Política de privacidad
Oliver’s Riff Mamangal Beach Resort
Effective: July 2025

1. General Information
At Oliver’s Riff Mamangal Beach Resort, we take the protection of your personal data very seriously. This Privacy Policy outlines how we collect, process, store, and protect your personal information — both through our website and during direct communication, including inquiries, reservations, and stays at our resort.

We handle all personal data in accordance with the applicable laws of the **Republic of the Philippines**, specifically the **Data Privacy Act of 2012** (Republic Act No. 10173), and where applicable, in accordance with the **General Data Protection Regulation (GDPR)** of the **European Union** and other international data protection standards.

2. Data Controller
Oliver’s Riff Mamangal Beach Resort
Owner: Oliver Brodowski
Sitio Mamangal, Barangay Balite
Virac, Catanduanes

Email: info@oliversriff.com

3. Purpose and Legal Basis of Processing
We collect and process personal data only when necessary and for the following legitimate purposes:

  • Responding to inquiries and communication
  • Managing bookings and reservations
  • Guest registration and check-in/out management
  • Compliance with legal and regulatory obligations
  • Participation in optional guest surveys or reviews

Collected personal data may include:
– First and last name
– Email address
– Phone number
– Address (if required for billing)
– Booking and stay details
– Payment information (for direct bookings)
– Travel companions or group details (if applicable)

Legal Bases:
– **Art. 6(1)(b) GDPR** – for the performance of a contract
– **Art. 6(1)(f) GDPR** – legitimate interest (e.g. secure operations)
– **Philippine Data Privacy Act** – based on **consent**, **legitimate purpose**, or **contractual necessity**

4. Data Sharing and Transfers
Your data is treated confidentially and will only be shared with third parties if:

  • It is required to fulfill your booking or stay (e.g., third-party payment processors or reservation tools)
  • We are legally obligated to share it with authorities
  • You have given explicit consent

If data is transferred outside the **Philippines** or the **European Economic Area (EEA)** (e.g., to service providers such as Curator.io), we ensure that appropriate safeguards are in place, such as standard contractual clauses or data processing agreements in line with GDPR and Philippine DPA requirements.

5. Use of Digital Communication
When contacting us via email, website, or forms, the information you provide is used solely to process your request. We do not use such data for automated profiling, marketing, or analysis without your explicit consent.

6. Social Media Integration (Curator.io)
Our website uses **Curator.io** to visually display social media content (e.g., Instagram). For technical reasons, your IP address, browser details, and time of access may be transmitted to servers in the **USA**. This display is passive and for visual purposes only — no analysis or tracking is conducted by us.
See Curator.io’s privacy policy here: https://curator.io/privacy-policy

7. Your Rights (especially for EU Residents)
If the **GDPR** applies to you (e.g., if you reside in the EU), you have the following rights:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (“right to be forgotten”, Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Right to object to data processing (Art. 21 GDPR)

To exercise these rights or for any privacy-related inquiries, please contact us at:
info@oliversriff.com

8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes mentioned above, or as required by local tax, accounting, and regulatory laws. Once this period has expired, your data will be securely deleted.

9. Data Security
We implement appropriate **technical and organizational measures** to ensure the security and confidentiality of your personal data, including **SSL encryption** on our website and limited internal access to authorized staff who are bound by confidentiality agreements.

10. Changes to This Policy
We reserve the right to update this Privacy Policy in response to legal, technical, or operational changes. The most current version is always available on our website.