The Winchester Hotel & Spa respects your privacy and is committed to protecting the personal information that you share with us. We have a data protection policy that ensures our data collection, handling, management and use comply with the data protection law (The General Data Protection Regulation (EU) 2016/679) and that we follow good and ethical practices at all times. The policy is in place to help protect the rights of staff, customers and partners and is open on how we intent to store a process individuals’ data. The policy also outlines the measure taken to protect itself from a data breach. You can request a copy of the data protection policy from the Data Protection Office, by contacting them on email@example.com.
When you browse our website, you do so anonymously, unless you have previously indicated that you wish The Winchester Hotel & Spa to remember your login and password. We don't automatically collect personal information, including your email address. We do log your IP address (the Internet address of your computer) to give us an idea of which part of our website you visit and how long you spend there. But we do not link your IP address to any personal information unless you have logged in to our website. Like many other commercial websites, The Winchester Hotel & Spa website may use a standard technology called a "cookie" to collect information about how you use the site. The Winchester Hotel & Spa collects personal information when you register an enquiry with us, when you ask to be included in an email or other mailing list, or you submit an entry for a sweepstakes or other promotions, or when you submit your personal information to The Winchester Hotel & Spa for any other reason. From time to time, The Winchester Hotel & Spa receives personal information from business partners and vendors. The Winchester Hotel & Spa only uses such information if it has been collected in accordance with acceptable privacy practices consistent with this Policy and applicable laws. Unless you request deletion of your personal information as specified below, your personal information may be retained by The Winchester Hotel & Spa to verify compliance with the agreement, log software licenses granted, to track software downloaded from those pages, or track usage of other applications available on those pages.
When personal information is collected, we will inform you at the point of collection the purpose for the collection. The Winchester Hotel & Spa will not transfer your personal information to third parties without your consent, except under the limited conditions described under the discussion entitled "Information Sharing and Disclosure" below.
If you choose to provide us with your personal information, we may only transfer that information, within The Winchester Hotel & Spa or to third party service providers of The Winchester Hotel & Spa with your permission. Upon receiving your permission, we may transfer your information across borders and from your country or jurisdiction to other countries or jurisdictions around the world.
When obtaining your data for direct marketing purposes, other than processing a booking and/or service, we will provide you with the opportunity to “opt-in” and will clearly outline what future information you can expect to receive in the future, and how often. This means we require your affirmative action to indicate you consent before we use your information for purposes other than the purpose for which it was submitted. When collecting this data, we will keep a record of consent alongside a record of your data for as long as this is retained. You can easily unsubscribe or “opt-out” of direct marketing at any time.
What is a cookie?
If you prefer not to receive cookies while browsing our website, you can set your browser to warn you before accepting cookies and refuse the cookie when your browser alerts you to its presence. You can also refuse all cookies by turning them off in your browser, although you may not be able to take full advantage of The Winchester Hotel & Spa's website if you do so. In particular, you may be required to accept cookies in order to complete certain actions on our website. You do not need to have cookies turned on, however, to use/navigate through many parts of our website, except access to certain of The Winchester Hotel & Spa's web pages may require a login and password.
The Winchester Hotel & Spa uses information for several general purposes: to fulfil your requests for certain products and services, to personalise your experience on our website, to keep you up to date on the latest service announcements, special offers or other information we think you'd like to hear about either from us or from our business partners, and to better understand your needs and provide you with better services. If you have given consent we may also use your information to send you, direct marketing information or contact you for market research (in the form and frequency that you agreed to receive when you “opt-in”).
Your personal information is never shared outside The Winchester Hotel & Spa without your permission, except under conditions explained below.
Our websites do not target and are not intended to attract children under the age of 15. The Winchester Hotel & Spa does not knowingly solicit personal information from children under the age of 15 or send them requests for personal information.
The Winchester Hotel & Spa's website contains links to other sites. The Winchester Hotel & Spa does not share your personal information with those websites and is not responsible for their privacy practices. We encourage you to learn about the privacy policies of those companies.
The Winchester Hotel & Spa will amend this policy from time to time. If we make any substantial changes in the way we use your personal information we will make that information available by posting a notice on this site.
If you have any questions or concerns about the collection, use, or disclosure of your personal information you are entitled to request this information directly from us and have the right to be forgotten. Subject access requests should be made by email, addressed to the data controller at firstname.lastname@example.org. You have the right to access all of your personal data free of charge and this will be provided within 7 days.
This document was last updated 8th January 2021 and is reviewed on an annual basis.