Privacy Policy

The purpose of the policy

The Personal Data Protection Policy describes how Bazzar Boutique Hotel processes personal data in accordance with applicable data protection laws and international best practices. We respect and protect your right to be fully informed about the processing of your personal data.

Who are we?

Data Controller:
Company name: Smart Hotel Management LLC
Business name: Bazzar Boutique Hotel
Address: Pkhovi St N3, 0105 Tbilisi
Contact number: +995 32 2 228 444
Email: [email protected]
Website: /en/

What type of data do we process?

• Identification data: Name, last name, date of birth, ID number, ID copy, sex, citizenship, nationality, address, etc.
• Contact information: Email, telephone number.
• Data obtained by communication: via email, telephone, chat, social media.
• Recordings: Video recordings.
• Banking and card information: Billing details, payment data, card information.
• Reservation and accommodation data: Check-in/out dates, table reservations, guest preferences.
• Contractual information: Services provided and products supplied by the hotel.

Purpose of data processing

• Protecting the legal rights and legitimate interests of the hotel.
• Providing products and services.
• Improving service quality and considering customer needs.
• Organizing events at the hotel/restaurant premises.
• Entering into contracts (including employment).
• Managing employee rights and responsibilities.
• Protecting property of the hotel and third parties.
• Ensuring compliance with safety standards.
• Addressing breaches of hotel policies.
• Delivering special offers and marketing, with guest consent.

How is personal data collected?

• From booking websites based on contracts.
• Directly from individuals (on-site, phone, correspondence, payment).
• From contractual partners providing guest/event participant lists.
• For marketing purposes only with prior written consent.
• Via video monitoring inside the hotel and external perimeter.

Basis for data processing

• Your voluntary consent.
• Necessary to conclude/perform a contract.
• Required to comply with legal obligations.
• Necessary to provide services or process applications.
• Necessary to protect legitimate interests of hotel/third parties.
• Data is publicly available.

Video monitoring aims to prevent crime, ensure safety of employees, guests, visitors (including minors), and protect property.

Processing of Personal Data of Minors

We process minors’ data in line with the Law on Personal Data Protection, based on parental/legal guardian consent, always prioritizing the child’s best interests.

Data Retention and Disposal Policy

We retain your data:

• For the duration of the service and up to 10 years after it ends;
• Or for the period necessary to achieve the processing purpose.

Your rights

• Right to be informed about processing purposes, legal basis, data source, and disclosures.
• Right to access and obtain copies of your data.
• Right to correct/update/complete inaccurate or outdated data.
• Right to suspend/delete processing, unless legal grounds require continuation.
• Right to block data.
• Right to withdraw consent and request deletion of consent-based data.
• Right to data portability to receive/transfer your data.
• Right to appeal to the hotel, the Personal Data Protection Service, or the court.
• Right in case of breach to be informed about incidents, harm, and mitigation measures.

Data Security

We comply with legal requirements and apply technical/organizational measures to safeguard personal data against unauthorized access, loss, or misuse. Employees follow strict confidentiality procedures.

Data Sharing

Your data may be shared with:

• Affiliated entities, service providers (IT, auditors, consultants).
• Courts, if ordered by law.
• Other third parties, with your consent.

Policy updates

This policy may be updated periodically. Revised versions will be published promptly on our website, with update dates indicated.

---