11. What are your rights regarding your data?

Under applicable law and regulations, you may, at any time, exercise certain rights, including the following:


11.1 Access.

The right to request access to your Personal Data, which includes the right to obtain confirmation from us as to whether Personal Data concerning you is being processed, and where that is the case, access to the Personal Data and information related to how it is processed.


11.2 Rectify or Erase.

The right to rectification or erasure of your Personal Data, which includes the right to have incomplete Personal Data completed.


11.3 Restrict.

The right to obtain a restriction of processing concerning your Personal Data, which includes restricting us from continuing to process your Personal Data under certain circumstances (e.g., where you contest the accuracy of your Personal Data, for a period enabling us to verify the accuracy of the personal data).


11.4 Object.

The right to object to the processing of your Personal Data under certain circumstances, including objecting to processing your Personal Data for direct marketing purposes, or objecting to processing your Personal Data when it is done based upon legitimate interests.


11.5 Data Portability.

The right to data portability, which includes certain rights to have your Personal Data transmitted from us to you or another controller.


11.6 Consent.

Where we process your Personal Data based on your consent, the right to withdraw consent at any time with effect for the future. Any requests related to the above rights may be made by contacting us as set forth in Section ‎14.


11.7 Complaint.

In some jurisdictions, you may also have the right to lodge a complaint with a supervisory authority.


11.8 Privacy Rights for Residents of the Russian Federation: 

In accordance with Russian Federal Law "On Personal Data" No. 152-FZ we collect, record, systematize, accumulate, store, update (renew and modify), and extract personal data about Russian citizens using databases located in the territory of the Russian Federation. As information containing personal data may be transmitted from the Russian Federation to countries that ensure an adequate level of protection for personal data, including member states of the European Union and other countries which Russian law recognizes as ensuring adequate to protection, we duplicate personal data of residents of the Russian Federation on our systems as required to deliver the requested services. By submitting information to us on our Services, submitting membership forms to us or making reservations, you grant us consent to process your personal data.


11.9 Privacy Rights for California Residents.

Under California Civil Code section 1798.83, California residents who have an established business relationship with us are entitled to ask us for a notice describing the types of personal customer information we have shared with third parties for those parties’ direct marketing purposes during the preceding calendar year. That notice will identify the categories of information shared with third parties, the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. If you are a California resident and would like to request a copy of this notice, please submit a written request to Penta Hotels Worldwide GmbH, Mayfarthstrasse 15 – 19, 60314 Frankfurt am Main, Germany, Attn: Data Protection Officer.