Marketing Personalisation Privacy Notice

Last updated: 24 October 2023

 

AMAN GLOBAL MARKETING PERSONALISATION PRIVACY NOTICE

 

The purpose of this Data Protection Policy is to inform you about the processing of your data in connection with marketing personalisation. 

Aman Group’s Data Protection Policy and Cookie Policy also applies to visitors of our website, as well as to other marketing materials. 

Marketing personalisation purposes 

With marketing personalisation, we would like that you feel that our brand messages are made just for you. For this purpose, we collect and use data and analytics to create content tailored to each individual Aman customer. In this Policy we provide information of what data and analytics we collect and use for marketing personalisation. 

Controllers under Data Protection Law 

Aman Group, which includes Aman Group S.a.r.l as well as its affiliates/subsidiaries (i.e., all companies whose shares are held or beneficially owned, in whole or in part, whether directly or indirectly, by Silverlink Resorts Ltd or Grand Moto Ltd) (hereafter collectively, the “Aman Group”, “we”, or “us”), is responsible for the processing of personal data for marketing personalisation. 

Your personal data 

In order to personalise our marketing messages to you we collect personal data from you in the following ways 

Newsletter Sign-up Form 

Salutation, first name, last name, email, country, subscription preferences  

Booking Engine (janu.com, aman.com) 

Salutation, first name, last name, email, country 

Check out page (shop.aman.com) 

First name, last name, email, country 

Restaurant reservation websites (Janu.com) 

Salutation, first name, last name, email, country 

Guest registration form 

Salutation, first name, last name, email, country 

Marketing emails  

IP address, information about open event (read time, date and timestamp, OS version, browser or email version, device type 

 

You communicate this data on voluntary basis and in connection with your stays at Aman properties or when purchasing Aman products or making queries about other Aman services.  

In order to understand customer preferences, we create customer profiles with information about the interactions with us. 

Other data 

When you use our website or other communications media, such as email, we also process your data as described in our Aman Group’s Data Protection Policy and Cookie Policy 

Tracking tools for email 

To provide you with personalised email content we use email beckons to collect unique User ID selected by client, IP addresses, information about open event (e.g. read time, data and timestamp), basic user agent information (OS version, browser or email version, device type).  

You communicate this data on voluntary basis. 

We disclose Personal Data to:  

  • Aman affiliates (listed here) for the purposes described in this Privacy Notice.  

  • Third parties, to permit them to send you marketing communications, consistent with your choices. These third parties have been carefully selected and work exclusively to our instructions. 

Consent 

We give you an option to give us separate consent for marketing personalisation including: 

  • Email 

  • SMS/MMS 

  • WhatsApp 

  • Marketing surveys  

  • Use of email beacon for collection of IT address, open event (e.g. read time, date and timestamp), OS version, browser or email version, device type. 

The consent is asked and given is as follows: 

  • Newsletter Sign-up Form 

  • Check out page (shop.aman.com) 

  • Restaurant reservation websites (Janu.com) 

  • Guest registration form 

If you give us your consent, we can assess your personal information in order to provide you with relevant and tailor-made personalised marketing messages via your preferred communication channels. 

Withdraw of consent 

You can edit your communication settings in the Preference Centre. 

Preference Centre can be found at the footer of any marketing email sent from Aman ([email protected]), Aman Essentials ([email protected]), Janu ([email protected]). 

Your rights 

As a data subject you can exercise the following rights as provided by the General Data Protection Regulation of the European Union (GDPR): 

  • Right of access 

  • Right to rectification  

  • Right to erasure 

  • Right to rectification of processing 

  • Right to portability 

  • Right to object 

To exercise your rights please send an email to [email protected]. 

Right to object pursuant to Article 21 GDPR 

You have the right to object at any time to processing personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. 

If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes. 

Data Security 

We use technical and organizational security measures to protect your data against accidental or deliberate manipulation, loss destruction or access by unauthorised persons.  

Use of Services by Minors 

The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect Personal Data directly from individuals under 16.   

International Transfers 

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.  

ADDITIONAL INFORMATION REGARDING THE EEA/UK: Some non-EEA/UK countries are recognized by the European Commission and UK government, respectively, as providing an adequate level of data protection according to EEA/UK standards (the full list of these countries for the EEA is available here and for the UK is available here). For transfers from the EEA and the UK to countries not considered adequate by the European Commission, the Swiss government, and the UK government, respectively, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission and UK government to protect your Personal Data. You may obtain a copy of these measures by contacting us in accordance with the “Contacting Us” section below. 

Updates to This Privacy Notice 

The “LAST UPDATED” legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. Any changes will become effective when we post the revised Privacy Notice on the Services.   

Contacting Us 

Aman Group S.a.r.l and its affiliates in the Aman Group are responsible (data controllers) for the Personal Data we hold about you. The Aman Group is also an independent controller in relation to our resort owners, who have a limited right to use the Personal Data we collect. As the hotel you are booked to stay in may not be owned by the Aman Group, we disclose Data to owners of Aman Group branded properties for the purposes described in this Privacy Notice. Owners have a limited right to use certain Personal Data for their own purposes and therefore qualify as independent data controllers in order to comply with their own legal obligations (including maintaining books & records and other compliance obligation).  

Aman Group’s address is Grabenstrasse 17, 6340 Baar, Switzerland.  

Aman’s European Representative is AMANRESORTS MANAGAMENT NV, a company established in the Netherlands, with offices located in Netherlands, address Herikerbergweg 88, 1101CM Amsterdam, registration number 803529363  

You may always contact us at data [email protected]  or our EU Representative at  [email protected] with your questions or concerns regarding this Privacy notice or in general about our processing of your Personal Data.