1. PERSONAL DATA
“Personal Data” in this Policy refers to data that can identify an individual.
2. COLLECTION OF PERSONAL DATA
The types of Personal Data collected includes, among other things (depending on the nature of your interaction with us):
NRIC number, FIN number, passport number
Date of birth
Country of birth / nationality (vi) Vehicle number
Credit card information
Frequent flyer or travel partner programme affiliation and member numbers
You may have provided the Personal Data to us personally or authorized other individuals to provide the Personal Data to us and consent (on your behalf) to our collection of your Personal Data from these individuals. These individuals could be your superiors, employees, subordinates, colleagues and your family members. Where you give us Personal Data about other individuals, you confirm that you are authorised to disclose and consent, on their behalf, to the processing of such Personal Data for the purposes described in Section 3, or other purposes for which your consent has been sought and obtained.
If you are located in the European Union or other regions with laws governing data collection and use that may differ from Nepal law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. We’ll only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation (GDPR- from 25th May 2018) and the Nepal’s Electronic Transaction Act 2063
FOR EU RESIDENTS ONLY
In addition to our policies above, Dom Himalaya Hotel may retain or disclose your Personal Data if we have a good faith belief that such processing is reasonably necessary to:
comply with applicable law, regulation, court order, legal process or other binding request;
prevent harm, injury or damage to us, our property, our staff or members of the public;
defend our legal rights or enforce the applicable Terms of Service;
or detect, prevent, or otherwise address fraud or security issues.
Personal Data Transfers
In addition to our policies above, please note that your Personal Data may be transferred to and stored in countries which do not provide the same level of protection for personal data as under your local law. The rights of governmental and law enforcement authorities to access your Personal Data may also differ. By using or visiting Dom Himalaya Hotel’s website, you authorise us to use your Personal Data in Nepal where we operate.
Direct Marketing Opt-Out
Provision of your Personal Data for the Dom Himalaya Hotel's direct marketing activities is voluntary and Dom Himalaya Hotel will not use your Personal Data for direct marketing purposes without first obtaining your consent in accordance with applicable law. You may withdraw your consent at any time by following the unsubscribe link in our direct marketing emails or by contacting our Data Protection Officers at [email protected]
We do not inadvertently acquire Personal Data or other information from users under the age of 16 and will not knowingly provide this data to any third party for any purpose.
If you are under 16 years old, you may not submit any personal data to us. If a child does provide us with Personal Data over Services, a parent or guardian of that child may contact us and upon notification, we will delete from our records any information collected from children under the age of 16.
3. PURPOSES FOR COLLECTION AND USE OF PERSONAL DATA
Generally, we collect and use Personal Data for the following purposes:
If you are a guest of Dom Himalaya Hotel (including guests and customers of our restaurants, food & beverage outlets, meetings and events services)
To provide products and services to guests and to respond to guests’ queries, requests and feedback
To provide, run, operate, administer and manage loyalty programmes and rewards programmes
To keep guests updated on Dom Himalaya Hotel's products and services, including promotions, loyalty and reward programmes, for guests who have opted to receive updates. (iv) To seek feedback from guests and evaluate Dom Himalaya Hotel's products and services and how Dom Himalaya Hotel can improve its products and services
To manage the administrative and business operations of Dom Himalaya Hotel
To comply with applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on Dom Himalaya Hotel
If you are a Vendor / Service Provider / Business Partner of Dom Himalaya Hotel
For the purposes of the supply of products and services and support by vendors / service providers / business partners to Dom Himalaya Hotel and the evaluation of such products and services
Processing and payment of vendor invoices
To manage the administrative and business operations of Dom Himalaya Hotel
To comply with applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on Dom Himalaya Hotel (v) Security checks
To evaluate applications for employment, internships and industrial attachments with Dom Himalaya Hotel
In relation to particular products and services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data and sought your consent to such purposes. We only collect and use Personal Data for purposes for which you have consented to. If we need to use your Personal Data for any purpose to which you have not previously consented, we will seek your consent prior to using your Personal Data for the new purpose.
4. DISCLOSURE, SHARING AND TRANSFER OF PERSONAL DATA
Dom Himalaya Hotel does not sell or rent Personal Data that we collect from individuals, including our website visitors. We disclose and transfer Personal Data to the following parties for the purposes of managing, operating, administering and running our business and for our business and legal purposes, and in the course of or in connection with providing our products and services to our guests:
To government and non-government authorities, agencies and/or regulators as required under applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies
To our business partners for the purposes of providing products and services to our guests Dom Himalaya Hotel requires that the parties to whom we transfer Personal Data and our service providers implement adequate levels of protection in order to protect Personal Data. We also require that these parties only process Personal Data strictly for purposes for which we engage them for and consistent with the purposes that we have described in the section “Purposes for which we collect and use Personal Data” or with other purposes for which consent has been sought and obtained. Dom Himalaya Hotel’s website may contain links to third parties which are not controlled by us and which are not covered by this Personal Data Policy. You are responsible for reviewing the privacy policies for all such third parties before disclosing your Personal Data to any third party, directly or indirectly.
In addition, we would disclose Personal Data in the following circumstances:
When we are required to do so by law
In response to a request from law enforcement authorities or other governmental officials
To comply with a court order or direction from a government agency or regulatory authority ordering the disclosure of the Personal Data and
Where disclosure is necessary for investigations or legal proceedings
5. COOKIES AND OTHER TECHNOLOGIES
This website may contain "cookies", clear gifs (also known as web beacons or web bugs), or similar technology. A cookie is a piece of data that is sent to your Internet browser, which will store the cookie on your computer if your browser is enabled to accept cookies. Web beacons assist in the delivery of cookies and the collection of non-personally identifiable information, such as "click path" and other data as described above.
6. PROTECTION AND SECURITY OF PERSONAL DATA
Dom Himalaya Hotel employs a reasonable range of technology and physical security arrangements and maintain safeguards to protect against the accidental or unauthorized access, collection, use, disclosure, copying, modification, disposal, deletion and other similar risks to Personal Data.
7. RETENTION OF PERSONAL INFORMATION
Dom Himalaya Hotel only retains Personal Data for as long as the retention is required for the purposes for which we collected the Personal Data, the purposes described in this Policy and for our business and legal purposes. Unless otherwise required by law or other mandatory directions by court or government authorities or for purposes of legal proceedings or other similar proceedings or investigations. For more information on our Personal Data Retention Policy, please contact our Data Protection Officer at the contact details set out in Section 8 below). For unsuccessful job applicants, Dom Himalaya Hotel will retain your Personal Data for no longer than 2 years for the purposes of evaluating your suitability for future job openings with Dom Himalaya Hotel, unless you inform us otherwise (please refer to Section 8).
8. CONTACT DETAILS
If you have any questions or feedback regarding this Policy and our policy and practices on our collection, use, disclosure or retention of Personal Data, you may contact our Data Protection Officer at [email protected]
9.UPDATING OR CORRECTING YOUR PERSONAL DATA
Dom Himalaya Hotel takes reasonable measures to ensure that the Personal Data we collect about individuals are accurate and complete. For this reason, if there is any change or update in Personal Data, we would like to know about these changes or updates. If there is a change or an update in your Personal Data or if there is a need to correct any Personal Data of yours that we have, please write to us and provide us with the following details:
Your name and an email address or mailing address at which we can contact you.
The nature of our relationship with you.
The Personal Data for which there has been a change, update or correction.
You may send your requests to our Data Protection Officer at the contact details listed in Section 8 above.
We will endeavour to acknowledge the receipt of your request within 3 working days after the date of receipt of your request if it is sent by e-mail, or within 7 days after the date of receipt of your request if it is sent by post. As it is important to us that the Personal Data that we have about you is accurate and complete, it may be necessary for us to request for supporting documentation from you. We will contact you if we require supporting documentation from you.
10. YOUR REQUESTS AND FEEDBACK ON YOUR PERSONAL DATA WITH US
You may request for information from Dom Himalaya Hotel on what Personal Data of yours we have and how we have used and shared your Personal Data during the last one year before the date of your request. To learn more about how you can request for information from Dom Himalaya Hotel, please refer to our Request for Information Notice.
You may also choose to withdraw your consent to Dom Himalaya Hotel’s use, collection, sharing or processing of your Personal Data at any time. To learn more about how you can withdraw your consent, please refer to our Withdrawal of Consent Notice. Please understand that your withdrawal of your consent to our use of your Personal Data may affect our provision of products and services to you or our business dealings with you, depending on the nature of your relationship with us.
If you have any concerns, feedback or complaints about the use and/or sharing of your Personal Data, we are open to receiving your feedback or complaint. To learn more about how you may submit a complaint about our use and/or sharing of your Personal Data, please refer to our Feedback and Complaint Notice.
11. UPDATES TO THIS PERSONAL DATA NOTICE
We may change or update portions of this Policy at any time and without prior notice to you. Please review this Policy from time to time so you are aware of any changes or updates to the notice. We will indicate the effective date of the notice. If you do not agree with any of the changes or updates to the Policy, you have the option of withdrawing your consent to our collection, use, disclosure and processing of your Personal Data(please refer to Section 10 above).
Effective Date: 01 Feb 2019