Red Carnation Hotels UK Ltd.
COVID-19 processing activities specific privacy notice
Last updated: 23 July 2020, V1.0
This privacy notice supplements our standard privacy notice and should be read in conjunction with that notice. This privacy notice gives specific details about how we will deal with personal information in light of Covid-19.
Due to the current public health situation, Red Carnation Hotels UK Ltd. may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.
Red Carnation Hotels UK Ltd. will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Red Carnation Hotels UK Ltd. comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.
The purpose of this specific privacy notice is to inform our customers of what personal data Red Carnation Hotels UK Ltd. collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.
Who are we?
Red Carnation Hotels UK Ltd. is a company registered in under the laws of England and Wales under the registration number 3328595. Our registered address is 35 Charles Street, London, W1J 5EBV. All references to Red Carnation Hotels UK Ltd. referred to 'we', 'us', 'our' are references to Red Carnation Hotels UK Ltd., its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Red Carnation Hotels UK Ltd. personal data policies or practices, please contact us either by e-mail to firstname.lastname@example.org, or by post to Red Carnation Hotels Marketing, 14 Grosvenor Place, London, SW1X 7HH.
We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.
What personal data do we collect?
Depending on the situation, we may collect the following information:
Why do we collect personal data?
Depending on the situation, we collect and process your personal data for the following purposes:
What are our legal grounds to collect and process your personal data?
We rely on the following legal bases to collect and process your personal data:
Special category data
Depending on the circumstances, we rely on the following legal bases to collect and process your health information:
Who are we sharing your personal data with?
We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:
We will not share your data outside of the European Economic Area (EEA) except when:
How long do we keep your data for?
We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:
We will delete/destroy your personal data immediately after the relevant retention period above is reached.
How do we protect your data?
We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.
The information you share with us under the scope of this Privacy Notice will be secured by additional technical and organisational measures and only staff required to see this information will be able to access it on a “need-to-know” basis.
Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.
What are my rights and how do I exercise them?
You have the right to:
If you wish to exercise any of your rights, please contact us either by e-mail to email@example.com, or by post to Red Carnation Hotels Marketing, 14 Grosvenor Place, London, SW1X 7HH.
IYou will not have to pay a fee to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances and we will explain the reasons in our response to you.
IYou also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.
Further information about your rights is included in our standard Privacy Notice which this Notice supplements.