Data Protection Notice

This notice explains how TigerVillas Tourism Ltd., acting as data controller, processes the personal data of its guests and website visitors, and the rights available to you.

1. Data Controller

Your personal data is processed by TigerVillas Tourism Ltd. as data controller, for the purposes described below and within the limits set by applicable data protection law. Our contact details are available on the Contact page of this website.

2. Categories of Data

We process identity data (first name, surname, passport or national identity number), contact data (telephone, email, address), customer transaction data (booking record, stay dates, payment and invoice details) and transaction security data (IP address, server logs).

3. Purposes of Processing

Your data is processed in order to conclude and perform the accommodation contract, meet guest registration obligations, issue invoices and maintain accounting records, manage requests and complaints, measure service quality, and establish or defend legal claims.

4. Legal Basis

Processing is based on the necessity of the data for the conclusion or performance of a contract, compliance with a legal obligation to which we are subject, the establishment or protection of a right, and our legitimate interests. Marketing messages are sent solely on the basis of your explicit consent, which you may withdraw at any time.

5. Transfers

Your data may be transferred to the owner or manager of the villa you are staying in, payment institutions, our financial and legal advisers, and to competent public authorities upon lawful request. Any transfer abroad takes place only where permitted by law and where the required safeguards are in place.

6. Collection Method

Personal data is collected through website forms, email, telephone, WhatsApp and face-to-face conversations, by partly automated and non-automated means.

7. Your Rights

You have the right to learn whether your data is processed, to request information about the processing, to learn its purpose and whether the data is used accordingly, to know the third parties to whom it is transferred at home or abroad, to request rectification of incomplete or inaccurate data, to request erasure or destruction subject to statutory conditions, to request that such actions be notified to third parties to whom the data was transferred, to object to a result reached solely through automated analysis that operates to your detriment, and to claim compensation for damage arising from unlawful processing.

8. How to Apply

You may submit requests concerning your rights in writing or by the methods prescribed by the competent supervisory authority. Your application will be concluded free of charge within 30 (thirty) days at the latest; where the process incurs an additional cost, a fee within the official tariff may be charged.