Privacy & Personal Data Governance (GDPR)

1. Identification of the Data Controller

This privacy declaration applies to all processing activities conducted by the data controller designated below, in adherence to Article 4(7) of Regulation (EU) 2016/679 (General Data Protection Regulation):

2. Scope & Categories of Data Collected

New Amazing Hotels operates strictly as a static editorial repository. We do not operate user profile databases, merchant payment facilities, or consumer booking gateways. Personal data processing is restricted to:

• Voluntary Correspondence Data: Full name, electronic email address, and contextual communications transmitted via our contact forms (Legal basis: Art. 6(1)(f) GDPR — legitimate interest to respond to inquiries).
• Server Log Telemetry: Anonymized Internet Protocol (IP) addresses, user-agent browser strings, and access timestamps recorded by edge servers to mitigate Distributed Denial of Service (DDoS) threats (Legal basis: Art. 6(1)(f) GDPR — operational security).

3. Absence of Profiling & Financial Data Handling

Under no circumstances does New Amazing Hotels process credit card credentials, bank accounts, or sensitive demographic identifiers. All reservations initiated through external links take place entirely on the encrypted platforms of third-party hospitality operators.

4. Data Retention Protocol

Communication records generated via our contact portal are systematically purged after an administrative retention interval of 12 months, unless required for active legal proceedings under Latvian civil law.

5. Enforceable Data Subject Entitlements

In accordance with Chapter III (Articles 15 through 22) of the GDPR, you maintain statutory rights to access, rectification, erasure ('Right to be forgotten'), restriction of processing, and data portability. To execute these rights, submit a signed electronic dispatch to [email protected].