SUMMARY OF HOW WE USE YOUR DATA

• What do we do with your information and what is the legal basis for this use? The Magna Hotel & Suites, comprising subsidiaries and related entities ("Magna"), uses your personal information to process and facilitate bookings, provide you with highly-individualized service at our resorts, respond to your requests for information, inform you of our products and services and other purposes as set out in this notice.
• Disclosure: Data is shared with companies in the Magna Hotel & Suites, third party service providers and professional advisers that may be located outside the EEA.
• Consent: Where we rely on your consent, such as for marketing our products and services to you, use of cookies, and collection and use of your sensitive personal data, you may withdraw this consent at any time.
• Cookies: Our site uses cookies to track visitors using our site, analyse trends and usage patterns for research and marketing purposes. You are not obliged to accept cookies. More information is set out in the "Cookies and Web Beacons" section.
• Your rights: You have certain rights to your personal information under applicable laws, including a right to object to some of the processing which Magna carries out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.

WHAT DOES THIS NOTICE COVER?

This is the Privacy Notice of Magna Hotel & Suites. It describes how we will make use of all Personal Information which you provide to us or any of our Magna Hotel & Suites companies.

Please read this page carefully before you start to use this site. If you do not wish to be bound by this Privacy Notice then you should not access this site. Where permitted by law, access of this site by you shall be deemed to be your acceptance of this Privacy Notice and your agreement that we may process and use your personal information in accordance with this Privacy Notice.

If you have any queries regarding this Privacy Notice or complaints about our use of your information please contact us at “booking@magna-hotel.com” and we will do our best to deal with your complaint or query as soon as possible.

INFORMATION WHICH WE MAY OBTAIN ABOUT YOU

The types of personal information we may collect and process from you include:

• Your contact information (e.g., name, telephone number, email address, postal address);
• Your financial information (e.g. credit card number, security code, expiration date);
• Information related to your travel profile (e.g., accommodation and travel preferences, booking history, special health accommodations);
• If you contact us or our agents, we may keep a record of that communication and any communications and correspondence with you; and
• Information about your computer, including where available, your IP address, operating system and browser type, for system administration and security reasons and to collect aggregate information. This is statistical data about our users' browsing actions and patterns and does not identify any individual.

WHAT INFORMATION ABOUT YOU DO WE RECEIVE FROM THIRD PARTIES?

Sometimes, we receive information about you from third parties. In particular, we may receive information about you from travel agents, tour operators and destination management companies whom you have direct contact.

The information we collect from such third parties include your contact information and information related to your travel profile.

WHAT WE DO WITH YOUR INFORMATION AND WHAT IS THE LEGAL BASIS FOR THIS USE?

We may use the personal information you supply to us via our site for the following purposes:

• To fulfil a contract, or take steps linked to a contract: this is relevant where you make bookings with us. This includes, for example: o processing and facilitating bookings, including verifying your identity, taking payments and communicating with you;
• As required by Magna to conduct our business and pursue our legitimate interests, in particular:
  • Responding to requests which you have submitted via our site and to deal with on-going matters relating to such requests;
  • Presenting content from our site in the way that we consider most effective;
  • Providing you with highly-individualized service at our resorts and presenting you with information relating to Magna;
  • If you provide a credit or debit card as payment, we use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud (see data sharing below);
  • Monitoring customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
  • Using information, you provide to investigate any complaints received from you or from others, about our website or our products or services;
  • Using data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);

Withdrawing consent or otherwise objecting to direct marketing/profiling

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by contacting us using the details set out in "Opting Out" section below.

DISCLOSURE

In some cases we may be required to disclose your personal information to comply with legal requirements and requests from government agencies if required for the purposes set out above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. We may also disclose your personal information to our Hotel & Suites companies or to third parties:

• Who provide us with payment related, data management and profiling, analytics, advertising or other services in order to process your bookings, provide information about tailored and individualized services/offers including on social media, and provide you with any information that you have requested;
• Where we consider that we need to in order to comply with any law or regulation, where we suspect that any criminal offence may have been committed, to protect our rights, property or safety or that of others and in any circumstances where we consider that we are permitted to do so by law or regulation; and
• Where that third party is a professional adviser to us or any of our Magna Hotel & Suites companies.

In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.

Our site may contain links to other websites belonging to third parties. We do not control the privacy practices of these other websites. You should therefore make sure when you leave our site that you have read that website’s Privacy Notice.

TRANSMISSION OF PERSONAL INFORMATION OUTSIDE EEA

The information you provide to us may be given to our third-party service suppliers outside the European Economic Area for the purpose of delivering the personalized services and communications stated above. MAGNA will always take steps to ensure that your information is used by third parties in accordance with this Privacy Notice and that your information is kept secure at all times. In particular, in relation to any transfer to a third party in a country that is not subject to an adequacy decision by the EU Commission, such transfer will be appropriately protected through mechanisms such as EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review upon request.

Where permitted by law, if you do not consent to this transfer, then please do not register on our site as we will be unable to provide you with our services.

COOKIES AND SIMILAR TECHNOLOGIES

Our site uses cookies or similar technologies (e.g. web beacons). A "cookie" is a small file of letters and numbers that is sent to your computer by a website and automatically saved on your computer by your web browser (e.g. "Internet Explorer"). Each time you request a page from the website, your web browser sends this cookie back to the website server.

Magna uses the following cookies:

Performance Cookies - These cookies collect information about how visitors use our website, so that we can continually improve our website. We use cookies provided by Google and Facebook.

Functionality Cookies - These cookies allow our website to remember choices users make (such as user name, or the region users are in) and provide enhanced, more personal features.

These cookies can also be used to remember changes users have made to text size, fonts and other parts of web pages that users can customize. We use a “physical” cookie (file) for the booking bar to store data such as the number of guests and the dates, so that users get their parameters pre-populated in the booking bar when they navigate from one page to another. We also use cookies for other functionalities including:

• To identify the country for the selection of relevant language and to block the firing of some pixels
• For use of fonts
• For the operation of videos

OPTING OUT

If you do not wish to remain on our database and to receive our personalized mailings (electronic or otherwise) or other communications, please note that you may opt out of our database by using the “Unsubscribe” option at the foot of our email communications,

HOW LONG WILL YOU RETAIN MY DATA?

Where we process personal information for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.

Where we process your financial information, we will only keep the information for as long as necessary for the purpose/s for which it is collected and up to two months thereafter.In relation to all your other personal data including registration data, we will not retain your data for longer than required for the purposes indicated above, and will delete personal data if they are no longer necessary for the purposes for which they are collected or otherwise processed, unless we are required to keep the data to comply with applicable legal obligations.

GOVERNING LAW

This Privacy Policy shall be construed and enforced in accordance with the laws of the Republic of Kenya. If any of the provisions, or portions thereof, of this Privacy Policy are found to be invalid as per the laws of the Republic of Kenya, then, that provision notwithstanding, this Privacy Policy shall remain in full force and effect and such provision or portion thereof shall be deemed omitted.

AMENDMENTS

We may update this Privacy Notice from time to time and we will notify you of any material changes using the email address you have provided upon registration or by an announcement on the site. The changes will apply to the use of the site after such notice. Where permitted by law, if you use the site after the date on which the changes come into effect, you will be deemed to have accepted the new Privacy Notice.