Privacy Policy for Heartbreak Escapes by BLACOON Retreats AS
1. Introduction
Protecting your personal data is important to us. This privacy policy explains how Heartbreak Escapes by BLACOON Retreats AS (hereinafter referred to as "we", "us", "our") collects, processes, and protects your data. These policies apply to all services we provide as part of our memberships, especially for the Heartbreak Country Club.
2. Scope
This privacy policy applies to all individuals using our services, including members of the Heartbreak Country Club and their guests.
3. Data Controller
The data controller according to the General Data Protection Regulation (GDPR) is:
Heartbreak Escapes by
BLACOON Retreats AS
Erik Puzig
Rondanevegen 518
2670 Otta
Norway
Email: [email protected]
4. Types of Data Collected
We collect various types of personal data, including:
- Contact information (e.g., name, email address, phone number)
- Payment information (e.g., credit card details, billing address)
- Data about your use of our services (e.g., booking history, stay details)
- Data regarding your preferences and interests (e.g., accommodation choices, feedback)
5. Purposes of Data Processing
We use your personal data for the following purposes:
- Provision and management of our services (e.g., bookings, membership in the Heartbreak Country Club)
- Communication with you (e.g., to confirm bookings, respond to inquiries)
- Payment processing and invoicing
- Improving our services (e.g., through analysis of your usage patterns)
- Compliance with legal obligations
6. Legal Basis for Processing
We process your personal data based on the following legal grounds under the GDPR:
- Consent: When you have provided your consent for us to process your data.
- Contract Performance: To fulfill contracts we have entered into with you.
- Legal Obligation: When we are legally required to process your data.
- Legitimate Interest: When we have a legitimate interest in processing your data that does not override your interests or fundamental rights.
7. Sharing Data
We do not share your personal data with third parties unless it is necessary to provide our services or required by law. In certain cases, it may be necessary to share your data with service providers (e.g., payment processors).
8. Data Storage
We store your personal data only as long as necessary for the purposes for which we collected it or as required by law. After the retention period expires, your data will be securely deleted or anonymized.
9. Your Rights
You have the right to contact us to exercise the following rights:
- Access your stored data
- Rectify inaccurate data
- Erase your data (under certain conditions)
- Restrict the processing of your data
- Data portability
- Withdraw your consent for data processing
To exercise these rights, please contact us using the email address provided above.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
11. Changes to this Privacy Policy
We reserve the right to modify this privacy policy. Changes will be communicated to you in a timely manner, and we will provide you with the updated version.
12. Jurisdiction and Applicable Law
Although our company is based in Norway, this privacy policy is subject to the laws of the Federal Republic of Germany. The jurisdiction for any disputes arising from or in connection with this privacy policy is Germany.
Last updated: 09.10.2024