DATA PRIVACY NOTICE

Privacy Notice for Movenpick Resort & Spa Boracay 

Movenpick Resort & Spa Boracay (The Hotel) upholds a steadfast commitment to safeguarding the privacy and personal data of our employees, guests, customers, and business partners.

We place significant emphasis on abiding by the Data Privacy Act of 2012 and its Implementing Rules and Regulations, alongside other pertinent regulations set forth by the National Privacy Commission and Philippine laws to ensure the utmost confidentiality and protection of personal information.

This Privacy Notice provides a comprehensive delineation of our data processing procedures encompassing collection, utilization, storage, and disposal, along with the robust security measures implemented to fortify the protection of personal data.

What Is Personal Information and why do we collect personal data?

Personal Information is any information that can identify an individual.

-        Full Name

-        Address

-        Place of Work

-        Telephone Number

-        Gender

-        Location of an individual at a particular time

-        IP Address

-        Birthdate

-        Birthplace

-        Country of Citizenship

-        Payroll and benefits information

-        Contact information

We process your personal data in fulfillment of our legal obligations and to furnish our diverse range of products and services. We are resolute in providing transparent explanations and ensuring the responsible use of any collected Personal Information, thereby underscoring our unwavering commitment to maintaining the privacy of individuals.

Sensitive Information

Sensitive information is defined in the Data Privacy Act of 2012 to include information such as:

-        Race, Color, Ethnic origin

-        Marital status

-        Age

-        Health / Medical Records

-        Social Security Number

-        License or its denials, suspension or revocation

-        Education

-        Genetics and sexual life

-        Philosophical affiliation

-        Religious and Political affiliation

-        Tax returns

-        Bank and credit/debit card numbers

-        Other personal information issued by government agencies

Sensitive information will be used by us only:

·        For the primary purpose for which it was obtained

·        For a secondary purpose that is directly related to the primary purpose

·        With your consent; or where required or authorized by law.

When is my Information Collected?

We collect your personal data in several ways, when you visit our website, make a reservation, contact us, purchase products from us, or visit the physical hotel, when you join our membership program to name a few.

Direct Interactions– you may provide personal data to us (e.g., identity, contact details, financial data) when you complete forms or correspond with us by post, phone, email, or other methods. This could include providing personal data when you:

·        Inquire to receive our services or products

·        Create an account on our website

·        Subscribe to our e-newsletter

·        Request marketing material to be sent to you

·        Enter a promotion or complete a survey

·        Provide feedback to us

·        Join ALL Membership / Accor Plus

Automated technologies or interactions – when you interact with our website, we may collect some technical data relating to you including details about your devices or browsing patterns, for example. This data may be collected using cookies (see above) or other similar technologies.

Third parties or publicly available sources – we may receive personal data relating to you from third parties (e.g., online travel agencies, travel agents)

Disclosure of Personal Data: 

We only disclose personal data to authorized recipients and for lawful purposes. This may include sharing personal data with our affiliates, subsidiaries, or parent company while ensuring that data protection measures are in place. 

Data Sharing: 

In the event personal data is shared with individuals or entities outside the organization, we ensure that the data subject's consent for the data sharing was obtained at the time of collection. If data sharing is for a commercial purpose, a data sharing agreement is put in place to protect the data subjects' rights. 

Security Measures: 

We have implemented appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, and destruction. Our staff are trained to handle personal data with care and in compliance with privacy laws. 

Retention and Deletion: 

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Information.

Your Rights: 

You have the right to access, correct, or delete your personal data held by Movenpick Resort & Spa Boracay. For any queries or requests regarding your personal data, please contact us using the details provided below. 

Contact Information: 

To exercise your rights or if you have any concerns, questions, or feedback regarding our Privacy Notice or the handling of your personal data, please get in touch with us:

Data Protection Officer

Movenpick Resort & Spa Boracay

Punta Bunga Cove,

Barangay Yapak, Boracay Island

Malay, Aklan, 5608 Philippines

+63 36 288 2256

movenpick.boracay.dpo@movenpick.com

Updates to Privacy Notice:

We may update this Privacy Notice periodically to reflect changes in our practices or for legal reasons. We encourage you to review this Privacy Notice from time to time for any updates.

You may also file a complaint with the National Privacy Commission (NPC). For more details, please visit the NPC’s website: https://privacy.gov.ph/mechanics-for-complaints/.

Any action taken in response to a request for correcting, erasing, and/or objecting to the processing of your personal data as it appears in our records is subject to applicable laws, the Data Privacy Act (DPA), its Implementing Rules and Regulations (IRR), and other regulations of the NPC.