CONTACT COVID-19 RESORT INFO Menu PRIVACY POLICY HOME » PRIVACY POLICY 1. WHO WE ARE Wyndham Duchally Country Estate is operated by Duchally House Leisure Limited (UK Company Number: 3628883) registered office address is: Hallswelle House, 1 Hallswelle Road, London NW11 0DH. (“we, us, our or the Company”). This hotel/resort is operated by the Company under a franchise agreement with Wyndham Hotel Group (UK) Limited, a limited company registered in England, company number 08263382. This privacy policy has been prepared by us to meet the requirements of the EU Regulation 2016/679 General Data Protection Regulation (EU GDPR) or as it has been enacted into United Kingdom law by the European Union (Withdrawal) Act 2018 and as supplemented or amended by the Data Protection Act 2018 (UK GDPR) such as the particular GDPR regime applies to us depending on which jurisdiction we are operating in. For the purposes of the UK GDPR, and other than as described below, Duchally House Leisure Limited (UK ICO ZB088028) will be the data controller of the personal data we process about you. In circumstances where an EU GDPR representative is required, details can be obtained by contacting our Data Protection Officer using the contact information set out further on in this privacy policy. This privacy policy (together with our Terms of Use and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that we receive about you from third parties, will be processed by us. Please read this privacy policy carefully and if you do not accept it you should stop using this website immediately. Data Controllers This privacy policy is applicable to all companies which are subsidiaries, associated or sister companies of the Company, however there may be variations in the following circumstances: Employee or contractor: if you are an employee or a contractor of a different company your data controller will be the company shown on your contract or as notified to you. Guest staying at a branded resort: the data controller will be the entity shown on your booking and/or check in form. In all instances our data controller will hold a data protection registration in the particular jurisdiction in which it operates and as applicable apply the UK or EU GDPR Regulations as set out in the remainder of this privacy policy. Please note that as described elsewhere in this privacy policy you may enter into separate relationships with other providers who will be the data controllers for that particular relationship, and you are advised to check their individual privacy policies. 2. YOUR PERSONAL DATA 2. The personal data that we collect may include: 2.1.1 Name 2.1.2 Date of Birth 2.1.3 Home Address 2.1.4 Email 2.1.5 Telephone Number 2.1.6 Passport Details 2.1.7 Flight Details 2.1.8 Other personal details related to holiday preferences 2.2 We may collect such personal data from you: 2.2.1 where you provide it by filling in the forms on this website (our Site) through creating a members account on our Site; 2.2.2 through your visits to our Site; 2.2.3 where you use a hard copy form to send us information; 2.2.4 through our correspondence and communications, or a record of them if you contact us (including recording calls for training and monitoring purposes); 2.2.5 via surveys that we use for research purposes, which we have asked you to complete; 2.2.6 through details of holidays reserved through us and other information obtained as part of a transaction with us. 2.3 We may collect such personal data from third parties: 2.3.1 where you fill in forms on websites operated by lead generation companies; 2.3.2 as part of lead generation databases; and 2.3.3 through surveys that are collected on our behalf by third party companies. 3. HOW WE USE YOUR PERSONAL DATA AND LEGAL BASIS FOR PROCESSING 3.1 We collect and process your data in order to provide you with our services or to promote our services to you. This includes using your personal data in the following ways: 3.1.1 to set up and maintain your holiday reservation or membership, as the case maybe; 3.1.2 to provide you with the best possible service; 3.1.3 to request customer feedback; 3.1.4 to develop, improve and update our products to better meet your needs and preferences; 3.1.5 for statistical analysis; 3.1.6 to notify you about changes to our service; 3.1.7 to provide you with information about goods and services which may be of interest to you. We may contact you about these by post, telephone, email, SMS or other method by which you have agreed to us contacting you. 3.2 Any information or statistics relating to our business that we disclose to others shall not identify you personally. 3.3 We and our sister companies (a list of companies providing the key services is available on request) have been in business since 1984 and during that time have developed a number of divisions. We and our sister companies offer a wide range of services and products so that our customers can enjoy great holiday experiences in many different destinations, whether it is buying a residence abroad, sailing holidays, using our travel club, timeshare, holiday ownership, points, renting holiday accommodation or simply enjoying our great hospitality and management services, The portfolio is extensive and has been put together with many years of experience in understanding how you want to holiday. From time to time we would like to share our experiences and promotions with you. 3.4 If you have provided us with consent to do so, we may pass your details to named third parties, so that they can provide information about their products and services which may be of interest to you. They may contact you by post, telephone, email, SMS or other method to which you have agreed. 3.5 We use your personal data for a variety of different legal bases, including: 3.5.1 for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. If you do not provide such personal data we may not be able to satisfy our legal obligations to you under such contract; 3.5.2 where necessary for our legitimate interests, for example in relation to undertaking market research and customer profile analysis in particular in relation to occupation, income band and marital status; and 3.5.3 in relation to sending our direct marketing materials to you, we rely on you having given consent to us in respect of such communications. 3.6 If you would like to opt out of receiving marketing information from us or to revoke your consent for us to pass your details to third parties, you can do so by: 3.6.1 selecting unsubscribe on any email sent by us; 3.6.2 emailing us at data-protection-officier@WyndhamDuchally.com; 3.6.3 telephoning us on 0208 176 0007; or 3.6.4 writing to us at Data Protection Officer, Duchally House Leisure Limited, Hallswelle House, 1 Hallswelle Road, London NW11 0DH. We reserve the right to take reasonable steps to authenticate your identity with respect to any such request. 4. CONSEQUENCES OF NOT PROVIDING YOUR PERSONAL DATA You are not obligated to provide your personal data, however, some of the personal data we request from you (including the data detailed at 2.1 is required for us to provide you with our services. Therefore, we will not be able to offer all of our services without it. Generally, where we ask you to consent to us processing your personal data, this is the data which is not required by us to fulfil our obligations to you and you can withdraw your consent to us processing such personal data at any time. 5. PROFILING 5.1 We may analyse your personal data to create a profile of your interests and preferences so that we can tailor your holiday experiences and contact you with relevant information. We may make use of additional information about you when it is available from external sources to help us to do this effectively. 5.2 To the extent that we create and store your profile we do not take decisions about you which are based solely on automated processing of your personal data. When we use your personal data to create your profile the following shall apply: 5.3.1 clear information explaining how we compile your profile shall be provided to you, including the significance and likely consequences of creating a profile; 5.3.2 the personal data we hold about you which relates to your holiday interests and preferences will be used by our team to create a profile for you which we will then use to provide you with suggested holidays and offers which we think may be of interest to you; 5.3.3 all decisions in relation to the offers and suggestions we provide to you will be made by an individual who works for us and will not be based on any automated decision making software. 6. FRAUD PREVENTION AGENCIES 6.1 If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies. 6.2 Law enforcement agencies may access and use this information. 6.3 We and other organisations may also access and use your information to prevent fraud and money laundering. 7. WHERE WE STORE YOUR PERSONAL DATA AND SECURITY 7.1 All information you provide to us is, as far as reasonably practicable, stored on our, our parent’s or sister companies’ secure servers or trusted internet service providers (ISP). Any financial information, such as credit/debit card numbers will never be stored on our servers or ISP and payments will be processed by secure third party merchant service suppliers. We ask you not to permit anyone to use your name. 7.2 Your personal data may be transferred to and stored at a destination outside of the UK or the European Economic Area (EEA). It may also be processed by staff operating outside of the UK or EEA who work for us, one of our group companies or our suppliers for the purposes set out in this policy. In order to ensure that any third party processes your personal data in a way which is consistent with the applicable UK and EU’s laws on data protection, we have put in place agreements with those third parties, including with our group companies, which contain provisions approved by the UK or the EU as the case may be for protecting personal data. 7.3 We take your privacy seriously and take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place including encryptions, practices, restrictions, IT and authentication procedures. 7.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. 7.5 Where you have consented to share your photos, recordings, videos and other materials with us, the terms of such consent will provide us with the right to use them in promotions now and for a reasonable period in the future on our websites, social media pages and any other promotional channels, for PR and advertising purposes. You are free to withdraw such consent at any time by contacting us using the details set out in 12.1 below providing a description of the material in question and we will make all reasonable efforts to remove the materials at the first available opportunity. Please note that we have no control over any postings and re-postings of the materials onto other social media pages or websites (such as Facebook) you or others may have made. In such instances please check the terms of use of those sites and contact them direct. 8. DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES 8.1 We may disclose your personal information to our parent company, subsidiaries, sister companies or to third parties: 8.1.1 to prepare or send any communications to you, or to assist us in connection with any of our administrative or business functions, or in the provision of any of our services to you; 8.1.2 if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; 8.1.3 to anyone whom we transfer our rights and duties to; and 8.1.4 if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Use and other agreements; or to protect the rights, property, or our safety, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. 8.1.5 We will never disclose, share or sell your data without your consent, unless required to do so by law. 8.2 we use third parties to provide services and business functions listed below, however all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy policy, relevant data protection laws and any other appropriate confidentiality and security measures. 8.3 Third parties include but are not restricted to the following: 8.3.1 Wyndham Hotel Group LLC - Please refer to the privacy statement on Privacy Notice (wyndhamhotels.com); 8.3.2 CLC Resort Management Limited and RMF Europe Limited and its subsidiaries’ resort operation services – copy of their privacy statements available on request (using the same contact details as set out in 12.1 below). 9. HOW LONG WE KEEP YOUR DATA We only ever retain personal data for as long as is necessary and we have strict review and retention policies in place to meet these obligations. Generally, where we have a contractual relationship with you, we will retain your data for a period of seven (7) years from the date our contractual relationship ends unless we are legally required to retain it for a longer period. Where you have consented to us using your details for direct marketing we will keep such data for 24 months from the date of your latest consent or until you notify us otherwise and withdraw your consent. 10. YOUR RIGHTS Your personal data is protected under data protection laws and you have a number of rights (explained below) which you can seek to exercise. Please contact us using the details shown below if you wish to do so, or if you have any queries in relation to your rights. If you seek to exercise your rights we will explain to you whether or not the right applies to you; these rights do not apply in all circumstances. 10.1 Right of access – You have a right to access the personal data we hold about you upon request. This is known as a "Data Subject Access Request". You can exercise this right by making a request in writing, by email or by telephone using the contact details in the contact section below. 10.2 Right of rectification – You can ask us to correct or update your information to ensure it is accurate and complete. 10.3 Right to erasure and right to restrict processing – You can ask us to stop processing and to delete your data in certain circumstances (for example where it is processed with your consent, or it is no longer necessary for us to process it). 10.4 Right to data portability – You have a right to ask us to provide you with information in a form that suits you, and/or to provide your information to a third party. 10.5 Right to object – You have a right to object to our processing of your information. 10.6 Profiling and automated decisions – You have a right not to be subject to automated decisions which have a legal effect and to be protected by safeguards in respect of any profiling. 10.7 Right to object to direct marketing – Where you have consented to receive direct marketing you can change your mind at any time by contacting us or following the directions in each message. Please allow a few days for us to action your request. 11. LINKS AND CALL RECORDING 11.1 In addition to this Site, there are other websites managed by companies operating under other branding and some of which may be subject to laws of other jurisdictions. These separate websites are provided by the applicable entities managing them and are not our responsibility. Such sites, as well as other websites that may be linked to this website, are not governed by this privacy policy. 11.2 Our Site may, from time to time, contain links to and from the websites of our service providers, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. 11.3 Calls between us may be recorded and/or monitored for training and compliance purposes. 12. CONTACT AND COMPLAINTS 12.1 If you have any questions, want to exercise any of your rights or make a complaint, please contact our Data Protection Officer by writing to us at Duchally House Leisure Limited, Hallswelle House, 1 Hallswelle Road, London NW11 0DH; emailing data-protection-officer@WyndhamDuchally.com or by telephoning 0208 176 0007. 12.2 You also have the right to complain to the Information Commissioner's Office at the Exchange Tower, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF telephone number: 0303 123 1113. 13. CHANGES TO OUR PRIVACY POLICY We may make changes to the policy from time to time to reflect changes to our operations or legal or regulatory requirements. Any changes we may make to our privacy policy in the future will be posted on this page. 14. COMPUTER INFORMATION AND COOKIES POLICY We may collect information about your computer, including where available your IP address, operating system and browser type, for analytical purposes and to help us develop and improve our websites. This is statistical data about our users' browsing actions and patterns; it does not identify any individual. Many of our websites use cookies. Cookies are small text files stored on your computer by your browser. They are used for many things, such as remembering whether you've visited the site before, so that you remain logged in or to help us work out how many new website visitors we get each month. They contain information about the use of your computer but don't include personal information about you (they don't store your name, for instance). When you visit our Site an information bar is displayed at the top or bottom of the page. This alerts visitors to the fact that our Site uses cookies and allows a user to click to find out more information about our use of cookies. By continuing to use our Site you are consenting to our use of cookies. Once consent is obtained, it is not necessary to obtain it again for the same user each time the same cookie is used in the future. Managing cookies You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our Site and therefore not get the best experience from the Site. You can find out how to do this by visiting http://www.aboutcookies.org. This site has a guide on how to change the settings for most of the major internet browsers. http://www.youronlinechoices.com has a good guide to online behavioural advertising and online privacy. Web Tools We might also use web tools to collect information about your browsing activities while on our Site. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes. Where we allow advertisers to place advertisements on our sites, those advertisers may also use cookies or web tools that are set by other people such as advertising agencies, or the businesses to which the advertisements in question relate. We do not have access to any information collected in this way and, if you are concerned, you should contact the advertiser for more information. Google Analytics and Google Website Optimizer We like to keep track of what pages and links are popular and which ones are not to help us keep our sites relevant and up to date. We also like to identify trends of how people navigate (find their way through) our sites and if they get any error messages from web pages. For this we use Google Analytics which is a service provided by Google, Inc. (Google). Google Analytics uses cookies to help us analyse how users use the Site. The information generated by these cookies (including your truncated IP address) is transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your, and other users’, use of our website, compiling reports for us on website activity and providing other services relating to website activity and Internet usage. Please note that Google only receives your truncated IP address. This is sufficient for Google to identify (approximately) the country from which you are visiting our sites, but is not sufficient to identify you, or your computer or mobile device, individually. Wyndham Duchally Country Estate Gleneagles, Auchterarder, Perthshire, PH3 1PN Scotland Tel: +44 (0) 1764 663 071 Reservations: reservations@WyndhamDuchally.com CONTACT COOKIE POLICY COVID-19 PRIVACY POLICY RESORT INFORMATION TERMS OF USE © 2021 Wyndham Duchally Country Estate.