Privacy Policy
How we protect and handle your personal information
Introduction
This Privacy Policy explains how The Royal Vault ("we," "our," or "us") collects, uses, and protects your personal information when you visit our website or our premises, or use our services. We are committed to protecting your privacy and handling your data in an open and transparent manner.
Data Controller
The Royal Vault
ul. Nowy Świat 45
00-042 Warsaw, Poland
Email: privacy@theroyalvault.com
Information We Collect
Information You Provide to Us
- Contact information (name, email, phone number)
- Reservation details
- Membership information
- Payment information
- Identity verification documents (required for casino access)
- Dietary preferences and requirements
- Special requests or preferences
Information Automatically Collected
- IP address and device information
- Browser type and version
- Operating system
- Pages visited and navigation patterns
- Time and date of visits
- Cookies and similar technologies
How We Use Your Information
We use your personal information for the following purposes:
- Process reservations and provide our services
- Verify identity for casino access (legal requirement)
- Send confirmation emails and updates
- Process payments
- Manage your membership account
- Send marketing communications (with consent)
- Improve our services and website
- Comply with legal obligations
- Prevent fraud and ensure security
Legal Basis for Processing
We process your personal data based on:
- Contract performance (reservations, services)
- Legal obligations (casino regulations, tax laws)
- Legitimate interests (security, fraud prevention)
- Consent (marketing communications)
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal requirements and legitimate business interests. Casino-related data is retained according to Polish gambling regulations.
Your Rights
Under GDPR, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
International Transfers
Your data is primarily stored and processed within the European Economic Area (EEA). Any transfers outside the EEA are conducted in accordance with GDPR requirements.
Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on our website.
Contact Us
For any privacy-related queries or to exercise your rights, please contact our Data Protection Officer:
Email: dpo@playawayresorts.com
Phone: +48 22 123 4567
Address: ul. Nowy Świat 45, 00-042 Warsaw, Poland
You have the right to lodge a complaint with the Polish Data Protection Authority (UODO) if you believe your data has been processed unlawfully.
Last updated: March 15, 2024