{"id":1212,"date":"2026-10-23T13:04:26","date_gmt":"2026-10-23T10:04:26","guid":{"rendered":"https:\/\/pargihotell.ee\/isikuandmete-tootlemine\/"},"modified":"2026-11-11T15:12:26","modified_gmt":"2026-11-11T13:12:26","slug":"personal-data-processing","status":"publish","type":"page","link":"https:\/\/www.parkhotelljohvi.ee\/en\/personal-data-processing\/","title":{"rendered":"Personal data processing"},"content":{"rendered":"\n<p class=\"wp-el wp-block-paragraph\"><strong>Effective from 05.11.2026<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-semi-large-font-size wp-el\">1. DATA PROCESSING PRINCIPLES<\/h2>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Park Hotell J\u00f5hvi (hereinafter the <strong>hotel<\/strong>) values the privacy and security of its guests. We process personal data responsibly, transparently and in accordance with the General Data Protection Regulation (EU) 2016\/679 (hereinafter the <strong>GDPR<\/strong>), the Estonian Personal Data Protection Act and other legislation in force in Estonia.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">The controller of personal data is <strong>Pargi 28 hotell O\u00dc<\/strong> (registry code 16981282, address Pargi tn 28, J\u00f5hvi, J\u00f5hvi Parish, Ida-Viru County, Estonia), which operates Park Hotell J\u00f5hvi. For questions regarding personal data, please contact the hotel by e-mail at <a href=\"mailto:info@parkhotelljohvi.ee\">info@parkhotelljohvi.ee<\/a> or by phone at <a href=\"tel:+37254606000\" data-type=\"tel\" data-id=\"tel:+37254606000\">+372 5460 6000<\/a>.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">These principles apply to the hotel\u2019s guests, persons making bookings, gift card purchasers, website visitors and other persons whose data the hotel processes in providing its services. The processing of hotel employees\u2019 data is governed by a separate procedure.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">The purpose of processing personal data is to provide guests with high-quality accommodation services, to manage bookings, to fulfil contractual and statutory obligations and to ensure the safety of the hotel, its guests and employees.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Collection of personal data<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.1.<\/strong> Personal data means any information relating to an identified or identifiable natural person. Such data may include, for example, name, date of birth, contact details, booking details and information related to the use of the website.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.2.<\/strong> We collect personal data when you:<\/p>\n\n\n\n<ul class=\"wp-block-list wp-el\">\n<li>book accommodation on the hotel\u2019s website, by e-mail or by phone;<\/li>\n\n\n\n<li>make a booking through a booking portal (e.g. Booking.com) or a tour operator \u2013 in this case we receive your data from that intermediary;<\/li>\n\n\n\n<li>check in at the hotel and fill in the guest registration card;<\/li>\n\n\n\n<li>submit an enquiry on the website or request further information about accommodation;<\/li>\n\n\n\n<li>purchase or use a hotel gift card;<\/li>\n\n\n\n<li>subscribe to the newsletter or consent to receiving offers;<\/li>\n\n\n\n<li>communicate with the hotel or submit feedback or a complaint;<\/li>\n\n\n\n<li>use the hotel\u2019s services and electronic access systems;<\/li>\n\n\n\n<li>are in an area covered by video surveillance;<\/li>\n\n\n\n<li>visit the hotel\u2019s website, which uses cookies.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.3.<\/strong> Depending on the service and the purpose of processing, we may process the following data:<\/p>\n\n\n\n<ul class=\"wp-block-list wp-el\">\n<li>personal details: name, date of birth, citizenship and residential address; name, date of birth and citizenship of an accompanying spouse and minors (data required on the guest registration card under \u00a7 24 of the Tourism Act); for third-country nationals also the type and number of the travel document and the issuing country;<\/li>\n\n\n\n<li>contact details: e-mail address, phone number and address;<\/li>\n\n\n\n<li>booking and accommodation data: booking number, dates of stay and room details;<\/li>\n\n\n\n<li>billing data: invoices, payment method, payment status and information required for accounting;<\/li>\n\n\n\n<li>company data: company name, registry code and data required for invoicing;<\/li>\n\n\n\n<li>website usage data: IP address, device and browser data and information collected through cookies;<\/li>\n\n\n\n<li>access data: time and location of key card or code use;<\/li>\n\n\n\n<li>video surveillance recordings: images captured in the hotel\u2019s monitored areas;<\/li>\n\n\n\n<li>communication data: enquiries, correspondence and feedback necessary for providing the service;<\/li>\n\n\n\n<li>preferences and special requests: requests you have made regarding the room, breakfast or other services.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">The hotel processes only the personal data necessary to achieve the specific purpose.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">The hotel does not intentionally collect special categories of personal data (e.g. health data). If you inform us, for example, of a food allergy or reduced mobility, we use this information only to fulfil your request and with your explicit consent.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">We generally process the data of minors in connection with the accommodation of an accompanying parent or guardian. Where processing is based on consent and concerns an online service (e.g. a newsletter), the consent of a parent or guardian is required for children under 13 (\u00a7 8 of the Personal Data Protection Act).<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Use of personal data and legal bases<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.4.<\/strong> We process personal data for the following purposes and on the following legal bases. The table also shows the data retention periods:<\/p>\n\n\n\n<figure class=\"wp-block-table wp-el\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Purpose<\/strong><\/td><td><strong>Legal basis (GDPR Art. 6(1))<\/strong><\/td><td><strong>Retention period<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Managing bookings and providing accommodation services<\/td><td>conclusion and performance of a contract (point b)<\/td><td>3 years after the service is provided (\u00a7 146(1) of the Law of Obligations Act)<\/td><\/tr><tr><td>Registration of guests by guest registration card<\/td><td>legal obligation (point c), \u00a7 24 of the Tourism Act<\/td><td>2 years from the date the guest registration card is completed (\u00a7 24(6) of the Tourism Act)<\/td><\/tr><tr><td>Billing and accounting<\/td><td>legal obligation (point c), Accounting Act<\/td><td>7 years (\u00a7 12 of the Accounting Act)<\/td><\/tr><tr><td>Responding to enquiries and customer service<\/td><td>pre-contractual measures (point b), legitimate interest (point f)<\/td><td>up to 1 year after the enquiry is resolved<\/td><\/tr><tr><td>Handling feedback, complaints and claims<\/td><td>legitimate interest (point f)<\/td><td>3 years after resolution<\/td><\/tr><tr><td>Sale and use of gift cards<\/td><td>performance of a contract (point b)<\/td><td>3 years after the gift card expires<\/td><\/tr><tr><td>Security of hotel property, guests and employees (video surveillance)<\/td><td>legitimate interest (point f)<\/td><td>up to 30 days; in the event of an incident, until it is resolved or proceedings are concluded<\/td><\/tr><tr><td>Access system management (key cards and codes)<\/td><td>performance of a contract (point b), legitimate interest (point f)<\/td><td>up to 30 days; in the event of an incident, until it is resolved or proceedings are concluded<\/td><\/tr><tr><td>Returning lost and found items<\/td><td>legitimate interest (point f)<\/td><td>until the item is returned or the storage period ends<\/td><\/tr><tr><td>Direct marketing (newsletter, offers)<\/td><td>consent (point a); for existing customers, legitimate interest (point f), \u00a7 103\u00b9 of the Electronic Communications Act<\/td><td>until consent is withdrawn or you unsubscribe, but no longer than 3 years from the last contact<\/td><\/tr><tr><td>Website operation and security (necessary cookies)<\/td><td>legitimate interest (point f)<\/td><td>as stated in the cookie table (section 2.3)<\/td><\/tr><tr><td>Website traffic analysis and marketing cookies<\/td><td>consent (point a)<\/td><td>as stated in the cookie table (section 2.3)<\/td><\/tr><tr><td>Establishment, exercise and defence of legal claims<\/td><td>legitimate interest (point f)<\/td><td>until the claim expires or proceedings are concluded<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.5.<\/strong> The legal basis for processing personal data is the conclusion or performance of a contract, compliance with a legal obligation of the hotel, the hotel\u2019s legitimate interest or your consent.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Providing the data required on the guest registration card is a statutory obligation, and booking data is necessary to conclude the contract. Without this data, the hotel cannot provide accommodation services. Providing data for marketing purposes is voluntary.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">We send direct marketing e-mails only with your prior consent or, if you are a hotel customer, about similar services of the hotel (\u00a7 103\u00b9 of the Electronic Communications Act). Every message includes an option to unsubscribe free of charge.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Retention and transfer of personal data<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.6.<\/strong> We retain personal data only for as long as necessary to achieve the purpose for which it was collected, to comply with legal obligations or to resolve legal claims. Retention periods are set out in section 1.4. After the retention period ends, the data is deleted or anonymised.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.7.<\/strong> We may transfer personal data to service providers to the extent necessary to provide the service or to comply with the hotel\u2019s legal obligations: the property management and booking system provider (Confemar O\u00dc), the payment service provider (Montonio Finance O\u00dc), the accounting system provider (Directo O\u00dc), the IT service provider (Ithooldus Eesti O\u00dc), the security service provider (Forus Security AS) and website and e-mail service providers. Contracts have been concluded with processors that process data on behalf of the hotel.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">We disclose data to competent public authorities (e.g. the Police and Border Guard Board, the Tax and Customs Board) and law enforcement authorities only on the grounds and to the extent provided by law.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Personal data is generally processed within the European Economic Area (EEA). If a service provider (e.g. a web analytics or e-mail service provider) transfers data outside the EEA, this takes place only subject to the safeguards set out in Chapter V of the GDPR \u2013 on the basis of a European Commission adequacy decision (including the EU\u2013US Data Privacy Framework) or standard contractual clauses approved by the Commission.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.8.<\/strong> The hotel does not disclose or sell guests\u2019 personal data. Only employees and authorised service providers with a justified need have access to the data.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.9.<\/strong> You have the right to:<\/p>\n\n\n\n<ul class=\"wp-block-list wp-el\">\n<li>receive information about the processing of your personal data and access your data;<\/li>\n\n\n\n<li>request the rectification of inaccurate or incomplete data;<\/li>\n\n\n\n<li>request the erasure of data where there are grounds for it and retention is not required by law;<\/li>\n\n\n\n<li>request the restriction of processing;<\/li>\n\n\n\n<li>object to processing based on legitimate interest and opt out of direct marketing at any time;<\/li>\n\n\n\n<li>receive the data you have provided in a machine-readable format and transmit it to another controller, where processing is based on consent or a contract;<\/li>\n\n\n\n<li>withdraw your consent at any time;<\/li>\n\n\n\n<li>lodge a complaint with the Estonian Data Protection Inspectorate or apply to a court.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">We will respond to your request without undue delay and no later than within one month. Where necessary, we may extend this period by two months, in which case we will inform you. Before disclosing data, we may ask you to verify your identity.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.10.<\/strong> For questions or requests regarding personal data, please contact us by e-mail at <a href=\"mailto:info@parkhotelljohvi.ee\">info@parkhotelljohvi.ee<\/a> or at the hotel reception.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Video surveillance<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.11.<\/strong> Park Hotell J\u00f5hvi uses video surveillance to ensure the security of the hotel entrances, common areas and car park, to protect people and property, and to establish the circumstances of possible security incidents.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Video surveillance is carried out on the basis of the hotel\u2019s legitimate interest.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.12.<\/strong> Areas under video surveillance are marked with information signs stating the name and contact details of the controller and a reference to these principles. Real-time video surveillance is carried out by the hotel and by Forus Security AS as the hotel\u2019s processor.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.13.<\/strong> Video recordings are retained for up to 30 days, after which they are deleted automatically. In the event of a security incident, the relevant recording may be retained until the incident is resolved or proceedings are concluded.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Only persons authorised by the hotel have access to the recordings. Where necessary and where there is a legal basis, recordings may be disclosed to competent authorities.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Key cards and lost and found items<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.14.<\/strong> Electronic key cards and door codes are used to provide access to the rooms assigned to guests and to permitted areas. The access system records the use of cards and codes. This data is used only for access management and, in justified cases, for investigating security incidents.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Please keep your key card and room access details safe and report the loss of a card to the hotel reception immediately.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.15.<\/strong> Items found on the hotel premises are generally kept for one month. To return an item, we may process the owner\u2019s name, contact details and other information necessary for the return. The data is used solely for handling and returning the item.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Data security and changes to the policy<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.16.<\/strong> We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss and destruction. Hotel employees are required to keep personal data confidential. We notify the Estonian Data Protection Inspectorate and, where necessary, the data subjects of any personal data breach.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>1.17.<\/strong> The hotel has the right to update these terms if legislation, services or data processing principles change. The current version is published on the hotel\u2019s website. We will announce significant changes on the website.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Reading this privacy policy does not in itself constitute consent to all of the processing operations described in it. Consent is requested separately where processing is based on consent.<\/p>\n\n\n\n<h2 id=\"cookies\" class=\"wp-block-heading has-semi-large-font-size wp-el\">2. COOKIE POLICY<\/h2>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Use of cookies<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.1.<\/strong> To provide a better service to its users, the Park Hotell J\u00f5hvi website <a href=\"http:\/\/www.parkhotelljohvi.ee\/\" target=\"_blank\" rel=\"noopener\">www.parkhotelljohvi.ee<\/a> uses cookies. The website is operated by Pargi 28 hotell O\u00dc.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.2.<\/strong> The website may contain third-party elements (e.g. web analytics, the booking engine or social media) that store cookies on behalf of those third parties. If a provider is located outside the European Economic Area, the safeguards described in section 1.7 apply.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>What is a cookie?<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.3.<\/strong> A cookie is a small text file that a website you visit stores on your device (computer, phone or tablet) through your browser. When you visit the website again, your browser reads the cookie and sends the information in it back to the website or element that stored it.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.4.<\/strong> Cookies make the website work, remember your choices and help us track website usage statistics. We use the information from cookies to improve the website&#8217;s functionality, user experience and content.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Types of cookies used on the website<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.5.<\/strong><strong>Necessary cookies<\/strong> are essential for navigating the website, keeping it secure and making a booking. Without them, the website cannot work properly. Consent is not required for necessary cookies.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.6.<\/strong><strong>Preference cookies<\/strong> remember your previous choices, such as your language, so the website can offer a more convenient and personalised experience.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.7.<\/strong><strong>Analytics cookies<\/strong> collect data on how visitors use the website. We use this information to make the website easier to use.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.8.<\/strong><strong>Marketing cookies<\/strong> are used to show you more relevant advertising and to measure how well advertising campaigns perform.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.9.<\/strong> By duration, cookies are either <strong>session cookies<\/strong>, which are deleted when you close your browser, or <strong>persistent cookies<\/strong>, which remain on your device until they expire or you delete them.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.10.<\/strong> A list of the cookies used on the website, with their purposes, duration and providers, is available in the website&#8217;s cookie settings.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Consent and refusing cookies<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.11.<\/strong> We store preference, analytics and marketing cookies only with your prior consent. Consent is requested in the cookie banner on your first visit to the website. Giving consent is voluntary, and refusing cookies is as easy as accepting them.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.12.<\/strong> You can change or withdraw your consent at any time in the website&#8217;s cookie settings. You can also delete or block cookies in your browser settings. Each browser does this in its own way. More information is available on the Estonian Data Protection Inspectorate&#8217;s website: <a href=\"https:\/\/www.aki.ee\/kupsised\" target=\"_blank\" rel=\"noopener\">https:\/\/www.aki.ee\/kupsised<\/a>.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\"><strong>2.13.<\/strong> If you block cookies, some website features, including booking, may no longer be available.<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-semi-large-font-size wp-el\">3. CONTACT DETAILS<\/h2>\n\n\n\n<p class=\"has-medium-font-size wp-el wp-block-paragraph\"><strong>Park Hotell J\u00f5hvi<\/strong><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Address: Pargi tn 28, J\u00f5hvi, J\u00f5hvi Parish, Ida-Viru County, Estonia<br>Phone: <a href=\"tel:+37254606000\" data-type=\"tel\" data-id=\"tel:+37254606000\">+372 5460 6000<\/a><br>E-mail: <a href=\"mailto:info@parkhotelljohvi.ee\">info@parkhotelljohvi.ee<\/a><br>Website: <a href=\"https:\/\/www.parkhotelljohvi.ee\/\">https:\/\/www.parkhotelljohvi.ee\/<\/a><\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">Legal name: Pargi 28 hotell O\u00dc<br>Registry code: 16981282<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">If you believe that your personal data has been processed unlawfully, you may contact the Estonian Data Protection Inspectorate via its website <a href=\"https:\/\/www.aki.ee\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.aki.ee<\/a> (Tatari 39, 10134 Tallinn, e-mail info@aki.ee) or apply to a court.<\/p>\n\n\n\n<p class=\"wp-el wp-block-paragraph\">The hotel reviews these principles at least once a year and whenever significant changes occur.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective from 05.11.2026 1. DATA PROCESSING PRINCIPLES Park Hotell J\u00f5hvi (hereinafter the hotel) values the privacy and security of its&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1212","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/pages\/1212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/comments?post=1212"}],"version-history":[{"count":5,"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/pages\/1212\/revisions"}],"predecessor-version":[{"id":1972,"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/pages\/1212\/revisions\/1972"}],"wp:attachment":[{"href":"https:\/\/www.parkhotelljohvi.ee\/en\/wp-json\/wp\/v2\/media?parent=1212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}