Mar Mkhayel studios

Privacy Policy Information and Consent This Privacy Policy describes how we collect, use, process, and disclose yourinformation, including personal information about you (hereinafter, the“User”), in conjunction with your access to and use of our booking system.By reading this Privacy Policy, the user is hereby informed on how we collect,process and protect personal data furnished through the booking engine.TheUser must carefully read this Privacy Policy to determine whether they wish to provide their personal data, or those of third parties, to Mar Mkhayel Studios.Whenthis policy mentions “booking system”, “booking engine”, “system”, “website”,“platform”, “app”, “webapp”, “services” or “online services” it refers to allpages and functions under marmkhayelstudios.com unlessspecified otherwise.Byaccessing the platform or providing information, you agree to our privacypractices as set out in this privacy statement. We may change this policy fromtime to time. You should check this policy to ensure you are aware of the mostrecent version.IdentityWhenthis policy mentions “we”, “us”, “our”, “data controller” or “controller” itrefers to the Mar Mkhayel Studios.Data ControllerMarMkhayel Studios operates this booking system through a data processor, asexplained below. For the purposes of the General Data Protection Regulation(“GDPR”) (EU) 2016/679, we are the Data Controller. There is a strictcontractual framework between the data controller and the data processor forthe protection of your personal information. We are:MarMkhayel StudiosMdawar Armenia Street, facing MidtownMarket and Mérou restaurantMarMkhayel area, BeirutLebanonDataProcessorAthird-party Data Processor operates this booking system on behalf of MarMkhayel Studios and is committed to protecting the privacy of the users of thissystem.Forthe purposes of the GDPR, this third-party is the Data Processor.Obligatory nature of providing the dataThedata requested in the forms accessible from the booking engine are, in general,mandatory (unless specified otherwise in the required field) to meet the statedpurposes. Accordingly, if they are not provided or are not provided correctly,we will be unable to process the request.Personaldata we collect and processThiswill include:personalinformation about you which we ask you for (e.g. your name, address, and emailaddress) when you make a booking from our booking engine;financialdetails in order to process your booking when we require pre-payment;detailsof transactions you carry out through our booking engine and details of thefulfilment of your orders.ourdata processor may only collect and process personal data collected and/orprocessed on behalf of us in accordance with our instructions.Wegrant permission to our data processor:touse your personal information for reserving rooms and/or other services for youat Mar Mkhayel Studiostopass on your financial details to Mar Mkhayel Studios and/or appropriate thirdparty (for example, credit card company) for the purpose of confirming orpaying for a booking;touse your information for marketing purposes (where you explicitly agree to this);andtopre-complete forms and other details on our website to make your next visit toour booking engine easier (e.g. when amending or cancelling a booking).SocialLogin:Inthe event of registration and/or access through a third-party account, we maycollect and access certain information of the User’s profile from thecorresponding social network, solely for internal administrative purposesand/or for the purposes indicated above.Third-party data (e.g. book for a friend)Inthe event that the User provides third-party data, they declare that they havethe third party’s consent and undertake to provide the interested party -thedata holder- with the information contained in this Privacy Policy, dulyexonerating us and our data processor from any liability in this regard.However, we may carry out the necessary verifications to verify this fact,adopting the corresponding due diligence measures, in accordance with the dataprotection regulations.Sensitive DataUnlessspecifically requested, we ask that you not send us, and you not disclose, onor through the Services or otherwise to us, any Sensitive Personal Data (e.g.,social security numbers, national identification number, data related to racialor ethnic origin, political opinions, religion, ideological or other beliefs,health, biometrics or genetic characteristics, criminal background, trade unionmembership, or administrative or criminal proceedings and sanctions).Use of Services by MinorsTheServices are not directed to individuals under the age of eighteen (18), and werequest that they not provide Personal Data through the Services.Purposeof processing personal dataDependingon the User’s requests, the personal data collected will be processed inaccordance with the following purposes:Tomanage the bookings made, including payment management (where applicable) andthe management of the user’s requests and preferences.Tomanage the User’s contact requests with us through the channels provided tothis end.Tomanage the sending of personalized commercial communications from us, byelectronic and/or conventional means, in cases in which the User expresslyconsents.Tomanage the provision of the contracted accommodation service.Tomanage surveys and/or evaluations regarding the quality of the servicesprovided by us and/or the perception of its image as a company.DataRetentionWewill retain your Personal Data for the period necessary to fulfil the purposesoutlined in this Privacy Policy unless a longer retention period is required orpermitted by law or if the User requests their withdrawal from us, opposes orrevokes their consent.Thecriteria used to determine our retention periods include:Thelength of time we have an ongoing relationship with you and provide theServices to you (for example, for as long as you have an account with us orkeep using the Services or if you have a booking that has not yet beenfulfilled)Whetherthere is a legal obligation to which we are subject (for example, certain lawsrequire us to keep records of your transactions for a certain period of timebefore we can delete them)Whetherretention is advisable considering our legal position (such as, for statutes oflimitations, litigation or regulatory investigations)Legitimateinterest for processing your dataThedata processing required in fulfilment of the aforementioned purposes thatrequire the User’s consent cannot be undertaken without said consent.Likewise,in the event that the User withdraws their consent to any of the processing,this will not affect the legality of the processing carried out previously.Torevoke such consent, the User may contact us through the appropriate channels.Bythe same token, in those cases in which it is necessary to process the User’sdata for the fulfilment of a legal obligation or for the execution of theexisting contractual relationship between us and the User, the processing wouldbe legitimized as it is necessary for compliance with said purposes.Data DisclosureWewill use and disclose Personal Data as we believe to be necessary orappropriate:tocomply with applicable law, including laws outside your country of residence;tocomply with legal process;torespond to requests from public and government authorities, includingauthorities outside your country of residence and to meet national security orlaw enforcement requirements;toenforce our terms and conditions;toprotect our operations;toprotect the rights, privacy, safety or property of our own, you or others; andtoallow us to pursue available remedies or limit the damages that we may sustain.Wemay use and disclose Other Data for any purpose, except where we are notallowed to under applicable law. In some instances, we may combine Other Datawith Personal Data (such as combining your name with your location). If we do,we will treat the combined data as Personal Data as long as it is combined.Internationaltransfers of personal dataWemay transfer your personal information to our data processor(s) or/and sub-processor(s)based outside of the EEA for the purposes described in this policy. If we dothis, your personal information will continue to be subject to one or moreappropriate safeguards set out in the law. These might be the use of modelcontracts in a form approved by regulators, or having our suppliers sign up toan independent privacy scheme approved by regulators (like the US PrivacyShield scheme).User’s ResponsibilityTheUser:Guaranteesthat they are of legal age or legally emancipated, where applicable, fullycapable, and that the information furnished to us is true, accurate, completeand up-to-date. For these purposes, the User is responsible for thetruthfulness of all the data communicated and will keep the informationupdated, so that said data reflects their actual situation.Guaranteesthat he/she has informed third parties on whose behalf he/she has provideddata, where applicable, of the aspects contained in this document. Alsoguarantees that he/she has obtained the third party’s authorization to providetheir data to us for the purposes indicated.Willbe responsible for false or inaccurate information provided through the Websiteand for damages, whether direct or indirect, that this may cause to us or thirdparties.Exercise of RightsTheUser may contact us at any time free of charge:Toobtain confirmation about whether or not personal data concerning the User arebeing processed by us.Toaccess their personal details.Torectify any inaccurate or incomplete data.Torequest the deletion of their personal data when, among other reasons, the dataare no longer necessary for the purposes for which they were collected.Toconfirm revocation of consent.Toobtain from us the limitation of data processing when any of the conditionsprovided in the data protection regulations are met.Torequest the portability of your data.Likewise,the user is informed that at any time he/she may file a complaint regarding theprotection of their personal data before the competent Data ProtectionAuthority. Security MeasuresWewill process the User’s data at all times in an absolute confidential way andmaintaining the mandatory duty to secrecy with regard to said data, inaccordance with the provisions set out in applicable regulations, and to thisend adopting the measures of a technical and organizational nature required toguarantee the security of their data and prevent them from being altered, lost,processed or accessed illegally, depending on the state of the technology, thenature of the stored data and the risks to which they are exposed.