1. DATA PROCESSING PRINCIPLES

OTTO Hotel & Sun and developer Edhotels Ltd collect, store, publish, transmit and store customer data in accordance with the laws and legislation of the country where the hotel is located for the best service of clients and for the performance of contractual relations.

All personal information provided while making a purchase in the online booking and e-shop are confidential and are treated by the requirements of the law of personal information. Personal data is processed by the information as prompted by the Client placing the booking or purchased in the e-shop(first and last name, e-mail address and telephone number).

When paying by credit card, the data provided by the Client is protected by the SSL security protocol, ensuring that the information provided cannot be viewed or modified by persons who do not have access to such information. Payment transactions with Visa and MasterCard payment systems are carried out with the help of payment service provider Maksekeskus AS, which stores the data of the Customer’s cards in accordance with the current legislation of the Republic of Estonia and the European Union. Maksekeskus AS is a PCI-DSS service provider that meets all the requirements and offers payment solutions, including exchanging payments through Visa and MasterCard between the Parties. Maksekeskus AS does not transfer personal data received during the execution of payment transactions to third parties. The availability of information for the Parties is limited by the type of card and the last two digits of the card number. If the Hotel needs to return the paid amount to the client in accordance with the terms of cancellation, change of the order and refund, safe environment of Maksekeskus AS is used for this.

OTTO Hotel & Sun is responsible for the activities of the authorized data controller and data controller complies fully with OTTO Hotel & Sun principles of processing personal information. An authorized controller is OTTO Hotel & Sun.

Collecting non-personal data – it is also collected non-personal data, which can not be directly linked to one specific person (browser version, language preference, location, time spent on the page, etc.) and it is treated as generalized customer behaviour in the booking engine and e-shop of OTTO Hotel & Sun. Aggregated data is used for upgrading the service/product of the OTTO Hotel & Sun.

Edhotels Ltd (provider and system administrator of the booking engine) and OTTO Hotel & Sun keep personal data in their databases and the customer has the right at any time to access his/her personal data and information about the actions performed by him/her. A customer has the right at any time to demand corrections in his/her personal data if the data has changed or is inaccurate for some other reason. To modify/add or remove data, please contact OTTO Hotel & Sun by e-mail info@ottohotel.lv.