Types of Personal Data
We may collect and process the following types of personal information :
Ancillary services (such as transportation, sports activities, tours and other toursim activities) and the products your purchase.
Information about your payment.
When you have paid for your accommodation or other products and services we offer, we may collect your data regarding the payment, such as credit card number and type, cardholder name, address, and expiry date.
Information regarding your stay.
When you stay with us, we process information related to your stay, such as your stay period, check-in and check-out time, your room number, your itemized bill, Frequent Guest Program Number and Tier Level, and special request (if any). At your request, we may also record any detail information such as medical condition to meet your medical needs or dietary requests you have or any additional assistance you require to help us serve you better.
Your Frequent Stay Membership
When you join our loyalty program, we collect your information, for instance, hobby, religion, nationality, and language. We also process your membership number, rewards and benefits, type and level of membership, stay transaction history, redemption history, expired membership, complaint, requests, suggestion, complementary and other information related to your membership.
Our communication with you.
When you send us email, telephone, or other communication, or through our social media, we may register your communication with us. When you contact us, our staff will register your questions, complaints, needs, or other purpose in our database. We may also collect information you choose to share with us, for instance, when you fill out our customer survey, fill out suggestion or complaint form, or submit for a contest held by us.
Use of our website, apps, and other digital media.
When you visit our website or apps, we may collect information such as IP address, browser type, operating system, referring website, web-browsing behavior, device ID (for mobile apps only), and app use.
Collection of Information
Candi Beach Resort & Spa may collect your personal data in various ways, for instance when you book a stay, use our website and mobile application, register for newsletter, purchase our products and services through our sales office/direct/travel agents, communicate with us via social media, contact center, and other indirect channels.
We may receive information about you from our sister properties, partners, service providers, third parties contracted with us, or public authorities who are legally entitled to disclose that information.
Use of Your Information
Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only (i) where we have your consent to do so, (ii) where we need the personal information to perform a contact with you, or (iii) where the processing is in our legitimate interests and not overridden by your rights. In some cases, we may also have a legal obligation to collect personal information from you. If we ask you to provide personal information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as the possible consequences if you do not provide your information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
Disclosure of Your Information
We may disclose your personal information to third parties for the following purposes:
To support services we associate
We disclose your personal data to our sister properties
We may disclose your personal data within our group or third parties contracted with us for direct marketing purposes.
These parties’ use of your personal data may be subject to their own privacy policies and which we suggest you familiarize yourself with in the relevant circumstances set out above.
Data Retention and Security Measure
Candi Beach Resort & Spa will take its best effort to protect your personal data against loss or unlawful use by providing appropriate technical and organizational measures.
You have the following data protection rights:
You are welcome to exercise any other rights under applicable data protection law and regulations by by emailing us to firstname.lastname@example.org with subject “Customer Rights”.
International Data Transfer
Candi Beach Resort & Spa may transfer your personal data to countries other than your country of residence. We take this measure in order to fulfill your stay arrangements or because our group companies, partners, or service providers have operations in countries across the world. Where necessary, Candi Beach Resort & Spa will endeavor adequate protection to comply with the requirements or international data transfer under applicable data protection laws.
Contacting Candi Beach Resort & Spa
Candi Beach Resort & Spa
Mendira Beach, Sengkidu, Candidasa, Karangasem, Bali, Indonesia