Hostelworld.com – “Win 4 nights at Los Patios Medellin” – Privacy Notice (the “Notice”)
Hostelworld.com Limited (the “Company”, “we”, “us” or “our”) collects and processes personal information relating to you in connection with the competition titled “Win 4 nights at Los Patios Medellin” (the “Competition”). We do this in compliance with our obligations under applicable data protection law. This notice explains what personal data relating to you is collected, the purposes for which it is used, the third parties to whom it may be disclosed and how you can exercise your rights in relation to your personal data.
This notice should be read in conjunction with the Competition’s terms and conditions (available here), as some of the terms in this Notice are defined in those terms and conditions.
Personal Data Collected
If you are a competition entrant, the types of personal data relating to you that we collect, and process may include:
- your name, surname, and Facebook username or Instagram handle; and
- if you are declared to be the Winner of the Competition in accordance with the Competition’s terms and conditions, you will be required to provide your email address, address, passport details, age, country of residence, and content such as pictures, and social media stories or videos. Please note that if you do not provide the above information you will not be entered into the competition, or if you are a Winner of the Competition, we may not be able to provide you with a Prize.
Friends of Entrants
If you are tagged by your friend in a comment on the competition post, the only personal data that we will collect about you is your name and your Facebook username or Instagram handle. If the friend who tagged you is declared to be a Winner of the Competition in accordance with the Competition’s terms and conditions, you will be required to provide your address and passport details in order to benefit from the Prize.
Purposes of Processing and Legal Bases
- Your name will be used for the purposes of carrying out the Draw. The legal basis for this processing is that it is necessary for the performance of our contract with you.
- If you or your friend is declared to be the Winner of the Competition your name, surname, address, email address and passport details will be used for the purposes of booking the Prize. The legal basis for this processing is that it is necessary for the performance of our contract with you.
- If you are declared to be the Winner of the Competition your name, country of residence and other content such as pictures, social media stories, and videos, may be uploaded to our website and social media sites including our blog, or may be used for our e-newsletter. The legal bases for this processing are that it is in our legitimate interests to carry on marketing activities, and that it is necessary for the performance of our contract with you.
- As entry into the Competition requires commenting on a social media post and tagging 3 friends, we will collect a link to your Facebook or Instagram page. However, we will not use this information to access your Facebook or Instagram page, or to contact you, unless you are the Winner of the Competition.
Recipients of Data
We may disclose your personal data to third party recipients in connection with the above purposes, including:
- to social media service providers and other IT service providers;
- to social media influencers who promote the Competition;
- to competent regulatory authorities and bodies as requested or required by law;
- to other members of our corporate group; and
- to hostels or travel service providers in connection with booking the Prize.
We will only retain your personal data for as long as is necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements and, if relevant, to deal with any claim or dispute that might arise in connection with your contract.
In connection with the above we may transfer your personal data outside the European Economic Area, including to a jurisdiction which is not recognised by the European Commission as providing for an equivalent level of protection for personal data as is provided for in the European Union. If and to the extent that we do so, we will ensure that appropriate measures are in place to comply with our obligations under applicable law governing such transfers, which may include entering into a contract governing the transfer which contains the ‘standard contractual clauses’ approved for this purpose by the European Commission or, in respect of transfers to the United States of America, ensuring that the transfer is covered by the EU-US Privacy Shield framework. For further details of the measures that we have taken in this regard, please contact us at email@example.com.
You have the following rights, in certain circumstances and subject to certain restrictions, in relation to your personal data:
- the right to access your personal data;
- the right to request the rectification and/or erasure of your personal data;
- the right to restrict the use of your personal data;
- the right to object to the processing of your personal data;
- the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format or to require us to transmit that data to another controller; and
- where our processing of your personal data is based on you having provided consent, the right to withdraw your consent to the processing at any time.
In order to exercise any of the rights set out above, you can contact us at firstname.lastname@example.org.
If you are not happy with the way we have used your information or addressed your rights, you have the right to make a complaint to the Irish Data Protection Commissioner (email@example.com) or your local supervisory authority.