Privacy Policy

Last Updated: January 2025

1. Introduction

Welcome to Harolevi Casino Hotel ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://harolevi.com or stay at our luxury European resort.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you:

• Make a reservation or booking
• Register for an account on our website
• Subscribe to our newsletter
• Participate in our loyalty programs
• Contact us with inquiries
• Fill out forms on our website

The personal information we collect may include:

• Name and contact information (email address, telephone number, postal address)
• Payment information (credit card details, billing address)
• Date of birth and government-issued ID information
• Travel and accommodation preferences
• Dietary requirements and special requests
• Marketing preferences and communication choices

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Referring URLs and pages viewed
• Access times and dates
• Clickstream data and navigation patterns

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information and improve your experience. This includes:

• Session cookies for website functionality
• Persistent cookies for user preferences
• Analytics cookies (Google Analytics)
• Marketing cookies (Facebook Pixel, Google Ads)

You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Reservations and Service Delivery: To process your bookings, manage your stay, and provide requested services
• Communication: To send booking confirmations, updates, and respond to inquiries
• Personalization: To tailor your experience and provide customized recommendations
• Marketing: To send promotional materials, newsletters, and special offers (with your consent)
• Analytics: To understand how visitors use our website and improve our services
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To maintain the safety and security of our guests and property
• Payment Processing: To process transactions and prevent fraud

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Contract Performance: Processing necessary to fulfill our contractual obligations
• Consent: You have given explicit consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligations: Processing required to comply with legal requirements

5. Sharing Your Information

We may share your information with the following categories of recipients:

5.1 Service Providers

• Payment processors and financial institutions
• Booking and reservation systems
• Email marketing platforms
• Cloud hosting services
• Analytics providers (Google Analytics, Facebook)
• Customer relationship management systems

5.2 Business Partners

• Tourism boards and travel agencies
• Loyalty program partners
• Event organizers and entertainment providers

5.3 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or to protect our rights, property, or safety.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Typical retention periods include:

• Booking and transaction records: 7 years (for accounting and legal purposes)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months (Google Analytics default)
• CCTV footage: 30 days

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your personal information
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with supervisory authorities

To exercise these rights, please contact us using the information provided below.

9. Security of Your Information

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure payment processing systems (PCI DSS compliant)
• Regular security audits and vulnerability assessments
• Access controls and authentication procedures
• Employee training on data protection
• Regular backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, travel booking sites, and partner services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Marketing Communications

With your consent, we may send you marketing communications about:

• Special offers and promotions
• New services and amenities
• Events and entertainment
• Loyalty program updates

You can opt-out at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly
• Updating your communication preferences in your account settings

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

We encourage you to review this privacy policy periodically.

14. Contact Information

15. Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

16. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell your personal information to third parties.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.