SUMMARY OF HOW WE USE YOUR DATA
WHAT DOES THIS NOTICE COVER?
- What do we do with your information and what is the legal basis for this use? The Aman Group, comprising Aman Group SARL as well as its affiliates, subsidiaries and related entities like Aman Products UK Limited ("Aman"), uses your personal information to process and facilitate bookings, product orders and deliveries, provide you with highly-individualized service at our resorts or for delivery to your chosen location, respond to your requests for information, inform you of our products and services and other purposes as set out in this notice.
- Disclosure: Data is shared with companies in the Aman Group, third party service providers and professional advisers that may be located outside the EEA.
- Your rights: You have certain rights to your personal information under applicable laws, including a right to object to some of the processing which Aman carries out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
This is the Privacy Notice of Aman. It describes how we will make use of all Personal Information which you provide to us or any of our Aman Group companies.
Please read this page carefully before you start to use this site. If you do not wish to be bound by this Privacy Notice then you should not access this site. Where permitted by law, access of this site by you shall be deemed to be your acceptance of this Privacy Notice and your agreement that we may process and use your personal information in accordance with this Privacy Notice.
If you have any queries regarding this Privacy Notice or complaints about our use of your information please contact us at “email@example.com
” and we will do our best to deal with your complaint or query as soon as possible.INFORMATION WHICH WE MAY OBTAIN ABOUT YOU
The types of personal information we may collect and process from you include:
WHAT INFORMATION ABOUT YOU DO WE RECEIVE FROM THIRD PARTIES?
- your contact information (e.g. name, telephone number, email address, postal address);
- your financial information (e.g. credit card number, security code, expiration date);
- information related to your travel profile (e.g. accommodation and travel preferences, booking history, special health accommodations);
- information related to your client profile (delivery address, country of residence, favourite currency…);
- information related to your physical characteristics and your skincare concerns (e.g. skin type, hair type, preference for nourishing or purifying skincare products…)
- if you contact us or our agents, we may keep a record of that communication and any communications and correspondence with you; and
- information about your computer, including where available, your IP address, operating system and browser type, for system administration and security reasons and to collect aggregate information. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
Sometimes, we receive information about you from third parties. In particular, we may receive information about you from travel agents, tour operators and destination management companies whom you have direct contact.
The information we collect from such third parties include your contact information and information related to your travel profile.WHAT WE DO WITH YOUR INFORMATION AND WHAT IS THE LEGAL BASIS FOR THIS USE?
We may use the personal information you supply to us via our site for the following purposes:
- to fulfil a contract, or take steps linked to a contract: this is relevant where you make bookings or place an order with us. This includes, for example:
- processing and facilitating bookings, including verifying your identity, taking payments and communicating with you; including verifying your identity, taking payments and communicating with you;
- processing and delivering an order of skincare products;
- as required by Aman to conduct our business and pursue our legitimate interests, in particular:
- responding to requests which you have submitted via our site and to deal with on-going matters relating to such requests;
- presenting content from our site in the way that we consider most effective;
- providing you with highly-individualized service at our resorts and presenting you with information relating to Aman;
- if you provide a credit or debit card as payment, we use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud (see data sharing below);
- monitoring customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
- using information you provide to investigate any complaints received from you or from others, about our website or our products or services;
- using data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);
- where you give us consent:
- providing you with travel-related or skincare-related information, information relating to Aman or promotional details about products and services that may be of interest to you, as well as personalized mailings (electronic or otherwise) or other communications;
- placing cookies and using similar technologies in accordance with the "Cookies and Similar Technologies" section and the information provided to you when those technologies are used;
- on other occasions where we ask you for consent, we will use the data for the purpose which we explain at the time.
- for purposes which are required by law, such as:
Relying on our legitimate interests
- in response to requests by government or law enforcement authorities conducting an investigation.
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out later in this notice.Withdrawing consent or otherwise objecting to direct marketing/profiling
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by contacting us using the details set out in "Opting Out" section below.DISCLOSURE
In some cases we may be required to disclose your personal information to comply with legal requirements and requests from government agencies if required for the purposes set out above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. We may also disclose your personal information to our group companies or to third parties:
- who provide us with payment related, data management and profiling, analytics, advertising or other services in order to process your bookings, provide information about tailored and individualized services/offers including on social media, and provide you with any information that you have requested;
- where we consider that we need to in order to comply with any law or regulation, where we suspect that any criminal offence may have been committed, to protect our rights, property or safety or that of others and in any circumstances where we consider that we are permitted to do so by law or regulation; and
- where that third party is a professional adviser to us or any of our group companies.
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.
Our site may contain links to other websites belonging to third parties. We do not control the privacy practices of these other websites. You should therefore make sure when you leave our site that you have read that website’s Privacy Notice.TRANSMISSION OF PERSONAL INFORMATION OUTSIDE EEA
The information you provide to us may be given to our third party service suppliers outside the European Economic Area for the purpose of delivering the personalized services and communications stated above. Aman will always take steps to ensure that your information is used by third parties in accordance with this Privacy Notice and that your information is kept secure at all times. In particular, in relation to any transfer to a third party in a country that is not subject to an adequacy decision by the EU Commission, such transfer will be appropriately protected through mechanisms such as EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review upon request.
Where permitted by law, if you do not consent to this transfer, then please do not register on our site as we will be unable to provide you with our services.COOKIES AND SIMILAR TECHNOLOGIES
Aman uses the following cookies:
These cookies collect information about how visitors use our website, so that we can continually improve our website.
These cookies allow our website to remember choices users make (such as user name, or the region users are in) and provide enhanced, more personal features. These cookies can also be used to remember changes users have made to text size, fonts and other parts of web pages that users can customise.
We use a “physical” cookie (file) for the booking bar to store data such as the number of guests and the dates, so that users get their parameters pre-populated in the booking bar when they navigate from one page to another.
- to identify the country for the selection of relevant language and to block the firing of some pixels
- for use of fonts
- for the operation of videos
Social Media Cookies
These cookies are used when users share information using social media accounts. We use Facebook's, Vimeo's and Brightcove's pixels.
These cookies collect information about your browsing habits to deliver advertising to you that is relevant to you and your interests. The cookies we use include Google Ad Services, Facebook, Adwords, DoubleClick, Yahoo, Bing, Yahoo Japan.
More information on cookies and similar technologies is available at the website www.allaboutcookies.orgWHAT RIGHTS DO I HAVE?
In accordance with applicable laws, you may have rights in relation to your personal information. Such rights include:
You have the right to ask us for a copy
of your personal information; to correct
(stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format
, and to ask us to share (port) this data to another controller
In addition, you can object to the processing
of your personal information in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing (see below "Opting Out").
These rights may be limited
, for example if fulfilling your request would reveal personal information about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in applicable data protection laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain
to an applicable data protection authority where you live, work or where you believe a breach may have occurred.OPTING OUT
If you do not wish to remain on our database and to receive our personalized mailings (electronic or otherwise) or other communications, please note that you may opt out of our database by using the “Unsubscribe” option at the foot of our email communications, or by sending an email to our Data Protection Manager at the following email address: firstname.lastname@example.org
.HOW LONG WILL YOU RETAIN MY DATA?
Where we process personal information for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.
Where we process your financial information, we will only keep the information for as long as necessary for the purpose/s for which it is collected and up to two months thereafter.
In relation to all your other personal data including registration data, we will not retain your data for longer than required for the purposes indicated above, and will delete personal data if they are no longer necessary for the purposes for which they are collected or otherwise processed, unless we are required to keep the data to comply with applicable legal obligations.QUERIES OR COMPLAINTS
If you have any queries or complaints regarding this Privacy Notice or use of your personal information please contact our data protection manager using the contact details set out in the “Opting Out” section above.EU REPRESENTATIVE
If you are in the EU, Aman's EU representative is OGS London Limited, and can be contacted at:
Address: 63 Brook Street, Mayfair, London W1K 4HS, United Kingdom
Contact No: +44 203 861 8700WHICH AMAN ENTITY IS MY DATA CONTROLLER, AND WHICH AFFILIATES MIGHT MY DATA BE SHARED WITH?
The data controller for your information is Aman Group SARL. A list of Controller group entities and their contact details can be found here: List of ControllersAMENDMENTS
We may update this Privacy Notice from time to time and we will notify you of any material changes using the email address you have provided upon registration or by an announcement on the site. The changes will apply to the use of the site after such notice. Where permitted by law, if you use the site after the date on which the changes come into effect, you will be deemed to have accepted the new Privacy Notice.
22 May 2018