Guests – if you have made a booking, enquiry or visited our website
1. About this privacy notice and who we are
This privacy notice provides information on how SandyBlue Lda (“we” or “us”), part of the Awaze group of companies, process your personal information when you make a booking or booking enquiry through us, visit our website, contact us or use our services. We are a controller in these situations and can be contacted about data protection issues by email to privacy@sandyblue.com.
We keep our privacy notice under review and we will place any updates on our webpage. We will contact you to let you know about any significant changes.
2. What personal information we process and why?
We will only process personal information about you when we need to and this may include:
- Personal details such as your name and contact details (phone number, email address and home address)
- Payment details such as payments made to and from you and partial payment card details
- Booking details such as properties booked through us, booking references and travel dates
- Identification details such as passport details where this is required under local tourism laws
- Contact history such as emails, letters, messages and social media messages to and from you
- Usage details such as IP address, device type, how you use or interact with our website, emails, content or ads (e.g. pages visited, links clicked and properties viewed). Please see section 8 for more information about this.
We don't typically collect special categories of personal information, but on occasion this may be required to provide our service to you, for example, where you provide us with health information, including any difficulties with mobility, for us to ensure that your requirements can be met. This may also be necessary for insurance or legal purposes for example, if you have an accident at a property you have booked through us and medical data is required as part of the claim.
The provision of some personal information is a legal or contractual requirement and if you do not provide it, we may not be able to enter into or perform the contract with you and may therefore cancel your booking. We will tell you if this is the case and will not be liable to you.
We generally collect personal information directly from you, but we may also receive your data from third parties. For example:
- If you book via one of our booking partners
- Other guests in your party
- If you enter a competition relating to us via a third party
If you provide information about other people when making a booking, this privacy notice will apply to all personal information you have provided about them and you should bring this privacy notice to their attention.
We may use your personal information for any of the purposes explained below, depending on how you interact with us.
| Purpose for processing |
Personal data used |
Lawful basis for processing |
| To enable us to complete and manage your booking or related travel arrangements, including taking payment and giving refunds |
Personal details, payment details, identification details |
Contract
Consent |
| Keep a record of any financial transactions with you |
Payment details |
Legal obligation |
| To invite you to leave a review about our services |
Personal details, booking details |
Legitimate interest in understanding the perception of our business and improving our services |
| To send service messages, including booking updates and changes to our terms and conditions |
Personal details |
Contract
Legitimate interest in keeping our customers updated |
| Manage your participation in any promotions, offers or competitions you choose to participate in |
Personal details |
Consent |
| To provide details or information you may have requested |
Personal details |
Consent |
| Provide and improve our customer service and support, including quality control, training and resolving complaints |
Personal details, booking details, contact history |
Legitimate interest in improving our service, staff training, record keeping and resolving issues
Legal obligation |
| To personalise our services to you, for example, where allowed, we may identify you when you visit our website so that we can remember your preferences and previous actions e.g. properties you were looking at on our website. |
Usage details |
Consent
Legitimate interests in providing the best browsing experience |
| Monitor our website, including its performance and security and, where allowed, analysing the behaviour of visitors to our website so that we can protect and improve our website. |
Usage details |
Consent
Legitimate interest in maintaining the integrity and security of our website and providing the best browsing experience |
| To carry out marketing activities |
Personal details |
Consent |
| To provide your contact details to a third party to provide you emergency assistance in the event of a travel crisis or other unforeseen travel incident. |
Personal details |
Legitimate interest in protecting our business and customers |
| For analytics and product improvement. This includes testing, addressing security or technical issues, data analysis, statistics, improving our website and communications, and developing new products and services. We use anonymised data to do this where possible, but may need to use personal data on occasion e.g. if you are experiencing a technical issue with our website, we may need to use information about your device. |
All data |
Legitimate interests in evaluating our range of services and improving our business |
| For legal purposes. This includes handling legal claims, ensuring compliance with our booking conditions and other agreements, complying with government advice, regulatory requirements and legal obligations and detecting, preventing and reporting crime. |
All data |
Legal obligation
Legitimate interest in protecting our business and assisting law enforcement and government bodies |
Where special categories of personal information are required for any of the above purposes, we use this where we have your explicit consent, where you have made the information public or in relation to legal claims.
3. Sharing your data within the Awaze group
We are part of the Awaze group of companies (listed at www.awaze.com) and we sometimes use joint technology and may share your personal data with other companies in the Awaze group, their employees, contractors and service providers. This does not affect the purposes we use your personal data for and, includes:
- managing your booking,
- providing customer service,
- detecting, preventing and reporting crime,
- monitoring our website; and
- marketing activities where permitted.
We also share anonymised data for analytics and product improvement. We rely on our legitimate interests in providing a good service, improving our service and protecting our business to share within the Awaze group. Group companies either act as our processor or joint controller and we have an intra group data sharing agreement in place to ensure the data is secure and handled in line with applicable laws.
4. Sharing your data outside the Awaze group
To effectively provide our services and run our business, we may share your personal information with:
- if required, owners or agents of the property you have booked
- service providers, acting as processors, who provide IT, system administration, website hosting and support, marketing, customer support, cleaning and maintenance and customer review services
- professional advisors, including bankers, lawyers, auditors, accountants and insurers who provide us with services
- our preferred insurance provider(s) (if you purchase any insurance policy we offer)
- credit/debit card companies
- payment service providers
- government agencies, regulators and other authorities
- third party booking or distribution platforms, travel agents and booking partners
- third parties that we may choose to sell, transfer, or merge parts of our assets or business to or with and businesses we acquire or merge with
- third parties you have authorised us to speak to
Third parties are required to process your personal information in line with data protection legislation. Where a third party is acting on our behalf, we do not allow them to use your information for their own purposes and we ensure they have appropriate security measures in place to protect your information.
5. International transfers
We are a global business and use suppliers located across the world. This means that sometimes we need to transfer your personal information outside of the UK and EU. We only do this where we are satisfied that there are adequate measures in place to protect your personal information in a way that is consistent with, and respects, UK and EU data protection legislation. We will ensure at least one of the following safeguards is implemented:
- an adequacy decision; or
- approved contractual measures and where necessary, supplementary measures.
If you would like further details of the applicable transfer mechanism, please contact us.
6. How long we keep your information for
We will only keep your information for as long as necessary based on the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, any legal or regulatory requirements and any relevant industry standards or guidelines. Where your information is no longer required, it is disposed of or deleted in a secure manner or anonymised so that it can no longer be associated with you.
7. Your rights
Under certain circumstances, you have the right to:
- Request access to a copy of the personal information we hold about you (commonly known as a "subject access request").
- Request that we correct any inaccurate or incomplete personal information that we hold about you. Remember, you can update your contact details through the booking portal.
- Request that we delete your personal information where there is no good reason for us continuing to process it (commonly known as the “right to be forgotten”).
- Object to us using your data for direct marketing or, in some circumstances, using it for our legitimate interests.
- Request restriction of the processing of your personal information. This allows you to ask us to limit the way we process your personal information, for example if you dispute the accuracy of the information we hold about you.
- Request data portability, whereby we transfer the personal information you have provided to us, either directly to you or a third party.
- Withdraw your consent where we rely on your consent to process your information.
There is no fee to exercise your rights, unless your request is unfounded or excessive, in which case we may charge you a reasonable fee or refuse to comply with the request. We may need to request information from you to help us confirm your identity and identify the information you are referring to.
If you wish to exercise any of these rights, please contact us. We aim to respond to requests within one month, but where permitted we may extend this by two months and will notify you of this.
You also have the right to raise concerns about our use of your personal information with the relevant supervisory authority, such as the Information Commissioner in the UK (https://ico.org.uk), at any time, but we encourage you to contact us in the first instance so that we may discuss your concerns.
8. Cookies
Cookies and other similar technologies (collectively referred to as cookies) are small text files placed on your device when you visit some websites. Cookies help make the website work optimally and enable us to make improvements to the site and enhance your browsing experience.
Our website uses the following types of cookies:
- Strictly necessary cookies – these are essential for the website to work and cannot be switched off, such as remembering what you might have added to a shopping cart.
- Functional cookies – these are used to remember choices you have made, such as what language you want displayed on the website.
- Performance cookies – these are used to understand how our website is used, such as which areas of our website are visited most often.
- Marketing cookies – these are used to make our advertising more relevant to you.
By clicking ‘accept’ you consent to our use of cookies. You may at any time block specific or all cookies completely by changing the browser settings on your device. The location of these settings will depend on the browser you use. The duration of each cookie can also be found in your browser settings. However, you should be aware that if you block some cookies, there may be functions and services that you will be unable to use on the website.
For more general information about cookies and how to disable them through your browser, visit allaboutcookies.org.
Owners – if you let, enquire about letting, or have been contacted by us about letting your holiday property through us or visited our website
1. About this privacy notice and who we are
This privacy notice provides information on how SandyBlue Lda (“we” or “us”), part of the Awaze group of companies, process your personal information when you make a booking or booking enquiry through us, visit our website, contact us or use our services. We are a controller in these situations and can be contacted about data protection issues by email to at privacy@sandyblue.com.
We keep our privacy notice under review and we will place any updates on our webpage. We will contact you to let you know about any significant changes.
2. What personal information we process and why?
We will only process personal information about you when we need to and this may include:
- Personal details such as your name, contact details (phone number, email address and home address)
- Financial details such as payments made to and from you, your bank account details and tax identification number where required
- Letting details such as the contract to let your holiday property through us, details about your holiday property and a license/registration/permit number or similar in locations where this is required
- Contact history such as emails, letters, messages and social media messages to and from you
- Usage details such as IP address, device type, device ID, how you use or interact with our website, emails, content, ads or app (e.g. pages visited, links clicked and properties viewed). Please see section 8 for more information about this.
The provision of some personal information is a legal or contractual requirement and if you do not provide it, we may not be able to enter into or perform the contract with you and we can cancel our service to you. We will tell you if this is the case and will not be liable to you.
We may also collect and process the contact details of any third party that you appoint, such as a property caretaker or cleaner, that you share with us. If you provide such information to us, you must ensure that you have brought this privacy notice to the third party’s attention.
We will generally collect personal information directly from you. We may sometimes collect personal information from someone who you have agreed to refer you to us, the accommodation owner (for example, if you are appointed as a caretaker or cleaner) or publicly available sources.
We may use your personal information for any of the purposes explained below, depending on how you interact with us.
| Purpose for processing |
Personal data used |
Lawful basis for processing |
| To enable us to let your holiday accommodation, including making payments and provide related services such as referring you to a hot tub supplier with your agreement |
Personal details, payment details, letting details |
Contract
Consent |
| Keep a record of any financial transactions with you |
Payment details |
Legal obligation |
| To send service messages, including booking updates and changes to our terms and conditions |
Personal details |
Contract
Legitimate interest in keeping our customers updated |
| To provide details or information you may have requested |
Personal details |
Consent |
| Provide and improve our customer service and support, including quality control and training and complaints |
Personal details, letting details, contact history |
Legitimate interest in improving our service, staff training, record keeping and resolving issues
Legal obligation |
| To personalise our services to you, for example, where allowed, we may identify you when you visit our website so that we can remember your preferences and previous actions e.g. language settings. |
Usage details |
Consent
Legitimate interests in providing the best browsing experience |
| Monitor our website, including its performance and security and, where allowed, analysing the behaviour of visitors to our website so that we can protect and improve our website. |
Usage details |
Consent
Legitimate interest in maintaining the integrity and security of our website and providing the best browsing experience |
| To carry out marketing activities. |
Personal details |
Consent
Legitimate interests in working out which of our services you may be interested in and telling you about them |
| For analytics and product improvement. This includes testing, addressing security or technical issues, data analysis, statistics, improving our website and developing new products and services. We use anonymised data to do this where possible, but may need to use personal data on occasion e.g. if you are experiencing a technical issue with our website, we may need to use information about your device |
All data |
Legitimate interests in evaluating our range of services and improving our business |
| For legal purposes. This includes handling legal claims, ensuring compliance with our rental conditions and other agreements, complying with government advice, regulatory requirements and legal obligations and detecting, preventing and reporting crime. |
All data |
Legal obligation
Legitimate interest in protecting our business and assisting law enforcement and government bodies |
3. Sharing your data within the Awaze group
We are part of the Awaze group of companies (listed at www.awaze.com) and we sometimes use joint technology and may share your personal data with other companies in the Awaze group, their employees, contractors and service providers. This does not affect the purposes we use your personal data for and, includes:
- to enable us to let your holiday accommodation, including listing your property on different Awaze group booking platforms;
- providing customer service;
- detecting, preventing and reporting crime;
- monitoring our website and app; and
- marketing activities where permitted.
We also share anonymised data for analytics and product improvement. We rely on our legitimate interests in providing a good service, improving our service and protecting our business to share within the Awaze group. Group companies either act as our processor or joint controller and we have an intra group data sharing agreement in place to ensure the data is secure and handled in line with applicable laws.
4. Sharing your data outside the Awaze group
To effectively provide our services and run our business, we may share your personal information with:
- if required, individuals who may be renting accommodation from you
- service providers, acting as processors, who provide IT, system administration, website and app hosting and support, marketing, customer support and cleaning and maintenance services
- professional advisors, including bankers, lawyers, auditors, accountants and insurers who provide us with services
- third party advertising partners and travel agents
- credit/debit card companies
- payment service providers
- government agencies, regulators and other authorities
- third parties that we may choose to sell, transfer, or merge parts of our assets or business to or with and businesses we acquire or merge with
- third parties you have authorised us to speak to
Third parties are required to process your personal information in line with data protection legislation. Where a third party is acting on our behalf, we do not allow them to use your information for their own purposes and we ensure they have appropriate security measures in place to protect your information.
5. International transfers
We are a global business and use suppliers located across the world. This means that sometimes we need to transfer your personal information outside of the UK and EU. We only do this where we are satisfied that there are adequate measure in place to protect your personal information in a way that is consistent with, and respects, UK and EU data protection legislation. We will ensure at least one of the following safeguards is implemented:
- an adequacy decision; or
- approved contractual measures and where necessary, supplementary measures.
If you would like further details of the applicable transfer mechanism, please contact us.
6. How long we keep your information for
We will only keep your information for as long as necessary based on the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, any legal or regulatory requirements and any relevant industry standards or guidelines. Where your information is no longer required, it is disposed of or deleted in a secure manner or anonymised so that it can no longer be associated with you.
7. Your rights
Under certain circumstances, you have the right to:
- Request access to a copy of the personal information we hold about you (commonly known as a "subject access request").
- Request that we correct any inaccurate or incomplete personal information that we hold about you.
- Request that we delete your personal information where there is no good reason for us continuing to process it (commonly known as the “right to be forgotten”).
- Object to us using your data for direct marketing or, in some circumstances, using it for legitimate interests.
- Request restriction of the processing of your personal information. This enables you to ask us to limit the way we process your personal information, for example if you dispute the accuracy of the information we hold about you.
- Request data portability, whereby we transfer the personal information you have provided to us, either directly to you or a third party.
- Withdraw your consent where we rely on your consent to process your information.
There is no fee to exercise your rights, unless your request is unfounded or excessive, in which case we may charge you a reasonable fee or refuse to comply with the request. We may need to request information from you to help us confirm your identity and identify the information you are referring to.
If you wish to exercise any of these rights, please contact us. We aim to respond to requests within one month, but where permitted we may extend this by two months and will notify you of this.
You also have the right to raise concerns about our use of your personal information with the relevant supervisory authority, such as the Information Commissioner in the UK (https://ico.org.uk), at any time, but we encourage you to contact us in the first instance so that we may discuss your concerns.
8. Cookies
Cookies and other similar technologies (collectively referred to as cookies) are small text files placed on your device when you visit some websites. Cookies help make the website work optimally and enable us to make improvements to the site and enhance your browsing experience.
Our website uses the following types of cookies:
- Strictly necessary cookies – these are essential for the website to work and cannot be switched off, such as remembering what you might have added to a shopping cart.
- Functional cookies – these are used to remember choices you have made, such as what language you want displayed on the website.
- Performance cookies – these are used to understand how our website is used, such as which areas of our website are visited most often.
- Marketing cookies – these are used to make our advertising more relevant to you.
By clicking ‘accept’ you consent to our use of cookies. You may at any time block specific or all cookies completely by changing the browser settings on your device. The location of these settings will depend on the browser you use. The duration of each cookie can also be found in your browser settings. However, you should be aware that if you block some cookies, there may be functions and services that you will be unable to use on the website.
For more general information about cookies and how to disable them through your browser, visit allaboutcookies.org.