Privacy and Cookie Policy

1.      Providing your personal data to others

1.1    We may disclose your personal data insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.

 1.2   We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

1.3    We may disclose your personal data to our suppliers or subcontractors insofar as reasonably necessary for the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper administration of our website and business.

1.4    Financial transactions relating to our website and/or ResBook are handled by our payment services providers, (Payment Express, PayPal, Stripe). We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

1.5    We may disclose your enquiry data to one or more of those selected third party suppliers of goods and services identified on our website for the purpose of [enabling them to contact you so that they can offer, market and sell to you relevant goods and/or services. Each such third party will act as a data controller in relation to the enquiry data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party's use of your personal data.

1.6    In addition to the specific disclosures of personal data set out in this Section 1, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

2.      International transfers of your personal data

2.1    In this Section 2, we provide information about the circumstances in which your personal data may be stored and/or managed outside the European Economic Area (EEA)].

2.2    We have an office and facilities in New Zealand. The European Commission has made an "adequacy decision" with respect to the data protection laws of this country. Transfers of data are protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission,

2.3    The hosting facilities for our website are situated in in New Zealand, Australia and the United States of America. The European Commission has made an "adequacy decision" with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.

2.4    You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.

3.      Retaining and deleting personal data

3.1    This Section 3 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.

3.2    Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

3.3    We will retain your personal data as follows:

(a)    All personal data will be retained for a minimum period of 12 months following the date of submission, and for a maximum period of 24 months following submission.

3.4    Notwithstanding the other provisions of this Section 3, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.