We gather your Personal Data either from you when you make a walk-In reservation or booking through our reservation system or stay at an GCP-branded hotel or during the course of your membership in any of our loyalty programs and services, including GCP Rewards loyalty program membership. The Personal Data we collect will covers the list as it is shown below:
1.1 Contact information
While using our service, we may ask you to provide us with certain Personal Data that can be used to contact. Contact information may include information such as: name, date of birth, email address, address, state, province, city, ZIP/postal code, phone number, nationality, payment card information and room and stay preferences Information made during the course of your reservation such as your preferred room type and specific requests to the hotel.
1.2 Usage Data
Usage Data is data collected automatically either generated by the use of the service. We may also collect information how the service is accessed and used. This Usage Data may include information such as: your computer's Internet Protocol address (IP address), browser type, browser version, the pages of our service that you visit the time and date of your visit, the time spent on those pages.
1.3 Tracking & Cookies Data
We will only process your Personal Data for specified, explicit and legitimate purposes and we will not process your Personal Data further in a way that is incompatible with those purposes. We use the collected Data for various purposes:
2.1 We use the information collected from you primarily to fulfil your hotel reservation. Prior to your stay this may include sending your information to the hotel or sending you pre-stay communications. Following your stay, we may also send you post-stay communications and satisfaction surveys to get feedback on your experience.
2.2 We may send you marketing communications for products and services that we believe would be useful for you. We also may use information related to your stay to display targeted advertisements on our website or on third-party websites or to send you more relevant messaging. Additionally, we use this information for purposes of aggregated trend and statistical analysis to evaluate and improve our products and services, plan new hotel locations and services and other market research.
2.3 We use your information to operate and provide services in connection with our loyalty programs. We also use your information to improve our products and services.
In certain circumstances, we’ll share your Personal Data to third parties. This would include:
3.1 Our service providers
We work with reputable partners, service providers or agencies so they can process your Personal Data on our behalf. We will only transfer Personal Data to them when they meet our strict standards on the processing of data and security. We only share Personal Data that allows them to provide their services.
3.2 Reorganization or selling to another organization
We may also disclose Personal Data in connection with the sale, assignment, or other transfer of the business of the site to which the data relates;
3.3 Courts, tribunals, law enforcement or regulatory bodies
We may disclose Personal Data in order to respond to requests of courts, tribunals, government or law enforcement agencies or where it is necessary or prudent to comply with applicable laws, court or tribunal orders or rules, or government regulations; and
Disclosures of Personal Data may also be needed for security audits or to investigate or respond to a complaint or security threat.
We generally collect only the Personal Data necessary to fulfill our purposes. Where additional data is sought, you will be notified of this at the point of collection. The applicable legislation allows us to process Personal Data, so long as we have a processing ground under the law to do so. It also requires us to tell you what those grounds area. As a result, when we process your Personal Data, we will rely on one of the following legal grounds for processing.
4.1 Performance of a contract
This is when the processing of your Personal Data is necessary in order to perform our obligations under a contract or the intention to enter into a contract;
4.2 Legal obligation
This is when we are required to process your Personal Data in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public body or law enforcement agency;
4.3 Legitimate interests
We may process data about you where it is in our legitimate interest in running a lawful business to do so in order to further that business, so long as it doesn’t outweigh your interests; or
4.4 Your consent
We will retain your Personal Data for as long as we deem it necessary to enable you to use our services, to provide our services to you. to comply with applicable laws, resolve disputes with any parties and otherwise as necessary to allow us to conduct our business including to detect and prevent fraud or other illegal activities.
We observe reasonable procedures to prevent unauthorized access to, and the misuse of Personal Data. We use appropriate business systems and procedures to protect and safeguard the Personal Data you give us. We also use security procedures and technical and physical restrictions for accessing and using the Personal Data on our servers.
To the extent permitted under applicable law, you have certain data protection rights. we aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
In certain circumstances, you have the following data protection rights:
7.1. The right to access
You have the right to access the Personal Data that refers about you to obtain a copy of the Personal Data we hold. We may charge you a reasonable fee for access to the Personal Data, for the purpose of recovering the incremental costs of responding to the access request, please write to us at the address below.
7.2. The right of rectification
You have the right to have your Personal Data rectified if that Personal Data is inaccurate or incomplete.
7.3. The right to withdraw consent
You also have the right to withdraw your consent at any time where we relied on your consent to process your Personal Data.
7.4. The right to erase
You have the right to erase the Personal Data we have on you.
7.5. The right to restrict processing
You have the right to request that we restrict the of your Personal Data; and
7.6. The right to complain
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data.
Please note that we may ask you to verify your identity before responding to such requests.
Grande Centre Point Terminal 21 Bangkok
Address: 2 Sukhumvit Soi 19 (Wattana), Sukhumvit Road, Klongtoey Nua, Wattana, Bangkok 10110, Thailand.
Tel: (66 2) 056 9000 Fax : (66 2) 056 9009
Email: [email protected]