Privacy Policy

This Privacy Policy describes how tommatisi (tommatisi Limited) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy applies to all visitors and guests using our website and services related to our peatland lake and mountain stream nature retreat facilities in Westmeath.

Who We Are

We operate a nature rest facility specializing in peatland lake and mountain stream experiences, located at Derravaragh lake shore and the Fore Valley monastic ruins area in County Westmeath, Ireland. We are the data controller responsible for your personal information and are committed to transparency in how we collect and use your data.

Information We Collect

We collect personal information in several ways:

• Contact details provided through booking forms or inquiries (name, email, phone number, address)
• Payment information processed securely through authorized payment gateways
• Health and mobility information provided voluntarily to assist with senior-friendly accommodations
• Preferences and dietary requirements shared during the booking process
• Usage data through website analytics, including pages visited and interaction patterns
• Device information such as IP address and browser type through server logs
• Cookies stored on your device to enhance your browsing experience

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: We process data when you explicitly agree, such as subscribing to newsletters or providing health information for accommodation purposes.
• Contract Performance: We process booking and payment data to fulfill your reservation and provide our services.
• Legitimate Interest: We use analytics and website usage data to improve our services, understand visitor needs, and enhance the guest experience.
• Legal Obligation: We process certain data to comply with tax laws, health and safety regulations, and Irish data protection requirements.

How We Use Your Information

Your personal information is used for the following purposes:

• Processing and managing your booking and reservation
• Communicating with you about your stay, including confirmations and updates
• Providing senior-friendly facilities and personalized accommodation based on your needs
• Processing payments securely and handling refunds
• Improving our website functionality and user experience through analytics
• Sending promotional materials and newsletters (only with your consent)
• Ensuring facility safety and compliance with health regulations
• Responding to inquiries and customer support requests

Data Retention

We retain your personal information for specific periods based on the type of data and its purpose:

• Booking and payment records: Retained for up to 7 years for tax and accounting compliance purposes
• Contact form inquiries: Retained for up to 24 months after your last interaction with us
• Newsletter subscription data: Retained until you unsubscribe from our mailing list
• Website analytics and cookies: Retained for up to 12-14 months to analyze site performance
• Server logs and IP data: Retained for up to 12 months for security and technical purposes
• Health and accessibility information: Retained for up to 3 years after your stay to support future bookings

After these retention periods expire, we securely delete or anonymize your information unless we are required by law to retain it longer.

Your Rights

Under Irish and European data protection law, you have the following rights regarding your personal information:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete information
• Right to erasure: You can request deletion of your data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your information
• Right to data portability: You can receive your data in a structured format and transfer it to another provider
• Right to object: You can object to processing based on legitimate interests or marketing communications
• Right to withdraw consent: You can withdraw any consent you have given for data processing

To exercise any of these rights, please contact us using the details provided below.

Cookies and Tracking

We use cookies to enhance your experience on our website. Cookies are small files stored on your device that help us remember your preferences, track site usage, and improve functionality. We use both essential cookies (required for basic site operation) and optional cookies (for analytics and personalization). You can control cookie settings through your browser, though disabling essential cookies may affect site functionality. For detailed information about our cookie practices, please see our separate Cookie Policy.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, and loss. These measures include encrypted data transmission, secure payment processing through industry-standard gateways, restricted access to personal data, and regular security assessments. However, no security system is completely impenetrable, and we cannot guarantee absolute protection. We encourage you to use strong passwords and protect your account credentials.

Third-Party Sharing

We do not sell or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and providing our services, including payment processors, booking management systems, and analytics providers. These providers are contractually obligated to protect your data and use it only for the purposes we specify. We may also disclose information when required by law or to protect our legal rights and the safety of our guests.

Supervisory Authority

If you have concerns about how we handle your personal data or believe we have violated your privacy rights, you have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's independent authority for data protection. You can contact the DPC through their website or by submitting a formal complaint. Filing a complaint does not prevent you from seeking other remedies through the courts or our internal complaint process.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated to you via email if you have provided contact information, or through a prominent notice on our website. We encourage you to review this policy regularly to stay informed about how we protect your information. Your continued use of our services following any updates constitutes your acceptance of the revised policy.