Who We Are
Hotel Kerteminde Strand
Marinavejen 12, 5300 Kerteminde
E-mail: info@hotelkertemindestrand.dk
Telefon: +45 22 77 18 60
Hjemmeside: www.hotelkertemindestrand.dk
Hereinafter referred to as the “Company” in this privacy policy.
One of the Company’s primary goals is to maintain the highest level of security for our guests and employees. This also applies to the protection of personal data.
With this policy, the Company aims to clearly and transparently outline how it handles your personal data.
Data Controller
The Company is the data controller.
The Company’s contact information is: info@hotelkertemindestrand.dk, Attn.: John Smidt
The Company handles all personal data in accordance with applicable law.
The Company provides a wide range of services. Each service is subject to specific terms and conditions.
When you provide your personal data to the Company while booking one or more of these services, you simultaneously consent to the processing of your personal data by the Company.
How does the Company collect personal data?
The Company collects personal data as follows:
- When you choose to purchase and/or request one of the Company’s services.
- From persons acting on your behalf.
- In the B2B market. For example, in a sales situation where a quote for one of the Company’s services is requested and/or a cooperation agreement is requested.
- Via browser cookies.
- In connection with the use of the Company’s digital services.
- When you subscribe to the Company’s newsletters.
- From social media, advertising, and analytics providers, as well as public registers.
- Via CCTV surveillance.
The collection and processing of personal data will always be in accordance with the law.
CCTV surveillance is implemented as a safety measure for employees and guests.
The surveillance typically occurs at the Company’s entrance, parking areas, guest and employee areas, reception, bar, and goods delivery areas.
What information does the Company collect?
The Company collects the following personal data:
- Name, address, telephone number, email address, date of birth, and other general personal data.
- Credit card information – potentially as a guarantee for your reservation.
- Demographic information.
- Purchase history and other digital services.
- Feedback via our customer surveys.
- Feedback on social media and other digital platforms.
- Browser information.
- Video recordings.
You may choose to provide the Company with personal data beyond general personal data if you believe it is relevant for security reasons and/or to enable the Company to tailor the service specifically for you.
This may include information about:
- Disability
- Allergies
- Special food preferences
- Medical condition
- Online purchases with a credit card
Shopping online with credit card
In the Company’s booking system and gift card orders, Nets (Netaxept and Nets Easy) is used in connection with user purchases of goods and payment by credit card.
Credit card information is not stored by the Company.
What is the purpose of data collection?
The Company only collects personal data that is necessary for the purpose described in the specific terms and conditions of the relevant service and in this privacy policy.
The specific service determines both which personal data the Company collects and the purpose of the collection.
The Company’s purposes for collecting personal data may include one or more of the following:
- Processing your reservations and purchases of the Company’s services.
- Contacting you before, during, or after your stay.
- Fulfilling your request for services.
- Improving and developing the Company’s services.
- Customizing the Company’s communication and marketing to you.
- Analyzing your user behavior and re-marketing.
- Customizing partner communication and marketing to you.
- Managing your relationship with the Company.
- Complying with legal requirements.
The legal basis for processing
Below is an explanation of the legal basis on which the Company bases the processing of your personal data.
The Company may process your personal data because it is necessary to fulfill a contract to which you are a party. This could, for example, be in connection with a hotel stay, meeting arrangements, and/or cooperation agreements.
Similarly, the Company may process your personal data to carry out certain actions and/or preparations at your request before entering into a contract.
The processing may also take place to enable the Company to pursue a legitimate interest, unless your interest takes precedence over this.
Legitimate interests pursued by the Company include, but are not limited to, statistics, customer surveys, interest-based marketing, and analysis of general user behavior, with the aim of improving your benefits, experience, and the quality of the Company’s services.
If you inform the Company of specific preferences and considerations, such as health information, disability, religious beliefs, or similar, the Company will use this information to tailor the specific service to your instructions and your stay at the Company in general.
In some cases, the Company will receive personal data from a third party, for example, in connection with a group booking and/or an individual booking made by a third party, such as an assistant or similar.
In these cases, the person responsible for the group and/or reservation is required to inform the involved guests of the Company’s terms and conditions as well as this privacy policy.
The processing of your personal data is also legally required for the Company. This is the case, for example, in connection with guest registration at check-in, where the law specifies which personal data the Company is required to record.
Your rights
According to the General Data Protection Regulation (GDPR), you have a number of rights.
Your rights are as follows:
- You have the right to access the personal data that the Company processes about you.
- You have the right to have the personal data the Company has registered about you corrected and updated.
- You have the right to have the personal data the Company has registered about you deleted. If you wish to have your personal data deleted, the Company will delete all data that the Company is not legally required to retain.
- If the processing of personal data is based on your consent, you have the right to withdraw this consent, meaning that the processing will cease unless the Company is legally required to continue processing the data.
However, access may be restricted to protect the privacy of others, business secrets, and intellectual property rights.
You may request in writing from the Company to either receive a copy of your personal data, have your personal data updated, object to processing, or request the deletion of your personal data.
The request must be signed by you and include your name, address, phone number, and email address.
You can also contact the Company if you believe your personal data is being processed in violation of the law or other legal obligations.
Requests should be sent to: info@hotelkertemindestrand.dk, Attn.: John Smidt. The subject line can be “Personal Data.”
The Company will send a response to your request for a data copy within 1 month of receiving it.
For requests to correct and/or delete your personal data, the Company will investigate whether the conditions are met and, if so, will implement changes or deletion as quickly as possible.
The Company may reject requests that are unreasonably repetitive, require disproportionate technical intervention (e.g., developing a new system or substantially altering an existing practice), affect the protection of others’ personal data, or are extremely impractical (e.g., requests for information that only exist in backup systems).
If you apply for a position at the Company
When you apply for a job at the Company, the information you provide in connection with your application will be processed.
This typically involves general personal information such as name, address, phone number, email address, educational background, and information about current and previous employment.
The Company uses this information to assess whether to offer you employment and to communicate with you.
If you are hired by the Company, your information will be stored in accordance with the Company’s employee data protection policy, which is found in the Company’s employee handbook.
Applications from candidates not hired are generally kept for 6 months after the rejection.
The Company may also disclose your personal data if required by law, a court order, or applicable legislation.
If you wish to access the information the Company processes about you, either to update your data or because you want the Company to delete your data, you can contact the Company.
You can object at any time to further processing of your data.
Data Security and Sharing of Your Personal Data
The Company protects your personal data and has implemented internal rules on information security, which include instructions and measures to protect your personal data from unauthorized disclosure and access.
The Company has established procedures for granting access rights to our employees who process sensitive personal data and data that reveals personal interests and habits. The Company monitors their actual access through supervision.
To prevent data loss, the Company regularly backs up its data set.
In the event of a security breach that results in a high risk of discrimination, identity theft, financial loss, loss of reputation, or other significant disadvantage to you, the Company will notify you of the security breach as soon as possible.
The Company’s security procedures are continuously revised based on the latest technological developments.
In addition to the Company’s internal systems, the Company uses external providers of IT services, IT systems, payment solutions, etc.
The Company has entered into data processing agreements with all relevant suppliers in accordance with the new EU regulations for processing personal data (GDPR), ensuring a high level of protection of your personal data.
Where necessary, the Company shares and discloses your personal data internally to provide the most optimal service to you.
The Company may also be required to disclose personal data by law or by order of a public authority.
The Company deletes your personal data when it is no longer legally required to retain it or when there is no longer a purpose for processing it.
According to the rules in the Danish Aliens Executive Order and the Passport Executive Order, the Company registers various information about guests. For foreign guests, this information must be kept for a minimum of 1 year and a maximum of 2 years, while for Danish guests, it must be kept for 1 year. This is solely for the purpose of making the information available to the police.
The Company may legitimately use a guest’s email address for marketing its own similar services as those purchased by the guest, such as an overnight stay. However, this requires compliance with the rules in Section 10 of the Danish Marketing Act, which means, among other things, that the guest must be informed that their email address may be used for marketing and that the guest must subsequently have the opportunity to opt-out of this. Additionally, the guest can easily and simply unsubscribe from this marketing.
Sending newsletters requires the guest’s consent.
The Company may retain guest information for longer than stated above if it is solely for statistical purposes. In such cases, the information must be anonymized.
The Company may retain personal data for an extended period, provided that the storage serves a legitimate purpose. For example, it may be legitimate to keep information about job applicants who were not hired for a period of time to counter any claims of discrimination. The Company may also seek consent to retain the information to contact the individual regarding future job postings.
When an employee leaves the Company, it may be legitimate to retain the personnel file for an extended period to counter any subsequent claims for back payments from former employees. Post-termination cases are subject to a 5-year statute of limitations, meaning claims can be made up to 5 years back.
If the Company retains personnel information for an extended period, only the information that the Company may need will be kept. Other information will be deleted.
Cookies
The Company and Personal Data (Privacy Policy)
The Company collects information about all visits to the Company’s website in compliance with applicable law.
Below, you can read why we collect information and what we use it for.
What information do we collect?
The Company’s website collects information about users and their visits in two ways:
- By using so-called cookies.
- By users themselves providing information.
Why do we use cookies?
Every visit to the Company’s website is recorded using cookies. Every time you – or more precisely – your computer visits the Company’s website, the cookie tells us about your visit.
The cookie tells us, among other things, how long you visit the website, which sections and how many articles are read, whether your computer has visited us before, which browser and operating system you use, etc.
The information is anonymous and is collected along with the information from all other users, providing us with a statistical overview of the use of the Company’s website.
At the same time, cookies ensure that you do not see the same advertisements repeatedly, and all clicks on advertisements are registered.
Additionally, we use the statistics in editorial work to further develop the Company’s website.
What is a cookie?
When you visit the Company’s website, your computer automatically receives one or more cookies, which are transferred from the Company’s website to your internet browser. The Company’s website then registers your visit and use of the website.
A cookie is a small text file. It contains no personal information, and the information we receive is therefore anonymous.
Most internet browsers allow you to delete cookies, block them, or warn you and request your acceptance before a cookie is saved.
Depending on which browser you use, you can find information in its settings and help functions on how to configure your browser to handle cookies.
Personal Information
In addition to cookies, several of the Company’s services require you to provide personal information.
In general, we only ask for personal information when, for example, you sign up for our newsletters or if you book a hotel stay through the Company’s website.
Contact
If you have questions, comments, or complaints regarding the Company’s processing of personal data, you can write to:
info@hotelkertemindestrand.dk, Attn.: John Smidt
If this does not lead to clarification, you can then submit a complaint to the Danish Data Protection Agency, Borgergade 28. 5th floor, 1300 Copenhagen K, phone 3319 3200, email dt@datatilsynet.dk.
Any changes to the privacy policy will be communicated by publishing new terms and conditions on the Company’s website.