HotelRunner respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. This Privacy Notice applies to personal information that we collect from you, or you provide to us, when you engage with HotelRunner or our websites, including at www.hotelrunner.com and www.ratefor.net (the “Websites”).
If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Privacy Notice.
1. What does HotelRunner do?
HotelRunner is headquartered in United Kingdom, but with group companies around the world. HotelRunner is the world’s leading sales and channel management platform for hotels. Our products and services enable our customers to promote their hotel, manage guest bookings and gather data to better improve their offering.
2. What personal information does HotelRunner collect and why?
The personal information that we may collect about you broadly falls into the following categories:
Information that you provide voluntarily:
The information we collect from you through our Websites, in connection with virtual and in person events and through correspondence with you, includes:
We use this information to respond to enquiries and requests as well as to send marketing communications and personalized content about products and services we think may be of interest to you.
In addition, in relation to our customers or prospective customers, service providers and partners, we use your personal information to:
If we ask you to provide any other personal information not described above, then the personal information we will ask you to provide, and the reasons why we ask you to provide it, will be made clear to you at the point we collect your personal information.
Information that we collect automatically
When you visit our Websites, we may collect certain information automatically from your device. In some countries, including the United Kingdom and countries in the European Economic Area, this information may be considered “personal data” or “personal information” under applicable data protection laws.
Specifically, the information we collect automatically may include information like your IP address, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform and other technical information. We may also collect information about how your device has interacted with our Websites, including the pages accessed and links clicked. This includes the date and time, products you viewed or searched for, page response times, download errors, length of visits, and page interactions.
We collect this information to:
Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and similar tracking technology” below.
Information that we obtain from third party sources
From time to time, we may receive personal information about you from third party sources (including our business partners, technical, payment and delivery service contractors, advertising networks, analytics providers, search information providers and credit reference agencies), but only where these third parties have confirmed to us that they either have your consent or are otherwise legally permitted or required to disclose your personal information to us. We use this information to maintain and improve the accuracy of the records we hold about you and to send you personalized content.
We will combine this personal information with personal information we already hold about you and use this combined information for the purposes set out above.
Where we do not need your personal information to identify you, we may aggregate your personal information into an anonymised form. We may do this in order to use information for statistical purposes and to understand website interaction more generally.
3. Who does HotelRunner share my personal information with?
We may disclose your personal information to the following categories of recipients:
4. Legal basis for processing personal information
Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only (i) where we need the personal information to perform a contract with you, (ii) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or (iii) where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Websites and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to our queries or improving our Websites. We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.
5. Cookies and similar tracking technology
6. How does HotelRunner keep my personal information secure?
We use various technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.
Specific measures we use include (amongst others):
As with any content that published on the Internet, any content, including personal information, that you contribute to be shared, published or transmitted to other users of our Websites, is visible to other users and can be read, collected, or used by them. We urge you to be careful about giving out information in public areas of our Websites. Please note that, even after removal, copies of your content, including personal information, that you contribute to be shared, published or displayed on our Websites, or transmitted to other users of our Websites, may still remain viewable in cached and archived pages, and may have been saved by other users.
7. International data transfers
Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Our group companies and third party service providers and partners operate in United Kingdom and around the world, including the USA where our cloud data storage is based. This means that when we collect your personal information, we may process it in any of these countries.
However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. These include implementing Standard Contractual Clauses for transfers of personal information between our group companies, which require all group companies to protect personal information they process which is received from the UK or EEA in accordance with UK and/or European Union data protection law, as applicable.
Our Standard Contractual Clauses can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.
8. Data retention
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
9. Your data protection rights
Where you are located in the UK or EEA, you have the following data protection rights:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
10. Children’s information
We do not knowingly collect or solicit personal information from anyone under the age of 18. If you are under 18, please do not send any personal information about yourself without your parent’s or legal guardian’s express consent. If we learn that we have collected personal information from a child under the age of 18 without consent from the parent or legal guardian, we will investigate and delete that information as soon as reasonably practicable. If you believe that a child under 18 may have provided us personal information, please contact us using the contact information in the ‘How to contact us’ section.
11. Additional information for California consumers
If you are a California resident, the following information also applies to you and supplements the information contained in this Privacy Notice.
Information We Collect and Sources of Information
Our Privacy Notice already describes the information we collect and the sources of information – see the above section “What personal information does HotelRunner collect and why?”. This section organizes that information around the personal information categories set out in the California Consumer Privacy Act (CCPA).
In the past 12 months, we have collected the following information for the following purposes:
We do not share your personal information except as approved by you or as otherwise described in this Privacy Notice. In the preceding 12 months, we have disclosed the following categories of personal information described above for the business purposes described in this Privacy Notice:
Under the California Consumer Privacy Act (CCPA), a “sale” is defined very broadly and includes a wide array of data sharing. As the term is defined by the CCPA, we “sold” the following categories of personal information in the last 12 months: identifiers/contact information, Internet or other electronic network activity information, and inferences drawn from the above. We “sold” such information to advertising networks and data analytics providers. The business purposes of “selling” personal information is for third-party companies to perform services on our behalf, such as marketing, advertising, and audience measurement. We do not have any actual knowledge that we “sell” personal information of consumers under 16 years of age.
Most modern web browsers give you the option to send a Do Not Track signal to the sites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a site should respond to this signal, and we do not take any action in response to this signal.
California Privacy Rights
If you are a California resident, you have the following consumer privacy rights:
California law also permits you to request certain information regarding the disclosure of your personal information by us and our related companies to third parties for the third parties’ direct marketing purposes. We do not disclose your personal information to third parties for their own direct marketing purposes.
In addition to the specific forms listed above, you can exercise any of these rights by contacting us at email@example.com and providing us with your name, email and address (including zip code). We may verify your identity and by providing us with your California zip code or other proof of California residency.
You can also authorize an agent to submit a request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with California probate law. Authorized agents that are business entities must be registered with the California Secretary of State to conduct business in California. Where you use an agent, we will ask for verification of your authorization, namely a copy of your written authorization for the agent to submit the request on your behalf.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We do not discriminate against any consumer for exercising their consumer rights.
12. Third party links
Our Websites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
13. Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
14. How to contact us
If you have any questions or concerns about our use of your personal information, please contact us using the following details: firstname.lastname@example.org