Effective as of January 1, 2020
When you contact us at “The Welsh Farm” (The Country Yurt, The Chestnut Cabin and The Yurt Hideaway), you’re trusting us with personal information. We are committed to keeping that trust, which is why our policy as a local business is to take every step to ensure that individual user's data and privacy rights are protected and to provide transparency about our data practices.
The data that serves you
When you give us information about yourself and allow us to connect with you, your feedback and use of our site and social platforms allows us to improve the information we distribute about our work.
You can contribute to the growth of the Welsh Farm community
Provided we receive your consent, we may use technical information about you (your IPs, age group, subscription status) for promotion purposes to reach more people like you. We use Facebook, Visitor analytics and Google to help us understand our audience. You can always withdraw your consent to share this data with us.
You are in control
You may access your personal data, modify, correct, erase, and update it by writing to us at firstname.lastname@example.org. You may also have access to the information “The Welsh Farm” has collected about you by contacting us. If you have questions about this policy, how we collect or process your personal data, or anything else related to our privacy practices.
Your data is safe with “The Welsh Farm”
We take all reasonable and appropriate measures to protect your Personal data from loss, theft, misuse or unauthorized access.
The Yurt Hideaway, The Chestnut Cabin and The Country Yurt websites ("Websites"),
The Yurt Hideaway, The Chestnut Cabin and The Country Yurt Social channels and related services (“Web services”)
1. Personal data and information we collect from you
Personal data you provide us directly
General Information. we may collect Personal data about you such as:
Date of birth;
Place of residence and associated location information;
Interests relating to the Business;
Bank details only when issuing a re-fund
Personal data we may collect automatically
When you access or use our website, we may automatically collect the following information:
Information about operating system and its version;
Unique device identifiers (e.g. IDFA)
Website usage data, including, among others:
Frequency of use;
Areas and features of our website you visit;
Your use patters generally;
Engagement with particular features.
Data from external sources. We may use third-party tools like Facebook and Google analytics that provide us some of your attribution data that we further utilize to customize and personalize our communication with you. We may also use such data for statistical purposes and analytics.
By using our website, staying with us or signing up to our newsletters you explicitly consent that:
PLEASE NOTE THAT WE WILL NEVER SELL ANY OF YOUR DATA OR SHARE ANY OF YOUR DATA WITH THIRD PARTIES OUTSIDE OF THIS AGREEMENT.
2. How we use your Personal data
Purposes of processing
We may use your Personal data, for the following purposes:
to analyze, operate, maintain and improve our communication with you.
to provide and deliver the products and services you request, process transactions and send you related information, including confirmations and reminders;
to customize product and service offerings and recommendations to you.
to verify your identity.
to send you technical notices, updates, security alerts and support and administrative messages;
for fund collection, other administrative purposes, if applies;
to respond to your comments, questions and requests and provide customer service;
to monitor and analyse trends, usage and activities relating to the Business
solely with respect to information that you mark for sharing, for Business promotional purposes.
to link or combine with information we get from others or (and) from you to help understand your needs and provide you with better service (to use in training of neural networks, artificial intelligence);
We will never sell your Personal data as may be defined by applicable laws.
Principles of processing
Data minimization and purpose limitation. We will not process Personal data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you or collect any Personal data that is not needed for the mentioned purposes. For any new purpose of processing we will ask your separate explicit consent. To the extent necessary for those purposes, we take all reasonable steps to ensure that Personal data is reliable for its intended use, accurate, complete, and current. We also undertake to collect only such amount and type of Personal data that is strictly needed for the mentioned purposes.
3. Your privacy rights
Notwithstanding the country or region you are coming from we are committed to grant you the vast privacy rights in respect to your Personal data.
Correction of Personal data. If you believe that your Personal data is inaccurate, you have right to contact us and ask us to correct such Personal data.
Restriction of Processing. You also have a right to request restriction of processing of your Personal data, if you contest the accuracy of the Personal data and we need some time to verify its accuracy.
Information rights and access to your Personal data (including in portable form). You shall have a right to request information about what Personal data we have about you, to access your Personal data and receive a copy of it.
Erasure of your Personal data. You have a right to contact us and ask us to erase Personal data.
Right to object processing of your Personal data. In some cases you can object processing your Personal data and stop us from processing your Personal data (for example, if we process it under legitimate interest basis).
Right to object (opt-out) automated decision-making:
How to exercise your privacy rights
Simply write us at email@example.com to exercise any of your privacy rights.
We commit to grant them within 30 days after receipt. It may take us up to 90 days in some cases, for full erasure of your Personal data stored in our backup systems.
Formalities to exercise your privacy rights
Please keep in mind that in case of a vague request we may engage the individual in a dialogue so as to better understand the motivation and content of the request. We may also refuse manifestly unfounded and excessive (repetitive) requests.
We might also require you to prove your identity in some cases. This is made to ensure that no rights of third parties are violated by your request.
Notification requirements. We commit to notify you, when it is needed under the law, within a reasonable period of time and your data protection authority within the timeframe specified in applicable law about Personal data breaches related to your Personal data.
Data Protection Authorities. Subject to applicable laws, you may have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with applicable law.
4. Third parties processing your Personal data
We will not share your Personal data with any third parties except as specified below.
Processing to find new users
Provided we receive your consent, we may share some of your Personal data with Facebook marketing and google analytics. By using these platforms we are able to reach more people like you and broaden our guest base.
To accomplish the above-mentioned goal, we may share Personal data with Facebook ads and google analytics.
1. You share your Personal data with us online, strictly limited to the following set:
a) Technical identifiers: IP address (which may also provide general location information), User agent, IDFA (Identifier for advertisers), Android ID (in Android devices), Google Advertiser ID, Customer issued user ID and other similar unique technical identifiers.
2. We will use your data with platforms such as (Google Ads, Apple Search Ads, FB marketing network, and a couple of others) to find people like you on different platforms, including social media websites. These platforms analyse your data (so-called “custom audience”) to show our page, updates, news and promotions to similar people who might be potentially interested in the Welsh Farm (so-called “lookalike audience”).
Opt-out options. You can withdraw your consent to sharing of your Personal data in accordance with this subsection anytime by using one of the following options:
By contacting us at firstname.lastname@example.org
We may also share some of your Personal data in the following special circumstances:
in response to subpoenas, court orders or legal processes, to the extent permitted and as restricted by law (including to meet national security or law enforcement requirements);
when disclosure is required to maintain the security and integrity of the organisation or to protect any user’s security or the security of other persons, consistent with applicable laws. In such cases we may also delete some of your Personal data.
when disclosure is directed or consented to by the user who has input the Personal data;
in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of its assets, your information will, in most instances, be part of the assets transferred.
5. Retention of your Personal data
When you use our website and contact us
If you choose to unsubscribe from our emails or after you have stayed with us and not subscribed to our news, we will retain your Personal data for a reasonable period of 1 year thereafter in case you decide to re-holiday with us.
You should be aware that we may retain certain Personal data and other information after you have unsubscribed in an aggregated, anonymized form. We reserve the right to use your information in any aggregated data collection after you have unsubscribed we will ensure that the use of such information will not identify you personally. We will also retain your Personal data as necessary to comply with legal obligations, resolve disputes and enforce our agreements.
6. Security of your Personal data
We take all reasonable and appropriate measures to protect all collected Personal data from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction,. Among others, we utilize the following information security measures to protect your Personal data:
Encryption of your Personal data in transit and in rest;
Protection of data integrity;
Organizational and legal measures. To ensure safe handling of data
7. Children’s privacy
General age limitation. We are committed to protecting the privacy of children. We do not store sensitive data on children staying with us. If booking forms have collected names of children, this information is stored securely with booking details and deleted as per this policy and not used or processed beyond the booking form.
We may contact you via email or through other means to communicate with you about products, services, offers, promotions, rewards, and events offered by us, and provide news and information that we think will be of interest to you. You can always opt out of receiving emails by unsubscribing via the “Unsubscribe” link contained in the email.
9. Storage and international Personal data transfers
The Welsh Farm is based in the UK and operates under GDPR, please note other countries may not offer the same protections as the law of our jurisdiction.
10. Contact us
General. If you have any questions or concerns about your privacy, you may contact us at: Email: email@example.com The Welsh Farm, Cilcoed, Meidrim, Carmarthenshire SA33 5QA