This privacy policy (“Privacy Policy”) is issued by SAMHI Hotels Limited and its subsidiaries (collectively referred to as “SAMHI”, “SAMHI Group”, “we”, “us” or “our” in this Privacy Policy). SAMHI is committed to ensuring that your privacy is protected. Accordingly, we have prepared this Privacy Policy to explain more about who we are, how we collect, manage and disclose your information (whether through our website, our hotels, our social media pages, or offline) and the choices you have about how we use your information. Specific additional rights may apply if required by applicable law. Please read this Privacy Policy before using www.samhi.co.in or using/availing any of our products and/or services or submitting any personal information. This policy will be updated subject to any changes in information collection, activities performed or any applicable regulations. You are encouraged to review the privacy policy whenever you provide your information by visiting www.samhi.co.in or at the hotels or through other offline channels to make sure that you understand how any personal information you provide will be used and retained.

APPLICABILITY

This Privacy Policy is applicable to:

1. everyone who accesses and uses samhi.co.in including but not limited to external legal entities in any form or manner;
2. our customers who visit or stay at our properties;
3. third party service providers/stakeholders or their representatives;
4. employment candidates, current and former employees; and
5. Third parties seeking opportunities to associate with or work with SAMHI

INFORMATION WE MAY COLLECT

SAMHI collects your personal information in accordance with the law. The information we collect may vary by territory/country or by your preferred method of interaction with us. The categories of personal information that we may collect (from our customers / website visitors / third party services providers) include:

Contact and identification information including first and last name, email address, postal address, country, phone number, other similar contact data, professional title, employer or professional affiliations, passport and visa information and information from other government IDs.

• Payment and Credit Information: We may collect credit card and other payment method details.
• Other information: We may collect information such as your age, sex, date of birth, marital status, nationality, occupation, ethnicity, religion, travel history or any other personal information provided in responses to surveys or questionnaires.
• Technical information: We may collect information such as website, device and mobile app usage, Internet Protocol (IP) address and similar information collected via automated means, such as cookies, pixels and similar technologies.
• Biometric, Health-related or other Sensitive Personal Data or Information: We may collect Sensitive Personal Data or Information such as health-related or religion information you provide us to fulfil special requests (e.g., health or religious conditions that require specific accommodation or services),
• Audio and Visual Information: We may record our customer service calls and security footage at our properties, which may include your voice and/or image; and

If you submit any personal information relating to other people to us or to our service providers in connection with the services (e.g., if you make a reservation for another individual), you represent and warrant that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

In addition to the information above, we may collect personal information from our employees or prospective employees, which may include:

• Information provided in the Curriculum Vitae;
• residency and work permit status;
• taxpayer identification number, banking details;
• sick pay, pensions, insurance and other benefits information (including the gender, age, nationality and passport information for any spouse, minor children or other eligible dependants and beneficiaries);
• date of hire, date(s) of promotions(s), work history, technical skills, educational background, professional certifications, language capabilities and training courses attended;
• Name, email, phone, emergency contact details, blood group;
• height, weight and clothing sizes, photograph, physical limitations and special needs.
• records of work absences, vacation entitlement and requests, salary history and expectations, performance appraisals, letters of appreciation and commendation, selection and development assessments, and disciplinary and grievance procedures;
• where permitted by law and proportionate in view of the function to be carried out by an employee or prospective employee, government ID and address proof, the results of background checks, driving licence number, vehicle registration and any other related information.
• information required to comply with laws, the requests and directions of law enforcement authorities or court orders;
• acknowledgements, agreements regarding our policies;
• information captured on security systems, including Closed Circuit Television (“CCTV”) and key card entry systems and other security and technology systems, to the extent permitted by applicable law including, in certain jurisdictions, biometric information.
• emails, correspondence and other work product and communications created, stored or transmitted by an employee using our computer, network or communications equipment; and
• date of resignation or termination, reason for resignation or termination, information relating to administering termination of employment;

Most of the personal information we process is the information that has been provided to us by you knowingly. However, in a few instances, we process personal information inferred on the basis of the information provided by you or personal information received from a third party, such as a recruitment agent or background check vendor.Unless otherwise stated, all personal information we request from you is obligatory. However, please note that if you do not provide certain information, we may not be able to accomplish some or all of the purposes outlined in this Privacy Policy, and you may not be able to use certain tools and systems which require the use of such personal data. Further, if you do not provide and/or allow us to process the personal information as requested, we reserve the right to discontinue our services or our engagement for which the information is sought

HOW WE COLLECT YOUR PERSONAL INFORMATION

We collect the above-referred categories of personal information from the following categories of sources:

• Data provided to us directly by any party
• We receive and store any information you enter on our website or third-party hotel booking websites or give us in any other way (e.g., at reception, kiosks).
• We use cookies and related technologies to passively collect personal information from and across your devices when you interact with our website, emails, or other online content or when your device connects to, or is detected by, the wireless networks at our properties.
• From social media: If you post to one of our pages on a social media site, we may receive contact and identification information, stay and purchase information, internet and network activity, and any other personal information contained in your social media posts or profile.

.

HOW WE USE YOUR PERSONAL INFORMATION

Any of the information we collect from you may be used in one of the following ways:

• carry out our obligations arising from any contract entered into between you and us;
• fulfil other purposes as disclosed to you in accordance with applicable law or with your consent;
• provide you with information about the services and sending you information about materials, newsletters, events, conferences and offers;
• provide products and/or services and communicate with you about products and/or services offered by us;
• conduct market research, customer satisfaction and quality assurance surveys;
• process, disclose, transmit, and/or share the information with third parties which have business or contractual dealings with us;
• administer general record keeping;
• meet legal and regulatory requirements or compliance obligations;
• provide privileges and benefits to you, marketing and promotional campaigns based on your profile;
• communicate with you (including to respond to your requests, questions, feedback, claims or disputes) and to customize and improve our services;
• enforce the terms of use of our website;
• prevent, detect, and investigate fraud, cyber incidents, or other illegal or harmful activity;
• for any emergency and incident response ensuring the security of on-site services, responding to, handling, and documenting on-site accidents and medical and other emergencies (including facilitating in house doctor services), actively monitoring properties to ensure adequate incident prevention, response, and documentation (including CCTV), requesting assistance from emergency services, and sending notifications and alerts in the event of incidents or emergencies (such as via SMS, email, call, audio-visual device prompts, etc.); and
• to otherwise support your relationship with SAMHI.

In addition to the above, any of the information we collect from our candidates for employment, employees or former employees, may be used in one of the following ways:

• evaluate applications for employment;
• manage all aspects of an employee’s employment relationship, including, but not limited to, payroll, benefits, corporate travel, performance appraisal, disciplinary and grievance processes etc.;
• maintain sickness records and occupational health programs;
• investigate and respond to claims against SAMHI, its staff and its guests;
• administer termination of employment and provide and maintain references;
• maintain emergency contact and beneficiary details; and
• comply with applicable laws, including judicial or administrative orders regarding individual employees.                                              We may retain information of former employees for as long as it is necessary and in all cases for no longer than permitted by our retention schedule and applicable law.

DISCLOSURE OF INFORMATION

From time to time, we may disclose your personal information. Such disclosure shall be made in accordance with applicable law. In some jurisdictions, data privacy laws may require us to obtain your consent before we disclose your information to third parties. When you consent to this Privacy Policy, you are, to the extent required and permitted under your local law, granting your consent to the transfer of your personal information to such third parties for the purpose and to the extent stated in this section and as described in Section 5 (How We Use Your Personal Information) above

OPERATOR USE OF CUSTOMER DATA

Our brand operators at various properties process customer information and employee data. Please refer the privacy policy of the respective brand operators to understand how your information may be processed by the respective brand operators.

COMMITMENT TO DATA PRIVACY & SECURITY

We are committed to protecting the confidentiality and security of the information that you provide to us. To do this, technical, physical and organizational security measures are put in place to protect against any unauthorized access, disclosure, damage or loss of your information. The collection, transmission and storage of information can never be guaranteed to be completely secure, however, we take steps to ensure that reasonable security safeguards are in place to protect your information.Only selected and authorised employees, business partners, vendors and other third party providers may have access to your information. SAMHI takes reasonable measures to ensure that our third party service providers employ industry standard security measures to ensure the security of information through legally binding terms and conditions

LINKS TO OTHER SITES

Our websites and applications contain links to websites that are maintained and/or controlled by non-affiliated parties. In some instances, these websites may be co-branded and display our logos or other trademarks. This Privacy Policy and our responsibility arising from it is limited to our own information collection practices. SAMHI shall not be responsible for the information collection practices or privacy policies of other websites maintained by third parties or our service providers where you submit your personal information directly to such websites. We encourage you to review the privacy policies of these websites as their privacy policies may differ from ours.

RETAINING YOUR INFORMATION IN OUR SYSTEMS

We generally only keep your information for as long as is reasonably required for the purposes explained in this Privacy Policy. In some cases we keep transactional records (which may include your information) for longer periods if necessary to meet legal, regulatory, tax or accounting needs. We will also retain information if we reasonably believe there is a prospect of litigation.
We maintain a data retention policy which we apply to the records we hold.In addition, even after deletion of information, including on account of exercise of your right under Section 11 (Withdrawing consent and restriction of processing) below, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.SAMHI reserves the right to decline access to your information under certain circumstances. If your information is not disclosed to you, you will be provided with the reasons for this non-disclosure.

WITHDRAWING CONSENT AND RESTRICTION OF PROCESSING

Where we have obtained your consent to process your personal information for certain activities, you may request to withdraw consent to personal information processing or you may review, update, correct or delete your personal information collected through the website or other channels unless we consider that there is an alternative legal basis to justify our continued processing of your personal information. Subject to the aforesaid, you may request to withdraw consent as mentioned above or you may review, update, correct or delete your personal information by e-mailing us at compliance@samhi.co.in

SEVERABILITY

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.

GRIEVANCE OFFICER

You may, at any time, contact our Grievance Officer directly with all questions and suggestions concerning data protection. Please see below the details of our grievance officer:

Name: Sanjay Jain

Email: compliance@samhi.co.in

Address:  SAMHI Hotels LTD 14th Floor, Building No 10 C, DLF Cyber City, Phase 2 Gurugram 122002