PRIVACY POLICY
Effective from May 25, 2018
Contents
1 Introduction
2 What is personal data and what does processing personal data involve?
3. Who does this policy apply to?
4. What does this policy cover?
5. What does it mean to be a data controller?
6. Giro Pizzeria (Miss Clara AB) as a Data Controller
7. Why are we allowed to process personal data?
8. What personal data do we collect?
9. How long do we store personal data?
10. Our measures to protect your personal data
11. When do we share personal data?
12. Your Rights
13. Changes to this Policy
14. Contact
1. Introduction
Thanks for choosing Giro Pizzeria (Miss Clara AB), and a huge thank you for taking the time to carefully read through this Privacy Policy. We want to start with a quick summary explaining why we created this policy. Our main goal is to clearly and simply explain
• explain the roles you and we have in this context
• explain how we use the information you share with us so we can deliver and continue to develop Sweden's best hotel experience;
• make sure you understand what information we collect and what we actually do with it;
• show you how we work to protect your rights and your privacy.
Our goal is that after reading this policy, you'll feel confident that your personal privacy is respected and that your personal data is handled correctly. We also continuously work to ensure that our processing of personal data fully complies with current legislation, especially the new Data Protection Regulation (GDPR) which has been in effect since May 25, 2018.
2. What is personal data and what does processing personal data involve?
2.1 Personal data is any information that can be linked directly, or indirectly with other information, to a living physical person. A non-exhaustive list of examples of personal data includes:
• Name
• Personal ID number
• Credit card number
• Email address
• IP address
• Images
2.2 Processing personal data includes every action taken with personal data, regardless of whether it's automated or not. This means that the following actions, among others, are covered:
• Collection
• Registration
• Use
• Combination
• Transfer
• Deletion
3. Who does this policy apply to?
This Privacy Policy primarily applies to individuals staying at our hotel whose personal data we process (the "Data Subject"). Different parts of this Privacy Policy might also be relevant to you depending on your relationship with Giro Pizzeria (Miss Clara AB). In summary, this policy applies to people who
• are guests at our hotel
• dine at our restaurant
• arrange meetings or events in our venues
• visit our website or interact with us on social media
• communicate with us in other ways, for example, with our customer service
By agreeing to this Privacy Policy, you consent to Giro Pizzeria (Miss Clara AB) processing your personal data in accordance with this Privacy Policy.
4. What does this policy cover?
This Privacy Policy governs how Giro Pizzeria (Miss Clara AB) collects and processes personal data to deliver and continue developing our Services.
5. What does it mean to be a Data Controller?
A Data Controller is a person, company, or other organization that decides the purpose and methods for processing personal data. For example, a company acts as a Data Controller for the personal data it holds about its employees, customers, suppliers, and others.
6. Giro Pizzeria (Miss Clara AB) as Your Data Controller
Giro Pizzeria (Miss Clara AB) (org.nr. 556866-2984) is the Data Controller for processing your personal data within the scope of Giro Pizzeria (Miss Clara AB) Services, and we're responsible for ensuring that such processing complies with applicable legislation.
7. Why are we allowed to process personal data?
7.1 For us to legally process personal data, there must always be a reason under GDPR, known as a 'legal basis.' Some of these legal bases include:
• your consent
• when processing your personal data is necessary to fulfill an agreement with you, like an agreement for using our Services
• to meet a legal obligation, for example, like keeping records due to accounting requirements
• after weighing our interests, we decide that Giro Pizzeria (Miss Clara AB)'s interest in processing a piece of personal data is greater than your interest in protecting it.
7.2 Giro Pizzeria (Miss Clara AB) always processes your personal data according to applicable laws. Our main reason for processing your personal data is that it's necessary to fulfill our agreement with you regarding the use of our services.
7.3 Sometimes, the same personal data might be processed based on fulfilling an agreement, your specific consent, or because the data is needed to meet other legal obligations. This means that even if you withdraw your consent and the processing based on that consent stops, we might still keep your personal data for other purposes.
8. What personal data do we collect?
In this part of our policy, we want to give you some examples of how we handle personal data to make sure we always deliver fantastic experiences with a high level of service.
8.1 When you book a room at our hotel
When you book a room at our hotel, whether the booking is made at the hotel reception, by phone, via email, or on http://www.giropizzeria.com, we process the following information that you provide to us:
• Your name and contact information (phone number, email)
• Credit card number and other payment information
8.1.1 We process your personal data to:
• Identify you for your booking and stay at Giro Pizzeria (Miss Clara AB)
• Charge you for the services and products you've bought from us
• Contact you with information about your stay, for example, via email and SMS
• Generate statistics and conduct analyses to improve our Services, goods, and offers
• Provide, maintain, test, improve, and develop our Services and the technical platform used to provide them
• Ensure the security of our Services, to detect or prevent various types of illegal use or use that otherwise violates our terms of service
• Inform you about personal and customized offers, campaigns, and benefits from us and our partners, for example, via email and SMS
8.1.2 Legal basis for processing:
We process your personal data based on fulfilling our agreement when we meet our commitments to you as a hotel guest (e.g., when we manage services related to your hotel room and provide relevant offers). We also rely on a balancing of interests when we have a legitimate interest in using data about your stay and purchases to generate statistics and to develop, improve, and ensure the security of our Services.
8.1.3 How long we keep your info:
We keep your personal data during your hotel stay and for up to 3 months after. To keep track, we save info about our chats with you for 12 months. Your hotel history is kept for up to 2 years because we're interested in seeing trends over time.
8.2 When you book a table at our restaurants
When you book a table to eat at our restaurants, whether the booking is made inside the restaurant, by phone, via email, or on http://www.giropizzeria.coms, we process the following information that you provide to us:
• Your name and contact information (phone number, email)
8.2.1 We handle your personal data to:
• Identify you for your booking and restaurant visit with us
• Charge you for the services and products you've bought from us
• Contact you with information about your stay, for example, via email and SMS
• Generate statistics and conduct analyses to improve our Services, goods, and offers
• Provide, maintain, test, improve, and develop our Services and the technical platform used to provide them
• Ensure the security of our Services, to detect or prevent various types of illegal use or use that otherwise violates our terms of service
• Inform you about personal and customized offers, campaigns, and benefits from us and our partners, for example, via email and SMS
8.2.2 Why we handle your data:
We handle your personal data because we need to fulfill our agreement with you as a restaurant guest (like managing your table booking service and giving you relevant offers). We also do it based on a balancing of interests, as we have a good reason to use info about your visits and purchases to create stats and to develop, improve, and keep our Services safe.
8.2.3 How long we keep your info:
We keep your personal data for up to 3 months after your restaurant visit. To keep track, we save info about our chats with you for up to 12 months. Your visit history is kept for up to 2 years because we're interested in seeing trends over time.
8.3 When you book our meeting and event spaces
When you book one of our wonderful meeting or event venues, whether the booking is made at the hotel reception, by phone, via email, or on http://www.giropizzeria.coms, we process the following information that you provide to us:
• Your name and contact information (phone number, email)
8.3.1 We handle your personal data to:
• Identify you for your booking and your experience at our hotel
• Charge you for the services and products you've bought from us
• Get in touch with you about your booking, like by email or text message
• Generate statistics and conduct analyses to improve our Services, goods, and offers
• Provide, maintain, test, improve, and develop our Services and the technical platform used to provide them
• Ensure the security of our Services, to detect or prevent various types of illegal use or use that otherwise violates our terms of service
• Inform you about personal and customized offers, campaigns, and benefits from us and our partners, for example, via email and SMS
8.3.2 Why we handle your data:
We handle your personal data because we need to fulfill our agreement with you as a visitor (like managing service for your meeting or event booking and giving you relevant offers). We also do it based on a balancing of interests, as we have a good reason to use info about your visits and purchases to create stats and to develop, improve, and keep our Services safe.
8.3.3 How long we keep your info:
We keep your personal data for up to 3 months after your visit. To keep track, we save info about our chats with you for 12 months. Your visit history is kept for up to 2 years because we're interested in seeing trends over time.
8.4 When you get in touch with us
You can chat with us in a few ways, like through our social media pages or by calling or emailing our customer service.
When you communicate with us, we handle the following info you give us:
• Your name and contact information (phone number, email)
• Info about your question, feedback, or issue
8.4.1 We handle your personal data to:
• Answer your questions and sort out your issue, like fixing problems and handling complaints
• Make our Services better and improve the info we share through our different channels
8.4.2 Why we handle your data:
We handle your personal data based on our shared legitimate interest in taking care of your request (this is called a balancing of interests).
8.4.3 How long we keep your data:
To keep track of things, we save information about our conversations with you for 12 months.
8.5 When you use our Wi-Fi or check out our website
When you connect to our Wi-Fi, we're responsible for the data processing that gets you online. However, we're not responsible for what happens after that or for the content of your Wi-Fi communication. When you connect to our Wi-Fi, we process:
• Your IP and MAC address
When you visit our website, we process:
• Information about how you interact with and use our website, for example, when booking a hotel room
• Information about your visits to our website, through so-called cookies. For more information on how we use cookies, please see https://www.missclarahotel.com...
8.5.1 We process your personal data to:
• Provide our digital services
• Give you support when you run into technical issues
• Maintain, test, and improve our digital services
• Detect and prevent security attacks, like virus attacks
8.5.2 Legal basis for processing:
We process your personal data to fulfill our agreement when providing Wi-Fi. We also do this based on a balancing of interests for our legitimate reasons to maintain, test, and improve our digital services.
8.5.3 How long we keep your data:
We keep your personal data for 3 months after you've used our digital channels and for 6 months from when you connected to our Wi-Fi.
9. How long do we store personal data?
We only keep your personal data for as long as we need it to achieve the purposes we collected it for, as explained in this Privacy Policy. Giro Pizzeria (Miss Clara AB) might keep the data longer if we need to follow legal requirements or protect our legal interests, for example, if there's an ongoing legal case.
10. Our measures to protect your personal data
10.1 Here at Giro Pizzeria (Miss Clara AB), we've made sure to put in place the right technical and organizational measures to protect your personal data from things like loss, misuse, and unauthorized access.
10.2 To make sure your personal data is handled securely and confidentially, we use digital networks that are protected against intrusions with things like encryption, firewalls, and password protection. If an intrusion ever happens, Giro Pizzeria (Miss Clara AB) has solid procedures in place for identifying it, minimizing damage, and reporting. Plus, we've developed a smooth process to make sure your rights as a data subject are met, including your right to be forgotten.
10.3 To make sure everyone has a good understanding of how we handle personal data, we regularly provide GDPR training for both Giro Pizzeria (Miss Clara AB) employees and any consultants we bring in to work with us.
11. When do we share your personal data?
11.1 Giro Pizzeria (Miss Clara AB) won't sell, disclose, or share your personal data with third parties, except as mentioned in this Privacy Policy. As part of our Services, we might pass on personal data to subcontractors and partners if it's necessary to perform and provide our company's services. If we do decide to share personal data, we'll sign a data processing agreement to make sure the recipient handles this data according to the law and has taken all the necessary technical and organizational steps under GDPR to properly protect your rights and freedoms.
11.2 Also, we might have to disclose personal data if required by law, a court order, or if it's otherwise necessary to help with a legal investigation.
12. Your Rights
12.1 Giro Pizzeria (Miss Clara AB) is responsible for making sure your personal data is processed according to current laws.
12.2 Giro Pizzeria (Miss Clara AB) will, at your request or on its own initiative, correct, de-identify, delete, or supplement data found to be inaccurate, incomplete, or misleading.
12.3 You have the right to request access to your personal data. This means you have the right to request an extract from the register regarding the processing of your personal data that we carry out. You also have the right to receive a copy of the personal data being processed. Once per calendar year, you have the right to obtain a free register extract, via a written and signed application, detailing what personal data is registered about you, the purposes of the processing, and to which recipients the data has been or will be disclosed. You also have the right to receive information in the register extract about the foreseen period during which the data will be stored or the criteria used to determine this period.
12.4 You have the right to rectification of your personal data. At your request, we will correct any inaccurate or incomplete data we process about you as quickly as possible.
12.5 You have the right to erasure of your personal data. This means you have the right to request that your personal data be deleted if it is no longer necessary for the purpose for which it was collected. However, there may be legal requirements preventing us from immediately deleting your personal data, for example, due to applicable accounting and tax legislation.
12.6 You have the right to object to personal data processing carried out based on a legitimate interest assessment. If you object to such processing, we will only continue the processing if there are legitimate grounds for the processing that outweigh your interests.
12.7 If you do not want us to process your personal data for direct marketing, you always have the right to object to such processing by either unsubscribing directly in each specific email or by sending an email to gdpr@giropizzeria.se. Once we have received your objection, we will stop processing your personal data for such marketing purposes. If you are not satisfied with how we handle your personal data, you also have the option to report our processing of your personal data to the Swedish Data Protection Authority (Datainspektionen). However, for smooth and efficient handling, we recommend that you first contact us so we can help you with any questions or concerns.
13. Changes to this Policy
Giro Pizzeria (Miss Clara AB) reserves the right to revise this Privacy Policy from time to time. The date of the latest change is indicated at the end of the Privacy Policy. If we make any changes to the Privacy Policy, we will publish these changes on the website. You are therefore recommended to read this Privacy Policy regularly to be aware of any changes. If we change the Privacy Policy in a way that significantly differs from what was stated when your consent was collected, we will notify you of these changes and, if necessary, ask you to re-consent to Giro Pizzeria (Miss Clara AB)'s personal data processing.
14. Contact
Giro Pizzeria (Miss Clara AB) (org.nr. 556866-2984) is the data controller responsible for the processing of your personal data. If you would like further information on how your personal data is handled, please contact us by sending a written, personally signed request to:
Giro Pizzeria (Miss Clara AB)
Sveavägen 48, Box 1616
111 34 Stockholm
In the letter, please provide your name, address, email, phone number, and personal identification number in addition to your request. Please also include a copy of your identification. A response will be sent to your most recently registered residential address.
