Privacy Policy

1. Who We Are

Sprintbasebzz is the operator of sprintbasebzz.cfd, an informational luxury hotel editorial platform. We are the data controller for personal data collected through this Platform.

Contact: [email protected]

2. Data We Collect

2.1 Information You Provide

When you submit an enquiry through our contact form, we may collect:

• First and last name
• Email address
• Enquiry type and content of your message
• Hotel interest and approximate travel dates (if provided)

2.2 Information Collected Automatically

When you visit our Platform, we may automatically collect:

• IP address and approximate geographic location (country/region)
• Browser type and version
• Pages visited and time spent on the Platform
• Referring website

2.3 Cookies

This Platform may use essential cookies to maintain basic functionality. We do not use advertising or tracking cookies beyond what is required for basic analytics to improve the Platform. You can control cookies through your browser settings.

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

• Responding to enquiries — Legitimate interests; processing your submitted enquiry and corresponding with you (Lawful basis: Legitimate Interest / Consent)
• Platform analytics — Understanding how our Platform is used to improve content and user experience (Lawful basis: Legitimate Interest)
• Legal compliance — Complying with applicable laws and regulations (Lawful basis: Legal Obligation)

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing

4.1 We Do Not Sell Your Data

We never sell, rent, or commercially share your personal data with third parties.

4.2 No Third-Party Hotel Sharing

Your enquiry details are not shared with any of the hotels featured on this Platform without your explicit consent.

4.3 Service Providers

We may share limited data with trusted technical service providers (such as email hosting or analytics providers) solely to operate the Platform. These providers are contractually bound to process data only as instructed and in accordance with GDPR.

4.4 Legal Requirements

We may disclose data if required to do so by law, court order, or to protect the rights and safety of users and the Platform.

5. Data Retention

We retain personal data only as long as necessary:

• Enquiry correspondence: retained for up to 12 months from the date of last communication, then securely deleted
• Analytics data: retained in aggregated, anonymised form for up to 24 months
• Legal compliance records: retained as required by applicable law

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your personal data ("right to be forgotten")
• Right to Restriction — Request restriction of processing in certain circumstances
• Right to Data Portability — Receive your data in a structured, machine-readable format
• Right to Object — Object to processing based on legitimate interests
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include secure communication channels, access controls, and regular security assessments.

However, no method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Transfers

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or reliance on adequacy decisions recognised by the European Commission.

9. Children's Privacy

This Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

10. Right to Complain

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with your local Data Protection Authority (DPA). In the EU, you can find your relevant DPA at: ec.europa.eu/justice/data-protection/bodies/authorities

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For all privacy-related enquiries, to exercise your rights, or to submit a data subject access request:

Sprintbasebzz
Email: [email protected]
Website: sprintbasebzz.cfd