Who is responsible
Orontes Hotel is responsible for the processing of your data on this website (the "controller"). Our full details are in the imprint. For any question about your data, write to info@orontes-hotel.com.
What we collect and why
Booking requests
When you send a booking request, we receive:
- your dates, the rooms you chose and the number of adults and children per room
- the contact person's name, email, phone number and country
- if you book for someone else: the guests' names per room
- if you ask for it: company or agency name, billing address, country and a partner or promo code
- your message to the hotel, if you write one
We use this data to check availability, answer your request, confirm or decline it and prepare your stay. Legal basis: steps before and for a contract with you (Art. 6(1)(b) GDPR). The request is stored in our booking system and sent by email to the hotel; you receive a copy by email.
The fields marked as required are needed to handle your request; without them we cannot answer or confirm it. Everything else is optional.
Messages by WhatsApp, email or phone
If you contact us, we use your details and your message to answer you (Art. 6(1)(b) GDPR for questions about a stay, otherwise our legitimate interest in answering, Art. 6(1)(f) GDPR). WhatsApp is a service of Meta; its own privacy policy applies when you use it.
Visiting the website (server logs)
When you open a page, the server briefly records technical data: IP address, date and time, the page requested, browser and operating system. We need this to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The logs are deleted after 30 days. The website is hosted by Hetzner Online GmbH, which processes this data on our behalf.
Sending emails
Booking emails are sent through Resend (Resend, Inc., USA), which processes the emails on our behalf.
Google Maps
The map on our home page is loaded only when you click "Show map". Only then does your browser connect to Google (Google Ireland Limited, Dublin), which receives your IP address and may set cookies. Legal basis: your consent by clicking (Art. 6(1)(a) GDPR). Google's privacy policy applies.
Who receives your data
Your booking request is received by the hotel's owner and staff. We also use service providers for hosting and sending emails, who process data only on our instructions. We do not sell or rent your data to anyone.
How long we keep your data
Booking requests and confirmed bookings are kept for 10 years after the stay, then deleted. Requests that were declined are deleted after 6 months. Messages are deleted when they are no longer needed, unless the law requires us to keep them longer.
How we protect your data
The website is served only over an encrypted connection (HTTPS), and only the hotel team can see booking requests. No system on the internet is completely secure, but we take care to protect your data.
Your rights
You have the right to:
- get a copy of the data we hold about you (Art. 15 GDPR)
- have wrong data corrected (Art. 16) or your data deleted (Art. 17)
- restrict how we use it (Art. 18) and receive it in a common format (Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw a consent at any time, without affecting earlier processing (Art. 7(3))
- complain to a data protection authority, for example in the EU country where you live (Art. 77)
To use your rights, write to info@orontes-hotel.com.
Changes to this policy
We update this policy when the website or the law changes. The date at the top shows the latest version.