account Privacy Policy of B&B HOTELS in Denmark
PDF version
Last updated on : 18/04/2023
1. Background
The purpose of this privacy policy (the "Privacy Policy") is to inform you about the categories of personal data that we may collect or hold about you, how we use it, with whom we share it, how we protect it, and the rights you have over your personal data.
This Privacy Policy applies to the following categories of data subjects:
- Visitors of the site https://www.hotel-bb.com/ and the B&B hotels mobile applications (see point 3.1),
- Hotel guests and customers (see point 3.2),
- Business contacts (see point 3.3),
- Recipients of direct marketing (see point 3.4), and
- Subjects to camera surveillance (CCTV) (see point 3.5)
It is intended to inform you in accordance with regulation 2016/679 of 27 April 2016 (the "GDPR") on how your personal data may be collected and processed in connection with the e.g. reservation of hotel rooms, etc.
The group of companies, subsidiaries and all hotels related to B&B (the "B&B Hotels Group") is fully committed to ensuring that the processing of personal data complies with the requirements of the GDPR.
Respecting your privacy and your personal data is a priority for us, which is why we are committed to treating them in strict compliance with the Regulations and applicable national laws.
2. Data Controller(s)
Below, please find the description of the various processing activities. In that regard it is listed which B&B Hotel Group entity that is operating as data controller.
3. Information we collect, Purpose, and Legal basis
We process various categories of personal data depending on the purposes. This includes:
- Data relating to your identity: title, surname, first name(s), address, telephone number, email addresses, date of birth, age, customer code, password,
- Data relating to your occupation: the business you represent, you affiliation with the business.
- Data relating to navigation: your log-on and connection data, computer equipment identification data, your language preferences, geographic location data, data relating to your use of the Platform and the Services, including data communicated to our teams during your requests (language preference, etc.) data collected via cookies and other trackers.
- Data relating to your reservation: arrival and departure dates, data on the other occupants of the reserved rooms such as names and ages, preferences (smoking room, preferred floor, etc.).
- Data relating to transactions: the number of the transaction, data relating to the means of payment (bank card number, expiry date, cryptogram, processed exclusively by the Adyen online payment platform which only provides us with an identification token to proceed, guarantees and payments for reservations), details of the purchase, subscription, goods or service subscribed, data relating to invoice payments such as payment terms, discounts granted, receipts, balances and outstanding amounts.
- Data relating to the history of reservations in B&B Hotels.
The B&B Hotels Group ensures that it only collects personal data that is strictly necessary for the purposes for which it is processed.
Your various data is collected and processed for the below-mentioned purposes and legal bases. Also, you will find the description of the various processing activities. Further, it is listed which B&B Hotel Group entity is operating as data controller.
3.1 Visitors of the Site https://www.hotel-bb.com/ and the B&B hotels mobile applications:
Purpose | Processing activities and information we collect | Legal basis |
The proper functioning and continuous improvement of the Platform, its features and our Services (Cookies) | Data controller: Casper BidCo, 29 Boulevard Roman Rolland, 92120 Montrouge, Frankreich When you visit our platforms, apps, websites, etc., we use cookies to collect data about your visits. We do this in order to ensure a stable, secure and user-friendly experience on our website(s), as well as to keep statistics about our website visitors. Cookies are set on our website with regard to:
More details can be found in our [Insert link to cookie policy relevant for Denmark]. With regard to the above processing purposes, we process Data related to navigation. | Necessary/technical cookies: Article 6(1)(f) of the GDPR, as we have a legitimate interest in improving and assuring you the best experience on our sites and our applications and the best quality of services offered.
Other cookies: Article 6(1)(a) of the GDPR, as you have given your consent. |
3.2 Hotel guests and customers:
Purpose | Processing activities and information we collect | Legal basis |
Private guests: Reservation and customer relations and management
| Data controller: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V We process personal data relating to customer administration with regard to:
With regard to the above processing purposes, we process Data relating to your identity, Data related to reservations, and Data related to transactions. | Article 6(1)(b) of the GDPR, if you as a person is party to the contract (or reservation). Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interests in providing answering queries, customer support, etc. For bookkeeping purposes, article 6(1)(c) of the GDPR. |
Business guests Reservation and customer relations and management
| Data controller: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V We process personal data relating to customer administration with regard to:
With regard to the above processing purposes, we process Data relating to your identity, Data related to occupation, and Data related to transactions. | Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interests in providing answering queries, customer support, and fulfilling any agreement we may have concluded with the company you represent. For bookkeeping purposes, article 6(1)(c) of the GDPR.
|
3.3 Business contacts:
Purpose | Processing activities and information we collect | Legal basis |
Administration of contatcs at suppliers and business partners
| Data controller: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V We process personal data relating to suppliers and business partners with regard to:
With regard to the above processing purposes, we process Data relating to your identity, Data related to occupation, and Data related to transactions. | Article 6(1)(f) of the GDPR, as we are pursuing our legitimate interests in communicating with our suppliers and business partners For bookkeeping purposes, article 6(1)(c) of the GDPR. |
3.4 Recipients of direct marketing:
Purpose | Processing activities and information we collect | Legal basis |
Direct marketing | Data controller: Data controller: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V
We carry out marketing operations which cover the following:
With regard to the above processing purposes, we process Data relating to your identity.
| The consent you have given in accordance with article 6(1)(a) of the GDPR and section 10 of the Danish Marketing Practices Act. You can always withdraw your consent. |
3.5 Camera surveillance (CCTV):
Purpose | Processing activities and information we collect | Legal basis |
Crime prevention | Data controller: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V Our premises are covered by video surveillance cameras where you may be portrayed when visiting our hotel. We process time and place/location, and actions recorded by the CCTV cameras. We have put up signage in the places where we have installed CCTV cameras. We process such personal data for up to 30 days, unless the information is part of or will be used in a specific case or dispute. | Article 6(1)(f) of the GDPR as we pursue the legitimate interests in protecting our employees, customers and property. If the recordings show criminal offences, the legal basis is section 8 of the Danish Data Protection Act. |
4. Recipients of your Data
We treat the personal data we collect with the utmost care. Only personal data which is strictly necessary will be communicated for processing to third parties. We disclose your personal data to the following recipients:
Authorised B&B Hotel employees
We will disclose personal data to authorised staff of our hotel reservations, marketing, sales, administrative, logistics and IT departments, responsible for improving our Services, customer relations, market research and quality control.
Authorised third-party business partners
We will disclose personal data to authorised personnel of our subcontractors and service providers such as, in particular, cloud hosting and storage providers, payment service providers, mail service providers, IT maintenance providers, marketing research providers.
B&B Hotel Group
We will disclose personal data with our group companies as part of group-internal administrative functions.
Competent authorities and public bodies
We will disclose personal data to, if necessary, competent authorities on request and in particular public bodies, the relevant courts, mediators, accountants, auditors, lawyers, bailiffs, ministerial officers, bodies responsible for carrying out debt recovery, exclusively to meet legal obligations, as well as in the case of identifying those responsible for any offenses committed on the internet.
Cookie providers
We will disclose personal data to third parties that place cookies on your terminals (computers, tablets, mobile phones, etc.) when you consent to them. (For more details, see our cookie policy [insert link]).
5. Retention periods
We only keep your data for as long as they are of relevance to us and we have a legitimate purpose for keeping them. Your data will therefore be deleted in accordance with applicable data protection legislation. For that reason, we have established the time limits for erasure set out below.
Purpose | Retention period |
Cookies | Retention periods with regard to each specific cookie can be found in our cookie policy [insert link]. |
Reservations and bookings | Up to 5 yers after the reservation/booking has been either cancelled or executed. |
Managing and answering general inquiries. | Up to 10 years months after the last inquiry. |
Bookkeeping | Up to 5 years after the end of the financial year in which the customer or supplier relationship has ended. |
Direct marketing | We process personal data until unsubscribing from direct marketing / revocation of consent after the latest direct marketing communication. |
CCTV recordings | We process such personal data for up to 30 days, unless the information is part of or will be used in a specific case or dispute. |
6. Transfer of date outside the European Union
The B&B Hotels Group is a global organization that provides its services in many countries. Cross-border Data sharing is therefore essential to our services so that you receive the same high-quality service wherever you are in the world.
As such, and within the framework of the purposes indicated in Article 4 of this Policy, we may transfer your personal data to internal and external recipients who may be in countries outside the EU.
The B&B Hotels Group hat therefore implemented appropriate measures to secure the transfer ob your Data outside the EU.
The basis for the transfer is the Commission Decision of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
If you want additional information about our transfer of personal data outside the EU and EEA, including a copy of the relevant security measurese etc., you may make a request such additional information by exercising your rights as stated below. You can receive further information with regard to recipients and relevant third countries we transfer personal data to by contacting us at privac@hotelbb.com.
7. Your rights
On request, you have the right to know which Data we process about you. You also have the right to correct any errors in your personal data.
You have the right to receive information about:
- what data is processed
- the source of the data
- the purpose of processing the data
- to which recipients or groups of recipients your data is disclosed
- have any incorrect data about you corrected
- in certain cases, you have the right to have data about you deleted before the normal time of deletion occurs
- in certain cases, you have the right to have the processing of your personal data restricted
- in certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
Further, you have the right to withdraw your consent at any time. If you wish to do so, please contact us (see Section 10 below). If you decide to withdraw your consent, it will not affect the lawfulness of our processing of your personal data on the basis of the consent previously given by you and up to the time of withdrawal. If you withdraw your consent, it will not become effective until such time.
8. Complaint to a supervisory authority
If you want to lodge a complaint with a supervisory authority about our processing of your personal data, you can do so by contacting the Danish Data Protection Agency via their website, www.datatilsynet.dk.
You can read more about your rights in the Danish Data Protection Agency's guidelines on data subjects' rights, which is available at www.datatilsynet.dk (in Danish).
9. Contact us
If you have any questions about how we process personal data, please use the following contact details:
- Sending a letter to the following address: B&B Hotels Denmark ApS, Christians Brygge 28, 1559 Copenhagen V, or emailing us at the following address privacy-denmark@hotelbb.com
- Emailing us at the following address: privacy@hotelbb.com
- Sending a letter to the following address: DPO Casper BidCo -HAAS AVOCATS, 32 rue la Boétie-75008 PARIS