The Lodge at Winchelsea

Registry of Activities

DEVONSHIRE HOTEL LTD. GDPR REGISTRY OF ACTIVITIES

RECORDS OF PROCESSING ACTIVITIES

Processing: Guests

Processing purpose

Management of guests’ relationships

Description of categories of guests

People with whom we maintain a business relationship as hotel guests

Categories of personal data

Those necessary for the maintenance of the business relationship. Invoicing, sending postal or email advertising, after-sales service and loyalty

Personal characteristics: marital status, date and place of birth, age, sex, nationality

Identification: first and last names, ID, postal address, telephones, e-mail

Bank details: payments

The categories of recipients to whom personal data were or will be communicated

Tax administration

Accountants

Booking Platform – EVIIVO

Possible deadlines for deleting the different categories of data

Those provided by tax legislation with respect to liabilities prescription

   

Processing: Potential Guests

Processing purpose

Management of potential guests’ relationships

Description of categories of potential clients

People with whom we maintain a business relationship as hotel guests

Categories of personal data

Those necessary for the commercial promotion of the hotel

Identification: first and last names, ID, postal address, telephones, e-mail

The categories of recipients to whom personal data were or will be communicated

Booking Agencies

Possible deadlines for deleting the different categories of data

One year from first contact

   

 

Processing: Employees

Processing purpose

Management of the employment relationship with employees

Description of categories of employees

People working for the controller

Categories of personal data

Those necessary for the maintenance of the business relationship. Payroll management, training

Identification: first and last names, ID, postal address, telephones, e-mail

Personal characteristics: marital status, date and place of birth, age, sex, nationality and disability percentage

Academic and Professional data

Bank details, for payment of payroll

Accountants

Possible deadlines for deleting the different categories of data

Those provided by tax legislation with respect to liabilities prescription

   

 

Processing: Candidates or Job Applicants

Processing purpose

Management of the relationship with job applicants in the hotel

Description of categories of candidates or job applicants

People wishing to work for the controller

Categories of personal data

The necessary ones to manage the curriculum of possible future employees

Identification: first and last names, ID, postal address, telephones, e-mail

Personal characteristics: marital status, date and place of birth, age, sex, nationality and others excluding race, health or trade union membership data

Academic data and Professional data

The categories of recipients to whom personal data were or will be communicated

Not applicable

Possible deadlines for deleting the different categories of data

One year from the submission of the application

   

 

 

 

 

 

Processing: Suppliers

 

Processing purpose

Management of supplier relationships

Description of categories of Suppliers

People with whom a commercial relationship is maintained as suppliers of products and / or services

Categories of personal data

Those necessary for the commercial relationship with the hotel

Identification: first and last names, ID, postal address, telephones, e-mail

Bank details: for direct debit payments

The categories of recipients to whom personal data were or will be communicated

Not applicable

Possible deadlines for deleting the different categories of data

Those provided by tax legislation with respect to liabilities prescription

   

 

Processing: CCTV Surveillance

Processing purpose

Security of persons and property/goods

Description of categories of personal data:

Stakeholders:

Persons accessing or attempting to access the facilities

Categories of personal data

Images

The categories of recipients to whom personal data were or will be communicated

Tax administration

Law enforcement authorities

Possible deadlines for deleting the different categories of data

One month from recording