Our Privacy Policy

Personal Data Protection Policy For Guests, Visitors and Other Data Subjects

1. The purpose of the policy

The Personal Data Protection Policy describes how Ibis Styles Batumi processes personal data in accordance with applicable data protection laws and international best practices. We respect and protect your right to be fully informed about the processing of your personal data.

2. Who are we?

Data Controller:

Business name: Ibis Styles Batumi

Address: 5B Lech and Maria Kaczynski St, Batumi, Georgia Contact number: +995 422 25 20 25

Email: HB6Z8@accor.com

Ibis Styles Batumi is a member of the Accor brand. The independent data controller of your personal data may also be Accor SA, the parent company of the Accor Group, registered at 82 rue Henri Farman, Issy-les-Moulineaux, 92130, France.

Accor SA processes your data in order to:

Manage Accor’s central reservation system;
Maintain a global guest database for the personalization of services;
Manage the Le Club Accor loyalty program.
You can review Accor SA’s Customer Personal Data Protection Charter here: < https://all.accor.com/a/en/information/data-protection.html >

3. Principles of Data Processing

Principle of Legality and Fairness – We process your personal data only on lawful grounds and in accordance with rules established by applicable law.

Purpose Limitation – We process personal data only for the specific operational purpose for which it was collected.

Principle of Transparency – You are informed about the personal data processing activities.

Principle of Data Minimization – We process personal data only to the extent necessary to achieve the operational purpose.

Principle of Term Limitation– We retain personal data only for as long as necessary to achieve the operational purpose. After the retention period expires, we securely delete and destroy the data.

Principle of Data Security – To protect the security of personal data, we implement technical and organizational measures that adequately safeguard the data against unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.

4. What type of data do we process?

When providing our services, depending on the nature of the service, we may process one or more of the following types of personal data:

Identification data Name, last name, date of birth, identification number, data of the document confirming identity (copy), sex, citizenship, place of birth, address, nationality and etc;

Contact information Email, telephone number, and etc;

Data obtained by communication: Data obtained via email, telephone, chat, social media or other communication channel; Recordings: Video recordings;

Banking and card information: Financial information, such as billing details, payment data, and card information used for payments;

Reservation and accommodation data: Check-in and check-out dates, Guest preferences (e.g., room/floor, table, food allergies), Loyalty program ID (if applicable);

Contractual information Information about services provided and products supplied by the hotel;

Device data: IP address, IMEI code, location information, and other similar data.

5. Purpose of data processing

We process data only for clearly defined and legitimate purposes. The personal data listed in Clause 4 of this document are processed for one or more of the specific purposes outlined below:

For the purpose of protecting the legal rights and legitimate interests of the hotel;
For the purpose of providing the offered products and services;
For the purpose of improving service quality and taking into account customer needs and preferences;
For the purpose of organizing events on the hotel/restaurant premises;
To manage labor law-related rights and responsibilities with employees;
To protect our own property and that of others;
For the purpose of ensuring compliance with safety standards;
To address breaches of hotel policies;
To deliver special offers and for marketing purposes, with the guest’s consent.

6. How is personal data collected?

Personal information about guests, accompanying persons, and visitors is collected:

From websites through which our hotel rooms are booked, based on contracts concluded with them;

To make your experience more personalized, we may receive details from other Accor hotels about your past stays and preferences;

Directly from individuals using the hotel’s services — on-site, via phone calls or correspondence, and at the time of payment;

When using the hotel premises under a contractual arrangement, the contracting party may provide us with information about event participants (names and surnames) for the purpose of granting them access to the building;

Personal data are collected for direct marketing purposes only with the data subject’s prior written consent;

During video monitoring inside the hotel building and its external perimeter.

7. Basis for data processing

Your personal data will be processed only if one of the following grounds exists:

You have given voluntary consent for the processing of your data;
Data processing is necessary to conclude or perform a contract with you, or to fulfill obligations arising from a transaction;
Data processing is required to comply with legal obligations;
Data processing is necessary to provide services to you or to consider your application;
Data processing is necessary to protect the legitimate interests of the hotel or third parties;
The data is publicly available.
The purpose of video monitoring is to prevent crime, ensure the safety of individuals on the premises employees, guests, visitors, including minors and to protect property.

8. Processing of Personal Data of Minors

We process the personal data of minors in accordance with the Law on Personal Data Protection, based on the consent of a parent or legal guardian, and always with the best interests of the minor in mind.

9. Data Retention and Disposal Policy

We retain your data:

For the entire duration of the service and for no longer than 10 years after the service has ended;
Or for the period necessary to achieve the specific purpose of processing, as defined by the scope of the service or specified in the contract.

10. Your rights

Right to be Informed About Data Processing –You have the right to obtain information about the data being processed about you, the purpose and legal basis of the processing, as well as the source of the data and any disclosures made to third parties.
Right to Access and Receive Copies of Your Data - You have the right to access the personal data held about you by the hotel and to receive copies of documents or records containing your personal data, in accordance with the procedures established by Georgian law.
Right to Correct, Update and Complete Data - You have the right to request correction, updating, and completion of any inaccurate, incomplete, or outdated personal data about you.
Right to Suspend Data Processing and Request Deletion or Erasure - You have the right to request that the processing of your personal data be suspended, and that your data be deleted or erased;
Right to block data – You have the right to request data blocking;
The right to withdraw consent - You have the right to withdraw your consent to the processing of your personal data at any time and to request the deletion of any data processed based on that consent.
Right to Data Portability - You have the right to request the portability of your personal data that you have provided to us — that is, to receive it in a structured format or to have it transferred to another data controller.

Right to appeal - In case of a violation of your rights, you may contact us, the Personal Data Protection Service, or the court.

Rights in Case of a Data Breach - You have the right to be informed about any incident involving your personal data, including the relevant circumstances, the actual or potential harm caused by the incident, and the measures taken or planned to mitigate or eliminate such harm.

11. Data Security

We store and process your personal data in compliance with legal requirements and implement technical and organizational security measures to protect your data.

We protect your personal data against unauthorized or unlawful access, accidental loss, damage, disclosure, or destruction.

Our employees follow internal procedures to ensure the confidentiality of personal data.

12. Data Sharing

Your data may be shared with:

Our affiliated entities and service providers, including IT service providers, auditors, and consultants;
Courts, based on a court order;
Other third parties, with your consent.

13. Policy updates

This policy document may be updated periodically, as needed. The revised version will be published on our website without delay, indicating the date of the update.

Date: 26/08/2025