Privacy Policy

Welcome to the website privacy notice of The Grand Nirvana, Hotel and Resort

The Grand Nirvana respects your privacy and is committed in protecting your personal data. This privacy notice sets out information about how we treat your personal data, including when you visit our website www.thegrandnirvana.com

Table of Contents

1. Important information &who we are
2. The data we collect about you
3. How your personal data is collected
4. Usage of your personal data
5. Personal data disclosure
6. Security of data
7. Data retention

8. Additional Information For Website Visitors from the European Economic Area (the “EEA”)

1. Important information and who we are

Purpose of This Privacy Notice
This privacy notice aims to give you information about how The Grand Nirvana collects and processes your personal data, including any information you may provide through this website when you make a booking reservation, purchase another service, subscribe to our newsletter or consent to receive marketing communications.
This privacy notice should be read with any other data privacy notice or fair processing notices we may provide to you from time to time in connection with our processing of your personal data for specified purposes.

About Us
This privacy notice is issued on behalf of………and its group of affiliated entities and references to The Grand Nirvana, “we”, “us” or “our” in this privacy notice, are referring to the relevant entity within The Grand Nirvanais responsible for processing your personal data. We will inform you which entity is the data controller of your personal data (or recipient of personal data as otherwise identified) when you make a reservation or purchase another service with us. Unless you are otherwise notified, XXXX Private Limited (an affiliate of ………) is the data controller and responsible for the processing of your personal data in connection with this website.

Contacting Us
If you have any queries regarding this privacy notice or if you would like to exercise any of your rights in relation to your personal data, you can do so by contacting our data protection office at any time by email XXX info@thegrandnirvana.com
( Actual mail id info@thegrandnirvana.com) privacy notice

Additional contact information:
Full name of legal entity: XXXXX Private Limited
Postal address: XXXXXXX , India.
Telephone number: +919520991039,  +919359101677  

Changes to the Privacy Notice and your duty to inform us of the Changes
We regularly review our privacy notice from time to time. This version was last updated on XX, XX 20XX.
It is important that the personal data we store about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

2. The data we collect about you

Types of Personal Data
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed or cannot be revealed and which is classified as anonymous data.
We may use, store, collect and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data which  includes first name, middle name, last name, username or similar identifier, title, date of birth, gender, nationality and passport or any identification card details.
• Contact Data includes billing address, home and/or  business address, email addresses and telephone numbers.
• Financial Data includes bank account and payment card details
• Transaction Data  includes details about payments to and from you and other details of booking reservations, services you have purchased from us.
• Technical Data  includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices which you use to access this website.
• Profile Data   includes your username (identifier email address which used to log-in) and password, booking reservations, purchases or orders made by you, your interests, preferences (such as for specific room types or other requests), feedback, survey responses, company information, NIRVANA DISCOVERY membership or other loyalty program information.
• Usage Data  includes information on how one uses our website and services.
• Marketing and Communications Data  includes your preferences in receiving marketing from us and our third parties and your communication preferences. We may also use and share information which does not directly or indirectly reveal your identity including statistical or demographic data (Aggregated Data) for any purpose. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We may in certain circumstances collect and process  Special Categories of Personal Data about you including disability and health records relevant to your visit (such as food allergies, health condition requirements and hotel accessibility requirements) and religious information relevant to your visit (such as dietary requirements), in which case we shall only do so in accordance with applicable law (which may require us to obtain your consent).

Failure to Provide Personal Data
In certain circumstances, we need your personal data to perform our obligations to you in connection with the services you request from us (for example, to fulfil your booking reservation or to provide you with other services) or in order to comply with certain legal requirements. In case you fail to provide such information to us, we may not be able to provide you with the services you desire. We will of course notify you if that is the case.

3. How your personal data is collected
Your personal data is made available to us through various methods, including:

• Direct interactions. You may give us your Identity, Contact, Financial, Transaction, Profile and Marketing and Communications Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
• Make a booking reservation;
• Directly provide it to us at The Grand Nirvana Property;
• Create an account on our website;
• Subscribe to our newsletter or other publications;
• Request marketing communications be sent to you;
• Enter a competition, promotion or survey; or
• Give us feedback or contact us.
• Third parties. We will receive personal data about you from various third parties as set out below:
• Identity, Contact, Financial, Transaction and Profile Data from third parties such as travel agents or other booking partners booking comparison websites, airline or car rental partners or loyalty program partners;
• Identity, Contact, Financial, Transaction, Profile and Marketing and Communications Data received from our “Associated Hotels” (i.e., hotels or resorts owned by third-party entities which are not part of The Grand Nirvana group of affiliated entities but which operate under the TheGrand Nirvana name)
• Identity, Contact, Financial, Transaction and Profile Data from NIRVANA DISCOVERY loyalty program;
• Technical Data from the following parties:

(a)  Analytics and search information providers such as Google & Bing
(b)  Advertising networks such as search engines and social channels

• Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as
• Identity and Contact Data from data brokers or aggregators.

Our website does not offer products or services for use by minors. If you are under 18 years of age, you may use our website only with the involvement of a parent or guardian. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us atinfo@thegrandnirvana.com for any concern related to the child’s personal data. 

4. How we use your personal data
Purposes for which we will use your Personal Data
We will only use your personal information for the purposes mentioned below, unless we reasonably consider that we need to use it for another purpose and which is compatible with the original purpose. You can contact us for more information in connection with the purposes for which your personal data is processed at any time.

Purpose/Activity	Types of Personal Data Used
To register yourself as a new guest/customer	Identity (b) contact (c) Profile
To process and fulfil your booking reservation including: Managing payments, fees and charges Invoicing and collecting money owed to us	Identity  (b) Contact (c) Financial  (d) Transaction (e)  Profile
To manage our relationship with you which will include: Communicating with you before, while and after your visit Sharing your information with the hotel or resort in which you are staying Providing guest and concierge services Ensuring your preferences and likes as a guest are recorded for future visits Answering to enquiries or complaints Notifying you about changes to our terms or privacy notice Asking you to drop a review or take a survey	(a) Identity (b) Contact (c) Financial  (d) Transaction (e) Profile (f) Marketing and Communications
To enable you to participate in a promotion, prize draw, competition or complete a survey	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications
To administer and protect our business and this website  (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity (b) Contact (c) Technical
For website delivery, enhancement and advertising online, including:  Delivery of online advertising to you Measuring the effectiveness of the advertising we serve to you Using data analytics to improve our website, services, marketing, guest and customer relationships and experiences	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical
Email marketing Including you to make recommendations to us about services that may be of interest to you and to send you details of promotional offers	(a) Identity (b) Contact (c) Technical  (d) Usage (e) Profile (f) Marketing and Communications

Additional Information about Marketing

• If you have requested it, or if you have made bookings or purchased other services from us and you haven't chosen to stop receiving it, you may receive marketing emails from us. Visitors from the EEA are only permitted to receive marketing emails from us if we have your express opt-in consent, as required by applicable EU law.
• We will get your express opt-in permission before we share your personal data with any third party for marketing purposes.
• You can anytime ask us or the third parties to stop sending you marketing messages at any time by logging into the website and checking or un checking relevant boxes and adjust your marketing preferences, by following the opt-out links on any marketing message sent to you, or by contacting us at any time. Where you opt out of receiving these marketing messages, we may continue to communicate with you in connection with your booking reservations, enquiries, or other transactions as such communications are necessary in connection with our provision of services to you and are not marketing.

5. Personal data Disclosure
We may share your personal data with the parties set out below for the purposes described in Clause 4, above.

• Members of The Grand Nirvana.
• Service providers based in India, USA, European Union and parts of Asia who provide website, IT and system administration services. XXXX
• Professional advisers;  lawyers, bankers, auditors and insurers based in India, USA, European Union and parts of Asia who provide consultancy, banking, legal, insurance and accounting services.
• Tax authorities, regulators and other authorities based in India, USA, European Union and parts of Asia who require reporting of processing activities in certain circumstances.
• Other third parties including booking partners, travel agents, marketing and PR companies, customer service companies, market researchers, data analytic companies, booking comparison websites, airline or car rental partners and loyalty program partners based in India, USA, European Union and parts of Asia
• Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may pursue to acquire other businesses or merge with them. If a change happens in our business, then the new owners might use your personal data in the same way as set out in this privacy notice.

6. Security of data

We have put in place a appropriate technical and organisational security norms to prevent your personal data from being accidentally being misplaced, used or accessed in an unauthorised way, changed or revealed. In addition, we limit the access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place proper procedure to deal with any questionable personal data breach and will inform you and any applicable regulator of a breach where we are legally required to do so.

7. Data retention

We will only reserve your personal data for as long as it is judiciously important to fulfil the purposes we collected it for, including for the purposes of relieving any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a objection or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To decide the suitable holding period for personal data, we examine the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.