This Privacy Notice is valid for all websites, applications or other services and offerings (collectively “the Services”) operated by High Roller Stay and its subsidiaries (“we”, “us”, or “High Roller Stay”).
In this document, we aim to transparently discuss how High Roller Stay collects, processes, and utilizes personal data in connection with your interaction with the Services. “Personal data” refers to any piece of information that could potentially identify you, whether on its own or when combined with other data.
Being a metasearch entity, High Roller Stay sometimes directs you to external third-party websites or applications. We must clarify that once redirected, the privacy practices of these third-party services are out of our jurisdiction.
Therefore, your activities on those services are governed by the respective privacy policies of those websites or applications, not by High Roller Stay ‘s Privacy Policy.
We recognize that continuous advancements in technology, modifications to our services, legislative changes, or other factors may necessitate updates to our Privacy Policy. To accommodate these changes, we will periodically update this document. We encourage you to remain up-to-date with this policy to understand how your personal data is treated in relation to the Services.
1. Who is responsible for the processing of personal data described in this Privacy Notice?
High Roller Stay controls the processing operations described in this Privacy Notice.
Should you wish to exercise your rights pertaining to data protection, or have general inquiries about how High Roller Stay processes your personal data or details regarding this Privacy Notice, you are encouraged to reach out to our dedicated team via email at privacy@highrollerstay.com.
For direct communication with our data protection officer (DPO), please address your email to privacy@highrollerstay.com and include “Attention: Data Protection Officer” in the subject line. It is important to note that correspondences sent to this address are not inherently confidential and may not be exclusively accessed by the DPO. If your matter requires a private conversation with our DPO, kindly specify your need for confidentiality in your message, and we will facilitate a secure exchange.
2. Your rights
You possess specific rights regarding your personal data. For details on how to contact us and to exercise these rights, please see Section 1.
2.1 General rights
Under applicable legal conditions, you are entitled to various data protection rights. These include the right to be informed (as per Article 13 of the GDPR), the right to obtain access to your data (Article 15 GDPR), the right to have data deleted (Article 17 GDPR), the right to correct inaccurate data (Article 16 GDPR), the right to limit data processing (Article 18 GDPR), and the right to transfer your data (Article 20 GDPR).
2.2. Right to revoke consent
At any moment, you hold the privilege to withdraw any consent you’ve granted us regarding the use of your personal information. Should you choose to do so, we will cease the processing of your data pertinent to that consent from thereon. Please note, however, that rescinding your consent will not impact the lawfulness of any data handling that took place under your consent prior to its withdrawal.
2.3 Right to object to processing of data based on legitimate interests
You have the right to challenge the processing of your personal information at any time, should you have concerns stemming from your unique circumstances. This applies when we handle your data based on our legitimate interests. Upon your objection, we will halt the use of your personal data, unless we can demonstrate strong and justified reasons for this processing that are more significant than your own rights, interests, and freedoms, or if such processing is necessary for the establishment, exercise, or defense of legal claims.
2.4 Rights to object to direct marketing
You have the right to opt out of direct marketing that involves the processing of your personal data at any time. For comprehensive instructions on how to exercise your right to object to direct marketing practices, please refer to Section 6.1 of our policy.
2.5 Right to complain to a supervisory authority
You are entitled to lodge a complaint with a relevant data protection agency if you suspect that the handling of your personal data infringes on prevailing data protection laws. You have the liberty to reach out to any data protection authority within the European Union, especially in your country of residence.
3. What data we collect from you
When you use our Services, we may process these types of personal data:
User data
Personal data collected for the creation of a member account, such as: your name, email address, password.
Contact details and other information you may share with us, such as your postal address, age, gender, country of residence, social network profiles, messages you sent to our team, feedback, comments, replies to surveys or interviews, participation to any of our promotional activities.
Usage data
Information about how you use our Services, including the details inputted by you when you conduct a search using our Services (including destination, date, number of guests, currency), deals viewed, and links clicked.
- Interaction with our marketing communication: we may collect information about your engagement with our direct marketing messages, including our newsletter and push notifications (for instance, analytics on the number of times you open our newsletter or click on hyperlinks in it).
- Booking data: When you use our Services and click a link to an accommodation offer that is listed on our Services, the online booking site making that offer may send us personal data relating to any subsequent booking or reservation that you make on the online booking site.
- Location data: We may process approximate location information based on your IP address (country or city level). Furthermore, with your prior consent, we may use GPS data to provide you with customized search results on your mobile.
- Technical data: Examples include IP address, cookies, identification data (session ID, member ID, device ID), access status/HTTP status code, browser software and version, operating system and its interface, internet service provider, language and other configuration settings.
4. Why and how we use your personal data
Below, we outline how and why we utilize your personal data, along with the specific legal grounds and the types of data this involves. We use your personal data for the following purposes:
- Service Provision: We process your data to enable you to compare accommodation prices, view offers, and find your ideal stay.
- Legal Grounds: Fulfilling a contract and obtaining your consent.
- Data Types: User, usage, booking, location, and technical data.
- Safety and Reliability: We maintain a secure and dependable environment on our Services.
- Service Improvement: We analyze how you utilize our Services and incorporate your feedback to refine our offerings, spot industry trends, and develop new features to enhance your user experience.
- Legal Grounds: Your consent and our legitimate interest.
- Data Types: User, usage, booking, and technical data.
- Marketing Communications: We send you information about our Services, advertise to you on our and third-party platforms, and manage promotion-related activities like sweepstakes and giveaways.
- Legal Grounds: Your consent and our legitimate interest.
- Data Types: User, usage, and technical data.
- Customer Support: We engage with you to answer inquiries, address your concerns, and provide customer assistance.
- Legal Grounds: Fulfilling a contract and protecting our legitimate interests.
- Data Types: User, usage, booking, and bank data.
- Third-Party Contract Fulfillment: We share data as necessary to complete agreements with third-party booking sites featured on our Services.
- Legal Grounds: Fulfilling a contract and protecting our legitimate interests.
- Data Types: User, usage, and booking data.
- Legal Compliance: We process data to comply with laws, cooperate with law enforcement, deter fraud, and uphold, assert, or defend against legal claims.
- Legal Grounds: Compliance with legal obligations, legitimate interest, and contract performance.
- Data Types: User, usage, booking, and technical data.
Please note that we take your privacy seriously and use your personal information responsibly. If you have any questions about how we use your data, feel free to reach out to us.
5. With whom we share your data
Your personal information may be shared with certain entities, always ensuring that a legitimate legal foundation is in place:
- Our wholly owned subsidiaries.
- Verification associates, including third-party sign-in services like Facebook, Google, or Apple when accessing our Services.
- External service agencies engaged for data processing on our behalf, such as hosting, data storage, customer support, communication services, security, fraud prevention, debt recovery, analytics, and promotional outreach.
- Independent service providers, who act as independent data controllers, offering auxiliary services including security, fraud prevention, social networks, and advertising.
- Collaborative partners for the joint promotion of products or services, which are marketed alongside ours in partnership with other entities.
- Travel-related vendors, such as hotels, airlines, rental car services, insurers, property managers, and providers of tourist activities or guides.
- Law enforcement authorities, in cases where it is necessary to thwart, investigate, or prosecute illegal deeds, address threats to state or public safety, or avert potential dangers to individual well-being.
- During significant business dealings, for instance, mergers, divestitures, consolidations, or the sale of assets.
- Transference of data to our processors is strictly for task execution purposes. We ensure our processors are judiciously chosen, commissioned under our directive, legally committed to our guidelines, and equipped with robust technical and organizational safeguards. Their performance and alignment with our standards are subject to our ongoing supervision.
6. How does High Roller Stay protect your data?
In dedication to protecting your personal information, we have implemented a range of technical and organizational safeguards designed to prevent your data from being altered, misplaced, destructed, or accessed by unauthorized individuals. Our protective strategies encompass methods such as pseudonymization, encryption, the use of firewalls, and strict access control protocols. We consistently evaluate and refine our security measures to align with the latest technological developments.
7. When will your data be deleted?
We retain your personal information for a duration necessary or allowable based on the reasons for its collection, aligning with relevant laws. Once this period concludes, we promptly delete the data, except in cases where we require it to comply with legal statutes, such as for civil law evidence or tax and accounting purposes, or if another data protection law dictates ongoing processing for particular cases. For any longer-term analytical or statistical use, your data will be anonymized to protect your privacy.