1. What Personal Information Do We Collect About You?
We collect Personal Information from various sources, which are described below. Where applicable, we indicate whether and why you must provide us with your Personal Information, as well as the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to benefit from our Services or some features of our Services if that information is necessary to provide you with the Services or if we are legally required to collect such Personal Information. We may collect Personal Information about you directly from you and from third parties, as well as automatically through your use of our Services.
1.1. Information You Provide.
Registration and Villatel account. When you register with us and create your Villatel Account (“Account”) through the Services or become a Villatel customer (“Customer”) by booking an accommodation at a Villatel property (“Accommodation”), we will ask you for certain Personal Information including your name, contact details (phone number, email address and postal address), date of birth, booking information, and any other information you elect to provide us. We will also process your username and password you create when you register for our Services. We may also ask you to provide a copy of your passport or other official government-issued ID for identity verification purposes at registration. Your payment related information, such as credit card number or billing information, is collected by our third party payment processor on our behalf. We may collect your hashed credit card number in connection with your booking.
We may collect any Personal Information you provide to us as part of the administration and personalization of your account profile (e.g., age, gender and individual preferences). You may voluntarily provide us with information about yourself so that we can personalize your stay with us (e.g., whether or not you have children, whether or not you want to use our additional services such as laundry services etc.).
1.2. Information We Collect From Your Interactions With Us. Communications. If you contact us directly via email, phone, mail or any other means, we receive information about you (e.g., when you email us, we will receive your email address, the contents of a message or attachments that you may send to us, and any other information you choose to provide). You may also provide us with your reviews of our Services or complete surveys regarding our Services. Customer service. If you reach out to us with inquiries or requests, we will keep a record of the communication and how your inquiry or request was handled.
1.4. Information We Collect From Third Parties. Social media accounts. We may obtain Personal Information about you from third party services, such as Facebook and Twitter, if you link your Account with third-party social media accounts (“Social Media Account”) by either: (i) providing your Social Media Account login information to us through the Service; or (ii) allowing us to access your Social Media Account, as is permitted under the applicable terms and conditions that govern your use of the respective Social Media Account. Third party booking services. We may receive your booking information via our partners (e.g., Airbnb, Homeaway, VRBO), such as your name, email address, phone number, information available in your user account with a third party booking service and your Villatel stay information (e.g., information on the Villatel unit you are staying in). Other third parties. We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.
2. How We Use Your Personal Information
We use your Personal Information for the following purposes: To operate, provide, and maintain our Services, to provide information that you request, to respond to comments and questions, to provide support and for other customer service purposes. To tailor the content and information that we may send or display to you, and to otherwise personalize your experiences while using our Services, including personalizing your Account profile and identifying you as a returning guest to provide products or services to you according to your preferences or restrictions (e.g., by turning on the air conditioner). Where required under applicable law, we will only use your Personal Information for such purposes with your consent. To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you relating to Villatel or its partners, via email. Where required under applicable law, we will only send you marketing communications with your consent. We also may use the information that we learn about you to assist us in advertising our Services on third-party websites. To link your Account with a third-party account, including a Social Media Account, and to add information from these third-party accounts to your Account and profile page. Depending on the third-party accounts you choose and subject to the privacy settings that you have set in such accounts, we will access, make available and store (if applicable and as permitted by the third-party service and authorized by you) the information in your third-party accounts so that it is available on and through your Account on the Site and Services. For our business purposes, such as audits, security, compliance with applicable laws and regulations, fraud monitoring and prevention as well as for quality assurance purposes. To facilitate transactions and payments. To aggregate or otherwise de-identify data collected through the Service and may use and disclose it for other business purposes after the data may no longer be linked to an identifiable person.
If you are located in the European Economic Area (“EEA”), we only process your Personal Information based on a valid legal ground, including when: Consent. You have consented to the use of your Personal Information, for example for marketing purposes or to track your online activities via Cookies and similar technologies. Contract. We need your Personal Information to provide you with our Services, for example for account registration and management or to respond to your inquiries. Legal obligation. We have a legal obligation to use your Personal Information, for example to comply with tax and accounting obligations, or anti-terrorism laws. Legitimate interest. We or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in using your Personal Information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests.
4. How We Share Your Personal Information
We may share your Personal Information under the following circumstances: Affiliates. We may disclose the information we collect about you to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your Personal Information will be subject to this Policy. Service providers. We may disclose Personal Information we collect about you to third party vendors, service providers, contractors or agents who perform functions on our behalf, including but not limited to service hosting, data analysis, customer service, email delivery, auditing, web analytics, payment services and fraud detection services. We require these service providers to safeguard the privacy of Personal Information they process on our behalf. Third party booking services. When you book an Accommodation via a third party booking service, we may share your Personal Information with such service in order to manage your booking. Property managers. We may share reports with property managers regarding the use of their properties. We may share guest names and dates of stay at the properties for security purposes (e.g., to ensure that the arriving individuals are the guests that booked the Accommodation). Business partners. We may share your Personal Information to our business partners who provide you with value-added services such as yoga lessons, laundry services and free time activities in connection with our Services. Advertising and analytics partners. We may share non personal Information about you with third party advertising partners to serve advertisements regarding goods and services that may be of interest to you. We may also share information about the use of our Site and Services with third parties for analytics purposes. Some of our advertising partners are members of the Network Advertising Initiative (“NAI”) or the Digital Advertising Alliance (“DAA”). If you do not wish to receive personalized ads, please use the NAI’s Opt-Out Tool (http://optout.networkadvertising.org/?c=1) or the DAA’s Opt Out Tool (http://optout.aboutads.info/?c=2&lang=EN_ to opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps. Merger, Sale, or Other Asset Transfers. We may sell, transfer or otherwise share some or all of its assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy. Compliance with laws and law enforcement. If required to do so by law or in the good faith belief that such action is appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain. Consent. We may also disclose information from or about you or your devices with your permission.
6. Children’s Privacy
7. Links to Other Websites
8. Data Security
We use reasonable physical, organizational, and technical safeguards that are designed to maintain the integrity and security of information that we collect. Please be aware that no security measures are perfect or impenetrable and thus we cannot and do not guarantee the security or privacy of your data.
9. Data Retention
We take measures to retain your Personal Information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. When determining the specific retention period, we take into account various criteria, such as the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations.
10. Cross-Border Data Transfers
Our Services are operated in multiple countries. The Personal Information we collect is transferred to our affiliates, subsidiaries, service providers and agents, who may be located in the United States or in other jurisdictions worldwide. The United States and the other jurisdictions to which we transfer information may not have equivalent data protection laws as your home jurisdiction. Your consent to this Policy followed by your submission of such information represents your agreement to that transfer. If you are located in the EEA, UK or Switzerland, we comply with applicable legal requirements for the transfer of Personal Information to countries outside of the EEA, UK or Switzerland. We may transfer your Personal Information to countries for which adequacy decisions have been issued (e.g., Canada), use contractual protections for the transfer of Personal Information, or rely on third parties’ Privacy Shield certifications, where applicable. You may contact us as specified below to obtain a copy of the safeguards we use to transfer Personal Information outside of the EEA, UK or Switzerland.
11. Updates or changes to this Policy
We may make changes to this Policy. The “Last Updated” date at the top of this page indicates when this Policy was last revised. If we make material changes, we will notify you through the Services or by sending you an email or other communication. We encourage you to read this Policy periodically to stay up-to-date about our privacy practices. Your use of the Services following these changes means that you accept the revised Policy.