This Privacy Statement details the privacy practices of Killeavy Castle Estate. We have focused on implementing the practices of Fairness, Transparency and Accountability to protect your privacy. We respect your trust in us to use, store and share your personal information. In this Privacy Statement we explain how we collect personal information about you, how we use it and how you can communicate with us regarding the use of your personal information. This Privacy Statement relates to personal information that we collect through websites operated by us and not to personal information which we collect “off line”. By willingly providing personal information and other information to us you are consenting to the terms and conditions of this Privacy Statement.
This Privacy Statement is authored in accordance with The Data Protection Act (2018) and the EU General Data Protection Regulation (EU GDPR 2018).
In accordance with EU GDPR legislation, Killeavy Castle Estate is identified as Data Controller and is responsible for the processing of your personal information.
WHO WE ARE
Killeavy Castle Estate, located at 12 Ballintemple Road, Killeavy, Newry, Co Armagh, is the perfect antidote to the modern fast paced world. Encompassing a beautifully restored Castle, Boutique Hotel accommodation and Spa, Killeavy Castle Estate is the ideal place to escape, retreat, relax and unwind. As the centrepiece of 350 acres of mixed farm and woodland in County Armagh’s stunning Slieve Gullion.
At Killeavy Castle Estate our mission is all about “Get closer to what’s important” be this nature, family, friends, or history.
HOW WE COLLECT PERSONAL INFORMATION ABOUT YOU
When you browse our website www.killeavycastle.com, we may ask for personal information (such as your name, email address. We may also collect information about you when you are on the internet such as the website you came from, IP address, domain types, i.e.,.co.uk and.com), your browser type the country where your internet service provider is located, the pages of our site that were viewed during your visit and search terms that you used. This information is only used for our own research and to improve our service to you. Your IP address is also used to gather broad demographic information.
HOW WE USE YOUR PEROSNAL INFORMATION
In accordance with EU GDPR legislation we will rely most commonly on the following legal bases to collect and to further process your personal information.
Our Legitimate Interests
Vital Interest of Guests Visitors or “Others”
Legal & Regulatory Obligation
We may process your personal information for more than one lawful basis depending on the specific purpose for which we are using your personal data.
We set out below a description of various ways we process your personal information and details of the legal bases we rely on to do so. Please note that this is not an exhaustive list of our processing activities. For further detail regarding our lawful basis for processing your personal information please email, Mr Jason Foody, email@example.com
|CATEGORY OF DATA||LAWFUL BASIS|
To register you as a customer
|Contact details, Proof of ID||Contractual Necessity|
To process your booking
|Contact details, Proof of ID||Contractual Necessity|
To Manage payments and charges
|Financial||Necessary for our legitimate interests|
To manage our relationship with you
|Contact, Identity detail||Contractual necessity, our Legitimate Interests|
To Market Services/Products
| Contact, Proof of ID
To Enable you to partake in our Spa facilities
|Contact, Health detail||Explicit Consent, our Legitimate Interests|
To enable you to partake in Special Offers
|Contact detail, ID detail||Contractual Necessity|
To administer & protect our business and our website
|ID, Contact, Technical||Our Legitimate Interests, Legal Obligation|
|To use data analytics to improve our website, products, services, customer relationships||Technical||Necessary for legitimate interests|
SOURCE OF COLLECTION
You provide your personal information to us when you visit our website www.killeavycastle.com We also collect your personal information when you send us an email, subscribe to our company newsletters, send an enquiry, when you enter any of our competitions or take part in any of our special offers. In circumstances, where you have consented to receiving marketing correspondence from Killeavy Castle Estate your personal information will also be processed.
There may be occasions when we receive personal information from a Third-Party Stakeholder to process personal information under their express instructions when Killeavy Castle Estate are contracted to particular projects.
Killeavy Castle Estate use the social media platforms of Facebook, Twitter, Instagram, Linked In, personal information may be collected through these platforms.
Yes. A Cookie is an element of data that a website can send to your browser, which may then be stored on your system. You can set your browser to notify you when you receive a Cookie, giving you the opportunity to decide whether to accept it. We use one type of Cookie to maintain your login information for as long as you are using the site. No Personal Information is stored in this Cookie and the Cookie is deleted from your computer when you leave the site.
Killeavy Castle Estate uses Google Analytics to analyse its website performance. The information Google Analytics gathers using our website’s cookies generate generic reports about the use of our website.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH
At Killeavy Castle Estate we share your personal information both internally and externally, however we do so on the legal bases of Legitimate Interest, Consent, Legal Obligation.
Personal Information is shared externally when we are legally obliged to do so and also when we are mandated by Regulatory Bodies’.
There may be occasions when your personal information will be shared with external service providers. We require that all third parties respect the security of your personal information and that they also comply with current data protection legislation. We do not allow our Third-Party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our explicit instructions.
When your personal information is shared internally by Killeavy Castle Estate, access to your personal information is on a need to know basis and necessary for the provision of our services. Where you have consented to receiving marketing information from us your personal information will be shared with the relevant department.
It is not our practice to transfer personal information outside the EU/EEA. However, if guests and visitors beyond the EU/EEA territories sign up to our newsletters and special offers and opt in to receipt of marketing information we will contact you to deliver these specific purposes.
HOW WE STORE YOUR DATA SECURELY
We have implemented appropriate operational and technological security measures to prevent the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your personal information. We take commercially reasonable steps to protect your personal information when you transmit it from your computer to our site and to protect such personal information from loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction. You should be aware that no internet transmission is ever 100% secure or error free. In particular, email sent to or from the site may not be secure, you should therefore take special care in deciding what information you send to us by email. Where you use passwords, ID numbers or other special access features on this site, it is your responsibility to safeguard them.
We have also implemented data breach detection procedures and a data breach response plan. In the event of data breach occurrence where we are legally obligated to notify you, we will inform you accordingly.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION
We will only retain your personal information for as long as is necessary to enable us to provide and deliver our services to you. We will always identify our legal basis to collect and further process your personal information. Independent statutory legislation and the mandatory requirements of Regulatory bodies will influence our retention periods of various categories of personal information.
Where possible we may anonymise your personal information (so that it can no longer be associated with you), for research, or statistical purposes in which case we may use this information indefinitely without further notice to you.
LINKS TO OTHER SITES
Killeavy Castle Estate website may contain links to other sites. Please note that Killeavy Castle Estate is not responsible for the privacy policies or practices of these sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every site that collects personally identifiable information.
YOUR RIGHTS UNDER DATE PROTECTION LEGISLATION
In accordance with current data protection legislation, The UK Data Protection Act 2018 and EU General Data Protection Regulation (2018) you are afforded the following rights in certain circumstances. Please be aware that not all “rights” are absolute and exemptions may apply.
Right of Access: You have the right to obtain confirmation from us whether or not we process personal information about you and where that is the case, access to the personal data, including the purposes of the processing and the categories of personal data concerned. The recipients or categories or recipients to whom the personal information have been or will be disclosed.
You may also submit a written request for a copy of personal information you believe we may be processing about you. Upon such a written request Killeavy Castle Estate will verify the validity of the request for security purposes. Your subject access request will be responded to within thirty days, however, where the request is considered to be unreasonable or onerous such requests will be responded to within a two-month time period.
Right to Rectification: You have the right to the rectification of inaccurate personal information about you without undue delay.
Right to Erasure: You may ask us to delete your personal information, however this is not an absolute right and any such request will be considered in connection with our legal obligations and under the legal framework of the EU GDPR.
Right to Restricting and Objecting: You have the right to restrict or object to us using your personal information.
Right to Data Portability: Upon your written request, where possible we can share a digital copy of your personal information with you or another organisation.
If we are processing information based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.
HOW YOU CAN CONTACT US
We have appointed a Data Privacy Manager who is responsible for overseeing questions or queries relating to data protection issues. Should you have any questions, including any requests to exercise your legal rights, please contact the Data Privacy Manager, Mr Jason Foody by emailing firstname.lastname@example.org.
You can also contact the Information Commissioner’s office at, 3rd Floor, 14 Cromac Place, Belfast BT7 2JB. Tel: 028 90278757, email: email@example.com
CHANGES TO THIS PRIVACY STATEMENT