1 WHO WE ARE
For the purposes of the General Data Protection Regulation (GDPR), the data controller is Resort Solutions Limited (company number: 05153737) of Coombe Hill House, Beverley Way, London, SW20 0AR. We are registered as a data controller with the Information Commissioner’s Office with registration number: Z8935499.
2 WHAT INFORMATION WE COLLECT AND PROCESS AND HOW
2.1 The information we collect about you may include:
3 WHAT WE DO WITH YOUR INFORMATION
3.1.1 to administer and reply to your enquiry. We have a legitimate interests in processing your personal data in this way as without processing your data we would be unable to reply to you;
3.1.2 where we hold your personal data because you are a resort owner under a timeshare membership contract, we will process your data to perform the requirements of the contract to which you are a party in relation to that ownership;
3.1.3 where we hold your personal data because you stayed at a resort to which we provide management services, we process this data in order to perform the contract in relation to your stay to which you are a party;
3.1.4 to ensure that the content from our Website is presented in the most effective manner for you and your computer;
3.1.5 as part of our efforts to keep our Website safe and secure; and
3.1.6 for analytical and statistical purposes.
3.2 Where we use your personal data for marketing purposes, we will provide you with an opportunity to unsubscribe from receiving email communications as part of every email we send to you. We may also send postal marketing to members to inform them about our special offers which are only available to them as resort owners. If you would like to stop receiving marketing communications from us, you can ask us to stop by unsubscribing using the unsubscribe link which is at the bottom of every email you receive from us; by emailing us at: email@example.com; or alternatively by contacting us by post or on the telephone using our contact details at section 8 below.
4 SHARING YOUR PERSONAL DATA WITH THIRD PARTIES
4.1 We will only supply your personal data to a third party:
4.1.1 where we need to share the information to provide a product or a service requested by you, including as necessary for the performance of our obligations as the management company which provides resort management services to your resort, with the exchange organisations and providers of ancillary services such as airport transfers and car hire;
4.1.2 where we need to send the information to persons or organisations who work on our behalf to provide a product or service to you, but such persons or organisations may only use this information in order to provide such product or service and not for any other purposes; and
5 INFORMATION WE COLLECT FROM THIRD PARTIES
5.1 We may collect personal information about you from third parties including your name, address, email address, contact number and holiday preferences.
6 WHERE WE STORE YOUR INFORMATION
6.1 The data we collect from you may be transferred to and stored at a destination outside of the European Economic Area (EEA). It may also be processed by staff operating outside of the EEA who works for us, one of our group companies or our suppliers for the purposes set out in section 3 above only. In order to ensure that any third party processes your personal data in a way which is consistent with the UK and EU’s laws on data protection, to the extent that we share data outside of the EEA, we will seek to put in place agreements with those third parties, including with our group companies, which contain provisions approved by the EU for protecting personal data.
6.2 We will retain your personal information for seven (7) years from the point at which you cease to be a member or owner of a timeshare interest, after which time it will be purged or otherwise removed from our systems. For non-members and for other individuals who do not own a timeshare interest at the resorts we manage, we will destroy any personal data we have collected about you three (3) years after you last transacted with us.
7 YOUR RIGHTS IN RESPECT OF YOUR INFORMATION
7.1 The GDPR gives you a number of rights in respect of your data, including:
Right to access
7.2 You have the right to request a copy of any information that we hold about you. If you would like a copy of this information please contact us by writing to us at: The Data Protection Administrator, Resort Solutions Limited, St Mary’s House, St Mary’s Road, Market Harborough, Leicestershire, LE16 7DS or email us at firstname.lastname@example.org. We may request proof of your identity before sharing such information with you.
Right to rectify your personal data
7.3 If you discover that the information we hold about you is incorrect or out of date, you may ask us to correct that information.
Right to be forgotten
7.4 You may ask us to delete information we hold about you in certain circumstances. It may not be possible for us to delete all of the information we hold about you where we have an ongoing relationship, however please contact us and we will do our best to assist with your request.
7.5 Where we process your data on the basis that you have consented to such processing, you have the right to withdraw your consent at any time by unsubscribing or contacting us.
7.6 In addition to the above, you may also ask us to stop or restrict processing of the personal data we have about you. You may also ask us to transfer your personal data to a third party in certain circumstances. If you would like any other information on these aspects of your rights, please contact us.
8.1 If you have any questions, want to exercise any of your rights or make a complaint, please contact us by writing to us at: The Data Protection Administrator, Resort Solutions Limited, St Mary’s House, St Mary’s Road, Market Harborough, Leicestershire, LE16 7DS, email us at email@example.com or call us on 01858 431160.
8.2 If we are unable to resolve your complaint you may contact the Information Commissioner’s Office at the Exchange Tower, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; telephone number: 0303 123 1113.
9 OTHER WEBSITES
10.1 This policy may be reviewed and amended from time to time.
10.2 As a result of improvements we make to our services, changes in the law or developments in technology, we may change the information we hold about you or the method and purposes for which we process such information. If we make any substantial change in the way in which we use your personal information we will notify you by email.