My Ōtel Group:

Our website address is: https://myotelgroup.com.

Last Update: 25/12/2025.

Comprehensive Privacy Policy

I. Introduction and Scope

We are My Ōtel Group (the “Company”), a global hospitality provider. We are committed to safeguarding the privacy of your Personal Data collected through our websites, mobile applications, and other platforms (the “Site”), or when you interact with us, travel with us, or stay at our Establishments.

By using our Site or services, you agree to the collection, use, and sharing of your Personal Data as described in this Policy.

II. Types and Sources of Personal Data

We collect and process various categories of Personal Data, primarily obtained directly from you or through third-party booking channels.


A. Identification & Contact	Name, salutation, professional/work information, email, phone number, residential address, country of residence.	Places of stay, booked dates, other purchases (e.g., spa, dining), invoices, feedback, and hotel complaints.
B. Stay & Transaction	Our Site/apps, third-party advertising networks, and analytics providers.	You, our Establishments, third-party service providers (on-property).
C. Financial & Payment	Account/card details, billing address.	You, booking channels, travel agents, and corporate clients.
D. Loyalty & Preferences	Loyalty program details, specific requests (e.g., pillow type), communication preferences, marketing consents/objections.	You, loyalty program partners.
E. Sensitive Information	Passport/Visa information (for travel requirements), health-related data (e.g., allergies, mobility needs), biometric data (if voluntarily provided for access).	You (via explicit consent for special requests or access).
F. Technical & Usage	IP address, browser/device type, unique device IDs, location data (if permitted by device settings), information collected via cookies and tracking technologies.	Social media platforms, government authorities, and public records.
G. Third-Party Data	Passport/Visa information (for travel requirements), health-related data (e.g., allergies, mobility needs), and biometric data (if voluntarily provided for access).	Publicly available professional information (e.g., LinkedIn), information placed on social media, and police/governmental reports.

III. Legal Bases and Purposes for Using Your Information

We process your Personal Data based on the following legal bases, depending on the purpose:

1. Performance of a Contract (P)

This is the main basis for administering your reservation and delivering the services you request.

P1. Core Service Provision: To confirm, manage, and administer your booking, provide you with guest services (e.g., check-in, room key activation, concierge), and facilitate travel arrangements.
P2. Payment Processing: To verify and process payments for your stay and other services rendered.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

2. Legitimate Interests (L)

We process data based on our legitimate interests in providing, improving, and developing our business, provided your interests and fundamental rights are not overridden.

L1. Service Improvement & Planning: Analyzing usage data, feedback, and demographics to improve services, conduct market research, and develop new offerings.
L2. Safety & Security: Implementing CCTV, monitoring system access, and processing incident reports for the safety of guests, staff, property, and incident prevention.
L3. Marketing & Promotions: Sending you personalized offers, promotions, and updates about our brands, unless you have opted out.
L4. Internal Operations: Managing internal systems, accounting, auditing, and processing credit applications.

3. Legal Obligations (O)

We use Personal Data where necessary to comply with legal requirements imposed on us, property owners, or operators.

O1. Compliance: Meeting tax, regulatory, and public health obligations (e.g., mandatory guest registration, reporting financial transactions).
O2. Claims: Establishing, exercising, or defending legal claims.

4. Consent (C)

We rely on your explicit consent for specific, non-essential activities, particularly involving Sensitive Information.

C1. Special Requests: Processing health-related or biometric data (if collected) to accommodate special requests (e.g., accessible rooms, dietary needs). You may withdraw this consent at any time.
C2. Non-Essential Cookies: Using non-essential cookies and tracking technologies for advertising and analytics purposes.

IV. Disclosure and Sharing of Your Personal Data

We may disclose your Personal Data to the following groups for the purposes described:

1. Within the My Ōtel Group

Your information is shared with other entities within the My Ōtel Group (including corporate affiliates, subsidiaries, and franchised/managed Establishments worldwide) to provide you with seamless services, administer loyalty programs, and for internal analytics and business planning.

2. Service Providers and Suppliers

We engage third parties to perform functions on our behalf. These include:

On-Property Companies: Where you request services (e.g., spa, restaurant, laundry) from independent companies operating within our Establishments, we may share necessary data to facilitate those services and charges.

IT & Hosting Providers: For managing our systems and data storage.

Payment Processors: For secure payment processing.

CRM & Marketing Providers: For managing customer relationships and executing communications.

3. Property Owners and Operators

We share your information with the separate legal entities that own or operate the specific Establishment where you book a stay. These entities process your data to administer your reservation and comply with their own independent legal, tax, and reporting obligations.

4. Third-Party Booking and Travel Providers

If you book through a third-party channel (e.g., travel agents, online booking platforms), we share information necessary to validate and administer the booking. Where you direct us to, we will share data with your credit card provider or employer (e.g., under a corporate expense program) to facilitate expense management.

5. Regulators and Legal Authorities

We disclose data when legally compelled by a court order, governmental entity, or where necessary to protect our rights, property, or safety.

6. Business Transfers

In the event of a sale of a hotel, merger, acquisition, or other asset transfer, your Personal Data may be included as a transferred business asset.

V. Your Data Rights

Depending on the laws applicable to you, you may have the right to access, rectify, erase, restrict, or object to the processing of your Personal Data.

Right to Object to Marketing: You always have the right to object to our processing of your Personal Data for direct marketing purposes.
Exercising Rights: We may require additional information to verify your identity before responding to a rights request. We will comply with all requests within a reasonable time, in line with applicable laws.

VI. Contact Information and Policy Updates

1. Policy Updates

This Policy may be updated periodically to reflect changes in our data practices or legal requirements. The revised policy will be posted on the Site.

2. Contacting Us

For any questions regarding this Privacy Policy, your rights, or to exercise your options (including opting out), please contact our Data Privacy Office: