General Data Protection Regulation (GDPR) Compliance
The Privacy of Your Data is Very Important to Us
The EU General Data Protection Regulation (GDPR) effective from May 2018 gives all EU citizens more rights and protections for their personal data.
These regulations include provisions for the following areas:
The right of access: Individuals have the right to know the details of their personal data that a company may hold. This information must be provided within one month of request at no charge to the individual.
The right to rectification: If a person’s data is incorrect or incomplete, he or she has the right to have it corrected. If the company that holds the information has passed any of it to third parties then the company must inform the third party of the correction and inform the person which third parties have their personal data.
The right to be forgotten: A person may request the removal of his or her personal data in specific circumstances.
The right to restrict processing: Under certain circumstances, an individual can block the processing of his or her personal data.
The right to data portability: A person can access their data for their own use anywhere they prefer.
The right to object: A person can object to the use of their personal data for most purposes.
Please, read the following carefully to understand our practices regarding personal data:
1. The Data Controller of www.mallachie.co.uk is:
Vacation Rental Support Llp
Registry number: SO306370
Registered Address: Summit House, 4-5 Mitchell Street, EDINBURGH, EH6 7BD, Scotland
Phone: 01479 420042
Vacation Rental Support LLP owns and operates the domain ‘mallachie.co.uk’ in order to advertise and receive bookings on behalf of the Property Owners of Mallachie Holiday Home, Kinchurdy Road, Boat of Garten, Cairngorms National Park, Scotland. Any such bookings received become agreements between the Guest who is hiring Mallachie Holiday Home and the Owners of the Property (see Terms and Conditions).
1.1 We are committed to safeguarding the privacy of our website visitors; in this policy, we explain how we will treat your personal information. We do not store credit card details nor do we share customer details with any 3rd parties.
2. COLLECTING PERSONAL INFORMATION
2.1 We may collect, store and use the following kinds of personal information:
(a) information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths);
(b) information that you provide to us when registering with our website, including your email address;
(c) information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (including your name and email address);
(d) information that you provide to us when using the services on our website, or that is generated in the course of the use of those services, including the timing, frequency and pattern of service use;
(e) information relating to any purchases you make of our services or any other transactions that you enter into through our website including your name, address, telephone number, email address, home information;
(f) information contained in or relating to any communication that you send to us or send through our website (including the communication content and metadata associated with the communication);
(g) any other personal information that you choose to send to us
3.2 Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.
3. USING PERSONAL INFORMATION
3.1Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website. We do not store credit card details nor do we share customer details with any 3rd parties.
3.2 We may use your personal information to:
(a) administer our website and business;
(b) personalise our website for you;
(c) enable your use of the services available on our website;
(d) supply to you services purchased through our website;
(e) send statements, invoices and payment reminders to you, and collect payments from you;
(f) send you non-marketing commercial communications;
(g) send you email notifications that you have specifically requested;
(h) send you our email newsletter, if you have requested it (you can inform us at any time if you no longer require the newsletter);
(i) send you marketing communications relating to our business which we think may be of interest to you, by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications);
(j) deal with enquiries and complaints made by or about you relating to our website;
(k) keep our website secure and prevent fraud;
3.3 If you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the licence you grant to us.
3.4 We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.
4. DISCLOSING PERSONAL INFORMATION
4.1 We may disclose your personal information to any of our employees, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy.
4.2 We may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any ongoing or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(d) to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and
(e) to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
(f) Users personal data may be disclosed to third parties which are companies that provide necessary website hosting and functionality services to mallachie.co.uk and to other service providers such as booking channel managers, payment providers such as Stripe, third party applications which integrate with the Services, as well as some third party service providers such as OTA’s (Airbnb, TripAdvisor etc) that may operate outside of the European Economic Area (EEA) for the performance of Services we provide to our users both Guests and Property Owners;
(g) Information that we collect may be transferred to the following countries which do not have data protection laws equivalent to those in force in the European Economic Area: the United States of America, Russia, Japan, China and India.
(h) Vacation Rental Support LLP may also disclose personal data of our users as required by law, or when we believe in good faith that disclosure is necessary to protect our rights, protect the safety of our users or the safety of others, investigate fraud, or respond to a government request.
(i) Except as provided in this policy, we will not provide your personal information to third parties.
5. INTERNATIONAL DATA TRANSFERS
5.1 Information that we collect may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this policy.
5.2 Information that we collect may be transferred to the following countries which do not have data protection laws equivalent to those in force in the European Economic Area: the United States of America, Russia, Japan, China and India.
5.3 Personal information that you publish on our website or submit for publication on our website may be available, via the internet, around the world. We cannot prevent the use or misuse of such information by others.
5.4 You expressly agree to the transfers of personal information described in this Section 6.
6. LAWFUL BASIS FOR THE PROCESSING OF PERSONAL DATA
Our collecting of personal data rests on more than one lawful basis as follows:
Contract: For both Property Owners and Guests the legal basis for the use of personal data will often be on the basis of 'contract'. For the Vacation Property Owner the contract will be regarding the services that We provide in relation to their vacation rental property and as outlined in the agreement between the Owner and Us. For the Guest it will be regarding our services that facilitate the booking of a holiday booking contracted between them, the Guest, and the Vacation Property Owner via either an OTA (Online Travel Agency such as AirBnB or TripAdvisor) or the platform of a vacation rental booking website that enables the Owner to receive a booking from the Guest. Certain contract data will be securely stored for up to seven years after each specific contract completes such as the last day of a Guests' holiday stay.
Consent: For some other types of data collection, processing, storage and usage the lawful basis is your consent. As an example, this would apply to email marketing/newsletter communications as opposed to necessary booking communications. For this sort of data handling you can revoke your consent at any time.
Legitimate Interests: we collect, process and use personal data in order to carry out, maintain and improve our services to both Guest and Vacation Property Owner as well as users of our website who may be neither Guest nor Owner.
Legal Obligations: some data we are legally obliged to retain. For instance, this would apply to any data needed to be kept for us to keep an account of financial records for HMRC tax accounting purposes. We are typically obligated to store such data for up to seven years.