Information We Collect (and Legal Basis for Processing)

We will only collect and process your personal information where we have a lawful basis to do so under GDPR. Here"s a breakdown of the information we collect and the legal basis for processing it:

• Personal Information:This includes information that can be used to identify you, such as your name, email address, phone number, mailing address, and payment information. Information collected during reservations is necessary to fulfill our contract with you and complete your stay.
• Usage Data:This includes information about your activity on the Website and Services, such as the pages you visit, the time of your visit, and your IP address collected through website use helps us improve the Website and Services (legitimate interest). You can opt out of cookies used for this purpose (see Cookies and Tracking Technologies below).
• Device Information: This includes information about the device you use to access the Website and Services, such as your device type, operating system, browser type, and unique device identifiers. This information helps us ensure the Website functions properly across different devices (legitimate interest).

How We Collect Information

We collect information from you in a variety of ways, including:

• When you make a reservation: We collect your personal information when you make a reservation on our Website or through our Services.
• When you contact us:We collect your personal information when you contact us by email, phone, or through our website contact form.
• When you use the Website and Services:We collect usage data and device information when you use the Website and Services.

How We Use Your Information

We use your information for the following purposes:

• To complete your reservations and provide you with the Services.
• To send you marketing and promotional communications (with your consent).
• To improve the Website and Services.
• To personalize your experience on the Website and Services.
• To comply with legal and regulatory requirements.

Sharing Your Information

We may share your information with third-party service providers who help us operate the Website and Services. These service providers are contractually obligated to keep your information confidential and secure.
We may also share your information with third parties in the following circumstances:

• To comply with legal and regulatory requirements.
• To respond to a subpoena or court order.
• To protect the rights and safety of Attic Inn, our employees, and others.

Your Choices

You have choices regarding your information:

• You can opt out of receiving marketing and promotional communications from us.
• You can access and update your personal information through your account on the Website.

Security

We take steps to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no website or internet transmission is completely secure.

Children 's Privacy

Our Website and Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.
Your Rights Under GDPR
If you are located in the European Union, you have certain rights under GDPR regarding your personal information. These rights include:

• Right to Access:You have the right to request a copy of the personal information we hold about you.
• Right to Rectification:You have the right to request that we correct any inaccurate personal information we hold about you.
• Right to Erasure:You have the right to request that we erase your personal information, subject to certain exceptions.
• Right to Restriction of Processing:You have the right to request that we restrict the processing of your personal information.
• Right to Data Portability:You have the right to request that we transfer your personal information to another controller.
• Right to Object:You have the right to object to the processing of your personal information for marketing purposes.

Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law (e.g. for tax or accounting purposes).

Cookies and Tracking Technologies

Attic Inn uses cookies and other tracking technologies to collect information about user activity on the website. These technologies help us remember your preferences, understand website traffic, and improve your overall experience. You can choose to disable cookies through your browser settings. However, this may limit your ability to use certain features of the Website.

International Transfers

Attic Inn may transfer your personal information to servers located in the United States or other countries where our service providers are located. We have implemented appropriate safeguards to protect your personal information during international transfers, such as:

• Standard Contractual Clauses: We use standard contractual clauses approved by the European Commission to ensure that your personal information is protected when transferred to countries outside the European Economic Area (EEA) that do not have adequate data protection laws.
• Technical and Organizational Measures: We implement technical and organizational measures to ensure the security of your personal information, such as encryption in transit and at rest to protect it from unauthorized access and disclosure.

Changes to this Privacy Policy

We may change this Privacy Policy at any time to reflect changes in our practices. We will notify you of any significant changes by posting the revised Privacy Policy on our Website or by sending you a notification directly. We recommend you review the Privacy Policy periodically for updates.

Complaint Process

If you have a concern about Attic Inn's handling of your personal information, you have the right to lodge a complaint with a supervisory authority in the European Union.

Data Breach Notification

In the event of a data breach that compromises your personal information, Attic Inn will notify you and the relevant authorities as required by GDPR.

Contact Us

If you have any questions about this Privacy Statement, please contact us at contact@atticinn.com