Privacy Policy
Privacy Policy
At Droptop Suites, we are dedicated to safeguarding and respecting your privacy. Please carefully review this policy as it contains crucial information about how we utilize the personal data we collect from you or that you provide to us.
Information & Consent
This Privacy Policy outlines how we collect, process, and disclose your information, including personal information, in connection with your use of our booking system.
By reviewing this Privacy Policy, the user is informed about how we collect, process, and protect personal data provided through the booking engine. It is essential to read this policy, which has been written in a clear and simple manner for easy understanding, to make an informed and voluntary decision on whether to provide personal data to Droptop Suites.
When this policy mentions terms such as “booking system,” “booking engine,” “system,” “website,” “platform,” “app,” “webapp,” “services,” or “online services,” it refers to all pages and functions under https://droptopsuites.com/ unless explicitly specified otherwise.
By accessing the platform or providing information, you agree to our privacy practices outlined in this privacy statement. We may modify this policy periodically, so it is advisable to check frequently for the latest version.
Identity
When this policy uses terms like “we,” “us,” “our,” “data controller,” or “controller,” it refers to Droptop Suites, operated by “Birkhill Real Estate Ltd.”
Data Controller
- “Birkhill Real Estate Ltd” manages this booking system as a data processor, as further explained below. Under the General Data Protection Regulation (“GDPR”) (EU) 2016/679, we act as the Data Controller. A strict contractual framework is in place between the data controller and the data processor to protect your personal information. We are:
Droptop Suites, Birkhill Real Estate Ltd
Obligatory Nature of Providing Data
The data requested in the forms accessible from the booking engine is generally mandatory (unless specified otherwise in the required field) to fulfill the stated purposes. Failure to provide or inaccuracies in the provided information may prevent us from processing the request.
Personal Data We Collect and Process
This includes:
-
- Personal information (e.g., name, address, email address) when making a booking through our booking engine.
-
- Financial details for reservation processing when pre-payment is required.
-
- Details of transactions and order fulfillment through our booking engine.
Our data processor is authorized to collect and process personal data solely in accordance with our instructions.
We grant permission to our data processor:
-
- To use personal information for reserving rooms and/or other services at Droptop Suites, Birkhill Real Estate Ltd.
-
- To share financial details with Droptop Suites, Birkhill Real Estate Ltd, and/or relevant third parties (e.g., credit card company) for confirming or processing a reservation.
-
- To use information for marketing purposes with explicit user consent.
-
- To pre-complete forms and details on our website for a smoother experience during subsequent visits.
Social Login
In the case of registration or access through a third-party account, we may collect and access specific user profile information from the corresponding social network for internal administrative purposes and/or the indicated purposes above.
Third-Party Data (e.g., Book for a Friend)
If the user provides third-party data, they affirm having the third party’s consent and undertake to provide the concerned party with the information in this Privacy Policy. Verification may be conducted to ensure compliance with data protection regulations.
Sensitive Data
Unless specifically requested, refrain from sending or disclosing Sensitive Personal Data (e.g., social security numbers, national identification numbers, racial or ethnic origin, etc.) through our Services.
Use of Services by Minors
Our Services are not directed to individuals under the age of sixteen (16), and we request that they do not provide Personal Data through the Services.
Purpose of Processing Personal Data
Based on user requests, collected personal data will be processed for purposes including:
-
- Managing bookings, including payment processing and user preferences.
-
- Managing registration in loyalty or membership programs.
-
- Handling user contact requests.
-
- Sending personalized commercial communications with user consent.
-
- Providing contracted accommodation services and additional services.
-
- Conducting surveys and evaluations of service quality.
Data Retention
We will retain Personal Data for the duration necessary to fulfill the outlined purposes in this Privacy Policy unless a longer retention period is required or permitted by law, or if the user requests data withdrawal, opposes, or revokes consent.
Retention criteria include:
-
- The duration of an ongoing relationship or service provision.
-
- Legal obligations (e.g., record-keeping requirements).
-
- Consideration of our legal position (e.g., statutes of limitations, litigation).
Legitimate Interest for Processing Data
Data processing requiring user consent cannot proceed without that consent. Withdrawal of consent does not affect the legality of previous processing. Data processing necessary for legal obligations or contractual relationships is legitimate for fulfilling those purposes.
Data Disclosure
We will use and disclose Personal Data as necessary or appropriate:
-
- To comply with applicable laws.
-
- To respond to legal processes.
-
- To meet requests from public and government authorities.
-
- To enforce terms and conditions.
-
- To protect our operations, rights, privacy, safety, or property.
-
- To pursue available remedies or limit potential damages.
Other Data may be used and disclosed for any purpose unless prohibited by applicable law. Combined data (Personal Data and Other Data) will be treated as Personal Data.
User’s Responsibility
The User:
-
- Affirms legal age, capacity, and the accuracy of provided information.
-
- Ensures third parties are informed and authorized to provide their data.
-
- Is responsible for the accuracy of information provided through the Website.
Exercise of Rights
The User can contact us at any time, free of charge, to:
-
- Confirm if personal data is being processed.
-
- Access personal details.
-
- Rectify inaccurate or incomplete data.
-
- Request deletion of personal data when no longer necessary.
-
- Confirm revocation of consent.
-
- Obtain limitations on data processing.
-
- Request data portability.
Users can also file a complaint with the competent Data Protection Authority.
Security Measures
User data will be processed confidentially, with measures taken to guarantee security against unauthorized access, alteration, loss, or illegal processing.