Privacy Policy — Hotelfest

1. Who is responsible for your data

2. Personal data we collect

We may collect information necessary to create and manage your account, process and manage accommodation bookings, communicate with you, provide support, process payments and refunds, and operate the website. This may include account and contact information, booking and guest information, payment-related information, communications with us, and technical or usage information generated when you use the website.

If you choose to register using a third-party authentication service, we may receive the information needed to create or access your account. Payments are processed by Stripe. We may receive payment status, transaction identifiers, payment method information and other limited payment-related information needed to manage a booking, payment or refund. We do not store full payment card details on our own servers.

3. How and why we use your data

We use personal data only where necessary to provide the services you request, manage your account and bookings, process payments and refunds, provide customer support, maintain security, prevent fraud, comply with legal obligations, and protect our legitimate business interests.

Where required by law, we rely on your consent for non-essential analytics and other optional technologies. We do not currently use advertising or retargeting cookies. You may withdraw consent at any time.

4. Sharing of personal data

We may share personal data only where necessary with accommodation providers, booking and service suppliers, payment service providers, hosting and IT providers, analytics providers, professional advisers, and public authorities where required by law. Stripe processes payment and related fraud-prevention information where necessary to provide payment services.

For accommodation bookings, only the information reasonably necessary to confirm and manage the booking and enable the guest to check in is shared with the relevant accommodation provider or booking supplier.

We may use Google Analytics where you have consented to the relevant cookies. We do not sell your personal data.

5. International transfers

Because accommodation may be booked worldwide, personal data may be transferred outside the European Economic Area where necessary to complete or manage a booking or where our service providers operate internationally. Where required, we use appropriate safeguards under applicable data protection law.

6. How long we keep your data

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing customer service, managing bookings and refunds, resolving disputes, protecting the interests of customers and the company, and meeting applicable legal, accounting, or regulatory requirements. When data is no longer required, we delete or anonymise it where appropriate.

7. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or portability of your personal data, and you may object to certain processing or withdraw consent where processing is based on consent. Requests may be sent to support@hotelfest.com.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate or another competent supervisory authority.

8. Cookies and advertising

We use essential cookies needed for the website to function. Non-essential analytics cookies are used only where you have provided the required consent. We do not currently use advertising or retargeting cookies. If such technologies are introduced in the future, they will be used only where the required consent has been obtained. More information is available in our Cookie Policy.

9. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

10. Children

The website is intended for users aged 18 and over. A person under 18 may be included as a guest in a booking made by an adult.

11. Changes and contact

We may update this Privacy Policy when necessary. The current version will be published on the website with its effective date.

For privacy or support questions, contact: support@hotelfest.com