Privacy Policy

Introduction

At Vantage Grandey, we value your privacy and are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) and German data protection laws (BDSG). This Privacy Policy explains how we collect, use, store, and share information when you visit our website, vantagegrandey.com, or use our services.

By using our website and services, you consent to the collection and use of your information as described in this Privacy Policy.

Information We Collect

Personal Information

When you sign up for our newsletter, make a reservation, contact us, or use certain features of our site, we may collect information such as:

• Full name
• Email address
• Phone number
• Postal address
• Date of birth (for age verification in compliance with German gambling laws)
• Payment information (processed securely through third-party payment processors)
• Preferences and special requests
• Identification documents (when required by German gambling regulations)

Usage Data

We automatically collect information about how you interact with our site, including:

• IP address and location data
• Browser type and version
• Device information (type, operating system)
• Pages visited and time spent on each page
• Referring website or source
• Click patterns and navigation paths
• Date and time of visits

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze site usage, and personalize content. See our Cookies section below for more details.

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under GDPR:

• Contractual necessity: To fulfill our contractual obligations when you book a reservation
• Consent: When you have given explicit consent for specific processing activities
• Legal obligations: To comply with German gambling regulations and other legal requirements
• Legitimate interests: For our legitimate business interests, such as improving our services and preventing fraud

How We Use Your Information

We use the information we collect to:

• Process reservations: To confirm bookings, process payments, and provide you with confirmation details
• Improve our services: Analyze how users interact with our site to enhance the user experience and develop new features
• Communicate with you: Send booking confirmations, updates, newsletters, promotional offers, and respond to your inquiries
• Personalize your experience: Tailor content, recommendations, and offers based on your preferences and behavior
• Protect our site: Ensure the security and integrity of our website, prevent fraud, and comply with legal obligations
• Marketing and advertising: Send you targeted advertisements and promotional materials (you can opt out at any time)
• Loyalty programs: Manage your rewards account and provide exclusive member benefits
• Comply with regulations: Meet German gambling regulatory requirements including age verification and responsible gaming measures

Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information with:

Service Providers

Trusted third-party service providers who assist us in operating our website, processing payments, managing reservations, sending emails, and analyzing data. These providers are contractually obligated to protect your information and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required by German or EU law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or the public. This includes compliance with German gambling regulatory authorities (GGL - Gemeinsame Glücksspielbehörde der Länder).

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change via email or prominent notice on our website.

With Your Consent

We may share your information with third parties when you have given us explicit permission to do so.

Cookies and Tracking Technologies

We use cookies to improve your experience on our site, analyze site usage, and personalize content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly
• Performance Cookies: Help us understand how visitors use our site
• Functionality Cookies: Remember your preferences and settings
• Advertising Cookies: Deliver relevant advertisements based on your interests

You may set your browser to refuse cookies or alert you when cookies are being sent. However, this may affect some functionality of our site. Most browsers accept cookies automatically, but you can modify your browser settings to decline cookies if you prefer.

Data Security

We take reasonable technical, administrative, and physical security measures to protect your information from unauthorized access, alteration, disclosure, or destruction in accordance with GDPR requirements. These measures include:

• Encryption of sensitive data (SSL/TLS protocols)
• Secure servers and firewalls
• Regular security audits and assessments
• Limited access to personal information by authorized personnel only
• Employee training on data protection practices and GDPR compliance
• Data protection impact assessments for high-risk processing activities

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations (including German tax and gambling regulations which may require retention for up to 10 years), resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and German data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure (Right to be Forgotten): Request deletion of your personal information (subject to legal obligations)
• Right to Restriction of Processing: Request restriction of processing your information
• Right to Data Portability: Request transfer of your information to another service provider in a structured, machine-readable format
• Right to Object: Object to the processing of your information for certain purposes, including direct marketing
• Right to Withdraw Consent: Withdraw your consent to processing at any time (where processing is based on consent)
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (German Federal Commissioner for Data Protection and Freedom of Information - BfDI)

To exercise these rights, please contact us using the information provided at the end of this policy. We will respond to your request within one month as required by GDPR.

Third-Party Links

Our website may contain links to third-party websites, plugins, or services that are not operated by Vantage Grandey. We have no control over and are not responsible for the content, privacy policies, or practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for individuals under the age of 18, in compliance with German gambling laws. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules

By using our services, you consent to the transfer of your information to other countries with appropriate safeguards in place. We will take appropriate measures to ensure your information is protected in accordance with this Privacy Policy and GDPR requirements.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with the date of the update at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If we make material changes to this policy, we will notify you by email or through a prominent notice on our website at least 30 days prior to the changes taking effect, as required by GDPR.

Automated Decision-Making

We may use automated decision-making processes, including profiling, to personalize your experience and detect fraudulent activities. You have the right to request human intervention, express your point of view, and contest any automated decision that has legal or similarly significant effects on you.