Privacy Notice

 

Last Updated: November 26, 2024

At Citystate Tower Hotel, protecting your privacy is our top priority. We are dedicated to upholding the privacy rights of individuals who entrust us with their personal information. To reaffirm this commitment, we have issued this Privacy Notice to outline how we collect, use, share, and safeguard your personal data when you access our website, make bookings, or visit our property. Our practices strictly adhere to the requirements of the Data Privacy Act of 2012 of the Philippines.

1. PERSONAL INFORMATION WE COLLECT

We collect personal information that you voluntary provide to us directly or through our website, such as:

  • Guest Information: Full name, email address, contact number, mailing address, nationality, date of birth, and identification information.
  • Booking Details: Room preferences, check-in/check-out dates, payment information, and transaction history.
  • Online Interaction Data: IP addresses, browser type, operating system, referring URLs, and pages viewed.
  • Special Requests: Information you provide about special accommodations, dietary preferences, or other services.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

  • Reservations and Stays: To manage your bookings, facilitate check-in/check-out, and provide services during your stay.
  • Customer Service: To respond to inquiries, provide customer support, and offer concierge services.
  • Marketing and Promotions: To send you updates on promotions, offers, and events, with your consent.
  • Service Improvement: To analyze and enhance our services, website functionality, and guest experience.
  • Legal and Security Requirements: To comply with legal obligations or protect the rights, property, and safety of our guests and employees.

3. SHARING YOUR INFORMATION

We do not sell, rent, or lease your personal information to third parties. However, we may share your information in these situations:

  • Service Providers and Partners: With third-party service providers, such as payment processors, booking platforms, transportation providers, and IT support, to facilitate your stay or reservation.
  • Legal Requirements: When required by law, or in response to a valid legal request, to comply with applicable laws and regulations.
  • Hotel Affiliates: Within our corporate group for internal reporting and auditing purposes.

4. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies to enhance your browsing experience and gather insights into how you interact with our site. You can manage or disable cookies through your browser settings; however, doing so may limit the functionality of certain features on our website.

5. DATA SECURITY

We are committed to safeguarding your personal data and have implemented robust technical and organizational measures to protect it from unauthorized access, use, disclosure, alteration, or destruction. These measures include, but are not limited to:

  • Secure Storage: All personal data is stored on secure servers with access strictly limited to authorized personnel.
  • Data Encryption: Sensitive information is encrypted both during transmission and in storage to prevent unauthorized access.
  • Access Controls: Access to personal data is restricted to authorized individuals who require it to fulfill their professional responsibilities and are bound by confidentiality obligations.
  • Periodic Security Assessments: Regular audits and assessments of our security protocols are conducted to ensure they remain effective and up to date.
  • Incident Response Protocols: Comprehensive procedures are in place to address potential security breaches, including mitigating risks, notifying affected individuals, and adhering to regulatory requirements.

Despite our efforts to ensure the highest level of data security, it must be acknowledged that no system of electronic transmission or storage is entirely secure. We cannot guarantee absolute protection against all potential threats. We encourage you to take additional precautions, such as securing your account credentials and promptly informing us of any suspected unauthorized access or breaches.

6. YOUR RIGHTS ON THE PROTECTION OF PERSONAL DATA

You have the following rights in relation to your personal data, subject to the terms of the Privacy Policy:

  1. Right to be informed: You have the right to know who is processing your data, how it is being processed, and why it is being processed.
  2. Right to object: You have the right to express your disagreement at any time regarding the use of your personal data in accordance with applicable law. If you have given your consent to the use of some of your data, you also have the right to withdraw it at any time. Recalling your consent means that we will stop processing the data you have previously given your consent.
  3. Right to access: You have the right to request access to your personal data.
  4. Right to correct: You have the right to request the correction of inaccurate personal data and fill in incomplete information.
  5. Right to rectification, erasure, or blocking: You have the right to request the deletion of your personal data under certain conditions, such as when the data are no longer necessary in relation to the purposes for which they were collected, you have withdrawn your consent and there is no other legal basis for processing the data.
  6. Right to damages: If you have experienced damage as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, you may be entitled to compensation.
  7. Right to data portability: You have the right to request the transfer of your data to another controller where technically feasible.

You may exercise your data privacy rights by sending an email to cth.dpo@citystatetowerhotel.com.ph. Upon receipt of your request, we will take all reasonable steps to process and respond within thirty (30) days, in accordance with applicable data protection laws.

7. THIRD-PARTY LINKS

Our website may contain links to third-party websites for informational purposes or convenience. Please note that we do not have control over, and are not responsible for, the privacy practices, policies, or content of these third-party websites. Accessing such external sites is done at your own discretion and risk. We strongly recommend that you review the privacy policies and terms of use of these third-party websites to understand how your personal information may be collected, processed, and safeguarded.

8. UPDATING/AMENDMENT OF OUR PRIVACY NOTICE

We may update or amend our Privacy Notice from time to time to comply with new and current legislation affecting the DPA, as well as any changes or improvements we make to protect your personal information.

Unless required by law, any updates or modifications will not affect how we handle previously collected personal data without your agreement.

OFFICE OF THE DATA PROTECTION OFFICER

For any comment, question, or suggestion regarding this Privacy Notice, you may contact our Data Protection Officer at:

ATTN: Data Protection Officer

Citystate Tower Hotel

1315 A. Mabini Street, Ermita, 1000 Manila, Philippines

Phone: +63 (02) 8708-9600 to 09

Email:  cth.dpo@citystatetowerhotel.com.ph

Website: www.citystatetowerhotel.com.ph