Privacy Policy

We’d like to assure you that we are committed to protecting the privacy of all our users. We will ensure that the information you provide us with is kept private and confidential, and we will only use it to provide the services you request.

Information You Voluntarily Provide

When you complete a booking, sign up to our newsletter, consult with our service team, send us an email, or communicate with us in any way, you are voluntarily giving us information that we collect. That information may include either your name, physical address, email address, IP address, phone number, credit card information, as well as details including gender, location, purchase history, and other demographic information. By giving us this information, you consent to this information being collected, used, disclosed, transferred or stored by the hotel, Westport Estate, or our third-party providers as described in this privacy policy. In the interest of your privacy, we only collect, use and retain information reasonably required for our legitimate business interests, such as processing bookings and queries or providing you with marketing materials.

Legal Basis

The legal basis for the processing of personal data for the above purposes is Article 6(1)(f) of the GDPR on the basis that the processing of personal data is necessary for the legitimate interests pursued by The Grace Westport Estate.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax accounting or reporting requirements. We may retain your data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Information We Automatically Collect

When you browse the website or make a purchase, we may automatically collect information about your visit by using cookies. This information may include your device type, browser, IP address, how you came to the website or how you interacted with the website. This information may be used to monitor or improve website performance or deliver targeted advertising. Information from the cookie alone generally will not identify you personally and we will not use this information in connection with any personally identifiable information you have provided. You may read more about the specific cookies we use on this website here.

Information We Share with Third Party Providers

We may share your personally identifiable information with service providers including

Payment processors for secure credit card payment transaction, .

–        Hosting services.

–        Email service providers to send you emails pertaining to your booking. Such providers may send emails of a marketing nature if you have agreed to receive such newsletters and will track some performance indicators, such as open and click rates.

–        Advertising partners who may use email address, cookies and other tracking technologies, such as pixels and web beacons, to gather information about your activities on our website and other sites to provide you with targeted advertising based on your browsing activities and interests.

–        Our business partners, suppliers, and sub-contractors, for the performance of any contract we enter with them. We may also share your data with analytics and search engine providers that assist us in the improvement of our website.

–        Legal authorities when we believe in good faith that we are lawfully authorised or required to do so or when necessary to do so to protect the rights and safety of The Grace Westport Estate, employees and users from fraudulent, abusive, inappropriate or unlawful use of our services.

–        In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition, or in any other situation where personally identifiable information may be disclosed or transferred as one of the business assets of The Grace Westport Estate.

Information that is aggregated or anonymised that does not directly identify you.

Whenever we transfer your personal data to third party providers, we ensure that your personal data is protected to a similar degree by requesting third party providers to have safeguards in place.  

How we protect your information

We take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, considering the risks involved in the processing and the nature of the personal information.

Our website is scanned on a regular basis for security holes and known vulnerabilities to make your visit to our site as safe as possible. We use regular Malware Scanning. We implement a variety of security measures when a user makes a booking, enters, submits, or accesses their information to maintain the safety of your personal information. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. In addition, all sensitive/credit card information you supply is encrypted via Secure Socket Layer (SSL) technology. All transactions are processed through a gateway provider and are not stored or processed on our servers.

In the event of a suspected personal data breach, we will notify you and any applicable regulator of the breach when we are legally required to do so.

Your Data Rights

–        Right to Access – You have the right to request copies of your personal data that we hold.

–        Right to Rectification – You have the right to request that we correct any information that you believe is inaccurate. You have the right to request us to complete information that you believe is incomplete.

–        Right to Erasure – You have the right to request us to erase your personal data, under certain conditions. 

–        Right to restrict processing – You have the right to request us to restrict the processing of your personal data, under certain conditions. 

–        Right to object to processing – You have the right to object to us processing your personal data, under certain conditions.

–        Right to data portability – You have the right to request us to transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Access to Personally Identifiable Information

If your wish to avail of any of the abovementioned rights or you have any questions about this privacy policy or about the use of your personal data, you can submit your request by emailing [email protected]  and we will  respond to you within 30 days of your request.

If you wish to stop receiving email newsletters, click on the unsubscribe link on any of the newsletters. We will retain your information for as long as required to deliver your service, agreement or resolve any issues. Please note that we cannot always delete records of all historical data. For example, we are required to retain certain records for financial reporting and compliance reasons.

It is important to note that we may not always be able to comply with your request for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Third Party Websites

Any information, communications, or materials you submit to us via a social media platform is done at your own risk without any expectation of privacy. We cannot control the actions of other users of these platforms or the actions of the platforms themselves. Your interactions with those features and platforms are governed by the privacy policies of the companies that provide them.

Our website includes links to other websites, whose privacy practices may be different from ours. If you submit personally identifiable information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.

Changes to Privacy Policy

We may make changes to this privacy policy, which come into effect upon updating this page. We recommend reviewing this privacy policy, so you are aware of any changes that affect what you are consenting to by interacting with the website, submitting a query, making a booking or otherwise interacting with The Grace Westport Estate.

CCTV Policy

INTRODUCTION

The purpose of this policy is to explain how information and data captured using CCTV is used and retained by The Grace Westport Estate and set out your rights in relation to such information and data.

Purpose of CCTV

Closed Circuit Television Systems (CCTV) are used by The Grace Westport Estate and are installed in line with the requirements of the business, as set out herein, and in compliance with the General Data Protection Regulation.

The purpose of the CCTV Systems are as follows:

–        Improving the safety and security of guests, visitors, employees and contractors by providing a means to investigate accidents and near misses so that risk management control measures can be implemented

–        Providing reassurance to staff and guests that control measures are in place relating to their safety and security

–        Providing assistance to local law enforcement authorities with reference to the investigation and prevention of crime (including counter-terrorism)

–        Deterring persons from committing crimes and to enhance the opportunities for detecting those who do

–        Discouraging anti-social behaviour including alcohol and drug-related crime on or about the premises

Access to CCTV Footage or Images

Access to the CCTV system and stored images is restricted to authorised The Grace Westport Estate personnel only for the purposes set out above.

However, in appropriate circumstances, CCTV footage may be accessed:

–        By local law enforcement authorities, where The Grace Westport Estate is required by law to assist in the carrying out of an investigation into a crime or anti-social behaviour.

–        By data subjects (or their legal representatives), pursuant to an access request where the time, date and location of the recordings is furnished to the hotel.

–        By individuals (or their legal representatives) subject to a court order

Legal Basis

The legal basis permitting the processing of CCTV data for the above purposes is Article 6(1)(f) of the GDPR on the basis that the processing of personal data is necessary for the legitimate interests pursued by The Grace Westport Estate.

Retention Period and Security

The images captured by the CCTV is retained for a maximum of one month from the date of recording, except where longer storage of such images may be required to assist in any of the scenarios outlined above. The images/recordings are stored in a secure environment with access strictly limited to those who are suitably authorised

Access Requests

You have the right to request access to CCTV footage of you and to request the erasure of your personal data by submitting a written request to: The General Manager, The Grace Westport Estate, New Road, Westport, Co. Mayo. F28 EC64

All requests will be dealt with in compliance with the duties and requirements imposed upon The Grace Westport Estate as data controllers under the GDPR.

Individuals requesting access to CCTV images may be required to supply the following to assist the data request:

–        Adequate information to enable the information to be efficiently identified and located on our system

–        Sufficient information to establish that the applicant has a legitimate right to request access

–        Proof of identification through photographic identification, for example passport or driving license