Privacy and Data Policy

Privacy and Personal Data Policy:

1. This policy applies to users of this hospitality business when making a reservation.

2. Data Controller
   The Data Controller is the hospitality business that will provide the requested service. Identification and contact details are available on the website used to make the reservation or to pose questions. They will also appear on the invoice issued to you.

3. Data Compliance Officer
   Not applicable to the Data Controller.

4. User
   The user is the person who fills in the reservation form or any documentation related to it.

5. Purpose of data processing
   The purpose of processing the data provided is to manage reservations made by the user and to answer questions or requests submitted.

6. Legal basis
   Processing is based on either the need to perform a contract with the user or take steps prior to entering a contract, or on the user’s consent by accepting the Terms and Conditions which include this Privacy and Personal Data Policy.

7. Duration of data storage
   Data is stored for the time necessary to manage the reservation and accommodation services. After that, the data is kept for six months. If the user consents to receive marketing information, data is stored until consent is withdrawn.

8. Processor
   The hospitality business engages GuestCentric Group to operate the reservations engine. GuestCentric acts under the authority of the hotel and follows written instructions according to an existing service contract.

9. Data subjects different from the user
   If the user provides personal data belonging to other individuals, the user is responsible for obtaining their consent.

10. Transfer of data
    The Data Controller will not transfer personal data to a third country outside the European Economic Area.

11. Data subject rights
    Data subjects may exercise rights of access, rectification, cancellation, and opposition by contacting the hotel using the details provided on the reservation website or invoices.

12. Supervisory authority
    If a data subject believes their rights are affected, they may appeal to the relevant supervisory authority of the concerned Member State.

13. General conditions of stay
    By completing a reservation or checking in, guests agree to comply with all hotel rules, operational policies, and security procedures. Failure to comply may result in removal from the property without refund.

14. Room allocation
    Room categories may include several different room styles. Specific room layouts, views, and designs cannot be guaranteed and are subject to availability at check in.

15. Events, parties, and entertainment
    The hotel hosts regular entertainment and special events that may produce sound, lights, or crowds. By booking, guests acknowledge that certain rooms may experience higher sound levels. Refunds or compensation will not be issued due to noise or event activity.

16. Safety deposit boxes
    Guests are responsible for securing valuables in the in room safe. The hotel is not liable for loss of money or belongings not properly secured. The hotel is not responsible for items left unattended in rooms or public areas.

17. Damage and loss
    Guests are financially responsible for any damage to rooms, furnishings, equipment, linens, decorations, or property caused intentionally or through negligence. The hotel may charge repair or replacement costs to the card on file.

18. Behaviour and safety
    Disorderly behaviour, aggressive conduct, illegal activities, or actions posing risk to others may result in eviction without refund. The hotel may involve local authorities when required.

19. Event access, tickets, and wristbands
    Entry to events requires a valid ticket or hotel package. Lost or damaged wristbands will not be replaced for free. Sharing, transferring, or tampering with wristbands voids access without refund.

20. Event modifications and cancellations
    The hotel may modify, postpone, or cancel events due to weather, safety concerns, artist availability, or operational reasons. Refunds or compensation for room bookings or travel expenses will not be issued.

21. Guest responsibility during events
    Guests must follow all safety instructions during events, including crowd control guidance and restricted area rules. Access to stages, backstage areas, and staff only zones is prohibited.

22. Check in and check out
    Early check in and late check out depend on availability and may incur additional charges. Guests who stay beyond the confirmed check out time may be charged for an extra night.

23. Children and minors
    Parents and guardians are responsible for supervising minors at all times. Some events may have age restrictions.

24. Alcohol, smoking, and prohibited items
    The hotel follows local laws regarding alcohol. Excessive intoxication, possession of illegal substances, or bringing dangerous items onto the property may result in removal without refund. Smoking is only allowed in designated areas. Smoking inside rooms may result in fees.

25. Health and wellness
    Guests must ensure they are medically fit for any activities or events. The hotel is not responsible for injuries or health issues arising from negligence, pre existing conditions, or misuse of facilities.

26. Force majeure
    The hotel is not liable for interruptions caused by circumstances beyond its control, including weather, power outages, government regulations, natural events, or technical failures.

27. Payment and cancellation policies
    By booking through the hotel or its partners, guests agree to the payment, modification, and cancellation rules of the chosen rate. Some bookings are non refundable. The hotel may collect deposits or full payment depending on the rate plan.

28. Limitation of liability
    To the maximum extent permitted by law, the hotel is not responsible for indirect or consequential losses, including loss of enjoyment or travel expenses.

29. Photography and media
    Photography and filming may occur during events. By entering the premises or participating in events, guests consent to possible appearance in promotional materials without compensation.

30. External services
    Any tours, transport, or external services booked through the hotel are provided by third parties who are solely responsible for their performance.

31. Data protection in accordance with Tanzanian law
    Personal data is processed according to the Tanzania Personal Data Protection Act 2022 and the Personal Data Protection Regulations 2023.

32. Categories of personal data collected
    The hotel may collect identification details, contact information, booking records, payment data, CCTV footage, wristband and event data, and any additional information provided voluntarily.

33. Purpose of processing under Tanzanian law
    Data is processed to manage reservations and stays, comply with legal requirements, verify identity, manage RFID wristbands and event access, improve services, ensure security, prevent fraud, and communicate essential information.

34. Legal basis under Tanzanian law
    Processing is based on contractual need, legal obligations, user consent where required, and the legitimate interests of the hotel in securing its property and operations.

35. Data retention under Tanzanian law
    Data is kept only for as long as necessary for the purposes listed. Certain records may be retained as required by Tanzanian law. CCTV footage is kept for a limited period unless needed for investigations.

36. Data sharing under Tanzanian law
    Data may be shared with Tanzanian authorities when legally required, system providers under contract, payment processors, security or medical services, and third party suppliers under confidentiality obligations. Data is never sold.

37. Guest rights under Tanzanian law
    Guests have the right to request access, correction, deletion, objection to processing, or details about how their data is used. Consent for marketing can be withdrawn at any time.

38. Data security
    The hotel uses technical and organisational measures to protect data, including secure systems, controlled access, staff training, procedural reviews, and CCTV operations that comply with privacy standards.

39. Data breach notification
    If a data breach occurs that may affect guest rights or safety, the hotel will notify relevant authorities and affected individuals as required by Tanzanian law.

40. Marketing consent
    Marketing communications are sent only to guests who provide consent. Consent may be withdrawn at any time.