V Spaahotell OÜ and developer Confemar OÜ collect, store, publish, transmit and store customer data in accordance with the laws and legislation of the country where hotel is located for the best service of clients and for the performance of contractual relations. .

All personal information provided while making a purchase in the online booking are confidential and are treated by the requirements of the law of personal information. Personal data is processed by the information as prompted by the Client placing the booking (first and last name, e-mail address and telephone number).

When paying by credit card, the data provided by the Client is protected by the SSL security protocol, ensuring that the information provided cannot be viewed or modified by persons who do not have access to such information. Payment transactions with Visa and MasterCard payment systems are carried out with the help of payment service provider, which stores the data of the Customer’s cards in accordance with the current legislation of the Republic of Estonia and the European Union. The payment solution provider is a PCI-DSS service provider that meets all the requirements and offers payment solutions, including exchanging payments through Visa and MasterCard between the Parties. The payment solution provider does not transfer personal data received during the execution of payment transactions to third parties. The availability of information for the Parties is limited by the type of card and the last two digits of the card number. If there is need to return the paid amount to the client in accordance with the terms of cancellation, change of the order and refund, safe environment of payment solution provider is used for this.

V Spaahotell OÜ is responsible for the activities of authorized data controller and data controller complies fully with V Spaahotell OÜ principles of processing personal information. Authorized controller is V Spaahotell OÜ.

Collecting non-personal data – it is also collected non-personal data, which can not be directly linked to one specific person (browser version, language preference, location, time spent on the page, etc.) and it is treated as a generalized customer behavior in the booking engine of V Spaahotell OÜ. Aggregated data is used for upgrading the service/product of the booking engine.

Confemar OÜ (provider and system administrator of the booking engine) and V Spaahotell OÜ keep personal data in their databases and the customer has the right at any time to access his/her personal data and information about the actions performed by him/her. Customer has the right at any time to demand corrections in his/her personal data if the data has changed or is inaccurate for some other reason. To modify/add or remove data, please contact V Spaahotell OÜ by e-mail info@vspahotel.ee.

Terms and conditions of privacy policy – by using the booking engine, you are familiar with and agree to these principles and conditions. We reserve the right to change the general terms and conditions of the Privacy Policy, as appropriate, by informing it on V Spaahotell OÜ website. For any questions or concerns regarding privacy policy or data processing, please contact us by e-mail info@vspahotel.ee.