Personal Data Protection Policy

PERSONAL DATA PROTECTION ACT 2010

Dear Valued Guests,

Pursuant to the Personal Data Protection Act 2010 which has come into force in Malaysia on 13 November 2013, we wish to notify you of our data protection practices and how your personal information is being used and processed by us.

Generally we use your personal information to process your reservations and in connection with your stay at our hotels as well as to send you updates on our latest services and promotions. Your personal data may have come into our possession from your stays at our hotel or from your interaction with us on previous occasions.

There has been no change in how we use your personal information, and our Personal Data Protection Notice below is to provide you with more transparency as to how your personal information is used by us.

Collection of Personal Information
The term “personal data” in this Policy refers to personal information which is capable of identifying you as an individual. You can visit our website without providing any personal data or information. The collection and processing of personal data may be obligatory for purposes of providing you with our services. The collection may also be obligatory for purposes of compliance with the Registration of Guest Act 1965 as well as compliance with other local laws and regulations. We will notify you whether the personal data requested is obligatory or voluntary. Personal data may be collected as part of: (i) fulfilling reservations or requests for information or services, (ii) accommodating your personal preferences, (iii) purchasing our products or services, (iv) registering for our programmes and memberships, and (v) facilitating communications. We may also request your personal data to verify your identity, to protect your interests and implement security measures in compliance with the law.

Types of Personal Information we collect
The types of personal data that we process include:
your personal details such as name, national identification number, age, sex, nationality, occupation, contact information, passport and visa information and other required information pursuant to local laws and regulations;
guest stay information, date of arrival and departure, goods and services purchased, special requests made, observations about your service preferences, telephone numbers dialled, faxes and telephone messages received from third parties on behalf of guests/customers; sensitive personal data which comprises your mental and physical health including your medical condition and medical history and/or your religious belief; your credit card details, membership information, account details, profile or password details and any frequent flyer or travel partner programme affiliation; any information necessary to fulfil special requests (for example, leisure, travel and guest preferences); your reviews and opinions about our services; information such as videos and photographs collected through the use of closed-circuit television systems and other security systems; and information relating to the credit of customers.

From time to time, we would like to use your name, email address, mobile phone number, and other relevant contact information to send you either via emails, SMS messages, telephone calls, push notifications, post, or social media (e.g. Whatsapp and Facebook) information that we think may be of interest to you, including about our hotels, products and services, news about our membership programmes, satisfaction surveys, events, offers and promotions, but we can only do so with your consent.

Direct Marketing
We would also like to share (for gain) such data with the operator of the hotel or hub of hotels in which you stay or visit and with selected third party entities, so that they may send you information, news updates, special events, offers and promotions as regards their products and services, including travel, transportation, retail, food and beverage, hotel accommodation, credit cards, financial and investment services, real estate, entertainment, publications, fashion and jewellery, leisure and sports, health and wellness, non-profit and charitable activities, telecommunications, social networking, media and public relations, but we will not use your personal data for direct marketing without your consent.

If you wish to withdraw the consent provided for marketing purposes, or access your personal data or update any of your contact particulars, or if you have any inquiries or complaints with regard to the use and processing of your information please contact us at the contact detail given to you by the Hotel or as follows:
Contact Person: Front Office Manager
Phone No: +603 – 9213 0838
Email: inquiry@georesort.my

Changes to the Policy
We may modify this Policy from time to time. Any changes to this Policy will be posted to our website so that you are always informed of the way we collect and use your personal data. Updated versions of our Policy will include the date of the revision at the end of this Policy so that you are able to check when the Policy was last amended.
Any changes to our Policy will become effective upon posting of the revised Policy on the website. Use of the website following such changes constitutes your acceptance of the revised Policy then in effect. This Policy is governed by and shall be construed in accordance with the laws of Malaysia.This Policy is written in the English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Policy, the English version shall prevail.

Our Commitment to Data Security
We have in place reasonable technical and organisational measures to prevent unauthorised or accidental access, processing, erasure, loss or use of your personal data and to keep your personal data confidential. These measures are subject to ongoing review and monitoring. To protect your personal data, we also require our third party service providers to take reasonable precautions to keep your personal data confidential and to prevent unauthorised or accidental access, processing, erasure, loss or use of personal data, and to act at all times in compliance with applicable data protection laws.

We cannot guarantee that our Site will function faultless and without any interruptions. We shall not be liable for damages that may result from the use of electronic means of communication, including, but not limited to, damages resulting from the failure or delay in delivery of electronic communications, interception or manipulation of electronic communications by third parties or by computer programs used for electronic communications and transmission of viruses.