacy statement, please contact us at privacy@heuvelpoort.nl