Privacy Policy

Last updated: January 2023

Deep Roots Dive and Yoga Resort is committed to safeguarding your personal data and respects your privacy. This privacy statement explains how we collect, use, store, analyze, and protect your personal information when you visit our website or use our services, as well as your privacy rights. The purpose of this Privacy Policy is to inform you about how we will use your personal data you provide to us through this Website, in connection with hotel bookings, your stay at Deep Roots Dive and Yoga Resort, and personal data provided and/or collected by us through other channels. We also inform you about your rights under applicable data protection law regarding our use of your Personal Data.

Before using this website or any of our products or services, please read and comprehend the entirety of this disclaimer. Pay close attention to the terms highlighted in bold to ensure you fully comprehend and accept them. By utilizing our website and any of our products or services, you consent to and acknowledge that we will collect and use your personal information in accordance with this privacy statement.

It is essential that you read this privacy statement in conjunction with any other privacy statements we may provide on specific occasions when you use our products or services so that you are aware of how and why we use your data. This privacy statement is intended to supplement and not supersede other notices and privacy policies.

How is your Personal Data collected?

Personal data, also referred to as personal information, is any information that can be used to identify an individual. We may collect, use, store, and transfer sensitive personal information such as personally identifiable information, consumption and transaction records, property information, behavioral habits, location information, etc., that we have organized based on the purposes for which they were collected. If you do not provide the required information, you may be unable to register as a guest or use some of the services we offer, or you may not be able to achieve the desired results of the relevant services. We collect the following information:

• Personal identification information (including full name, age, gender, marital status, photo, date of birth, national identification number, passport number, and driver's license number);
• Contact data (such as name, email address, mailing address, phone number, and home address) are required. If you interact with us via social media, we may collect your username and other pertinent information);
• Information pertaining to payments (including payment details, payment card numbers, billing address, and bank account information);
• Information relating to your reservation, stay, or visit to a property (such as the property where you stayed, the date of your arrival and departure, and the products and services you purchased);
• Details required to accommodate your special requests and/or specific accommodations;
• Employment information (such as company name, job title, and work contact information) is required in order to respond to requests for proposals or fulfill contractual obligations.
• Copies of any correspondence you send us;
• Data about your health, such as food allergies and dietary restrictions
• Your interests and preferences; Information collected through the use of closed-circuit television systems and other security systems; Feedback and survey responses
• Information relating to your use of and interaction with our website, network, and social media platforms; and 
• Information requested by government authorities to fulfill our legal obligations.

How will we use your Personal Data?

Text: We will use your personal information for various purposes.

1. Use of the Website

When you navigate our website, information about you is collected and processed. We gather the following information:

. Information pertaining to the browser or device used to access our website IP address 

. Country from which you are browsing Browsing habits, such as sites visited

. Additional demographic and statistical data

The information is gathered through the session cookies (for more on cookies, see below) utilized on our website. Before we use it to create anonymous usage profiles for marketing purposes and to optimize our website and services, it is anonymized. This information shall not be used to personally identify website visitors.

2. Interacting with us

Whenever you interact with us (e.g., booking a room through use of our Website, by phone, or through a third-party provider, posting a comment on our blog, or signing up for our newsletter), we may collect and process the Personal Data you provide.

• Booking a Room

When you book a room, we collect Personal Data, which includes:

Your selected dates

Number of rooms in the reservation

Number of people in the reservation (adults and children)

The rate/special offer selected

Any add-on packages selected

Arrival and Departure Information

Room, Bed type and/or other preferences

Telephone/mobile number

Your full name

Your address, including city and country

Your e-mail address, and

Your credit card details

We use your Personal Data to manage your reservation and to register and manage your online check-in; to manage payment or prepayment, if requested; To review your guest profile in order to unify guest profiles and personalize services provided. If the user gives consent for direct marketing communications - sending you personalized promotional offers and event details, subscribing and unsubscribing you when you request it. The legal basis for these processes are the performance of the contract, our legitimate interest and user consent.

• Stay in Touch or Newsletter subscription

If you provide us with your contact information (for example, when booking a service with us or requesting to stay in touch or signing up for our newsletter via our Website), we may use this Personal Data to send you our newsletters as well as details of other special offers that may be of interest to you based on previous interactions with us (e.g. bookings).

If you request to stay in touch with us or sign up for our newsletter via our Website, you must only provide your email address. When you sign up for the newsletter through our website, you will be sent an email to confirm your desire to stay in touch (double opt-in). Any additional information is optional and will only be used to personalize the newsletter.

You agree to receive information about Deep Roots and/or our newsletter by providing your email address and then confirming your subscription via the double opt-in process. You have the option to revoke your consent and opt out of receiving the newsletter at any time by clicking on the unsubscribe link included in each newsletter. Furthermore, in your personal profile, under "data protection," you have the option of unsubscribing. The legal basis for these processes are user consent.

• Contact Us functions

You can contact us via our website's "Contact Us" functionality or by phone. To contact us, please provide the following information:

Your complete name

Your postal code

Please provide your phone number and email address.

Your inquiry, as well as Recaptcha, to ensure you are not a robot

Any additional information (for example, home address) is given voluntarily. Your information is used to respond to your inquiry. The legal basis for these processes are user consent and the performance of the contract and legitimate interest.

• User Generated Content (UGC) on social media platforms.

UGC will be displayed on our websites for promotional purposes. The legal basis for these processes is user consent.

• Deep Roots Blog

We publish articles on travel, diving, yoga, and lifestyle in our Deep Roots Blog. You can leave public comments on the blog. If you leave a comment, it will be published alongside the relevant blog post and your username. Commenting on our blog is entirely optional.

We collect and store the following Personal Data when you leave a comment on a blog post:

Name

Website URL

Your Comment

This Personal Data is used to post the comment on the blog page.

3. Social networking platforms

On our websites and platforms, you can log in without filling out a form. If you log in using the social network login system, you grant us explicit permission to access and store the public data on your social network accounts (e.g., Facebook, Google, Instagram), as well as any other data mentioned during use of the social network login system. In addition, we may share your email address with social networks to determine if you are already a user of the concerned social network and, if applicable, to post relevant, personalized advertisements on your social network account.

4. Data Retention

We will only retain your personal data for as long as is reasonably necessary to fulfill the purposes for which it was collected, including any legal, regulatory, tax, accounting, or reporting requirements. In the event of a complaint or if we reasonably believe there is a risk of litigation arising from our relationship with you, we may retain your personal data for a longer period of time. When we process your personal information for marketing purposes or with your consent, we do so until you ask us to stop and for a brief time thereafter (to allow us to implement your requests). We also keep track of the fact that you have requested not to receive marketing materials or have your data processed so that we can honor your request in the future.

5. Your Rights

Regarding the collection and use of your personal information, you may: 

- Inquire whether we process Personal Data about you, for what purposes, the categories of Personal Data involved, the categories of recipients to whom the information has been disclosed, and, if possible, the anticipated storage period for the personal data (or, if not possible, the criteria used to determine that period),

- inquire about the appropriate safeguards relating to the transfer to a third party, request a copy of the Personal Data undergoing processing, and request to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit those data to another controller without any hindrance from us. 

- rectify inaccurate information

- to object to further processing and to request erasure of your Personal Data;

- request that Deep Roots restrict the processing of your personal data,

- the right to not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in another way.

6. Data Security

We have implemented appropriate security measures to prevent the loss, misuse, unauthorized access, alteration, or disclosure of your personal information. Moreover, we restrict access to your personal information to employees, agents, contractors, and other third parties with a business need to know. They will only process your personal information per our instructions and are bound by a confidentiality obligation.

7. Cookies

Cookies (small text files stored in your browser) and other techniques such as web beacons are used by us (small, clear picture files used to follow your movements on our website). These collect information about how you interact with our website and web-related services. These are used to generate statistical reports on website activity.

This allows us to tailor our website to your specific interests and needs. We may use a persistent cookie (a cookie that remains linked to your browser) to record your information so that we can recognize you the next time you visit our website.

You can refuse cookies or configure your browser to notify you each time a website attempts to set a cookie. For more information on cookies, go to www.aboutcookies.org  or www.allaboutcookies.org where you can also learn how to disable them.

8. Liability

This website is not intended for children under the age of 20, and we do not collect data about children knowingly.

You guarantee that you have informed any third parties whose data you are providing of the points covered in this privacy statement, if applicable. Furthermore, you guarantee that Deep Roots has obtained their permission to use their data for the purposes specified. 

You will be held accountable for any false or inaccurate information you provide, as well as any direct or indirect damage you cause to us or third parties.

9. Changes to Privacy Policy

We keep our privacy statement under regular review. At the top of this page, you will find the date that the privacy statement was last updated, which is also the date that any modifications will take effect. Your continued use of the Services following the implementation of these modifications indicates your acceptance of the updated privacy statement. Please contact us at privacy@deeproots-penida.com  if you'd like to review the version of the privacy statement that was in effect prior to this revision.

Additionally, it is essential that the personal information we maintain about you is accurate and up-to-date. Please keep us informed of any changes to your personal information throughout our relationship.

10. Contact Us

If you wish to exercise any of the rights set out above, please contact us.

Email: privacy@deeproots-penida.com