Book via WhatsApp
EN ES FR
Home / Privacy Policy
Security & Trust

Privacy Policy

Commitment to guest data protection and personal privacy at Puerto Plaza Hotel & Shops.

1. Legal Framework & International Compliance

Puerto Plaza Hotel & Shops processes personal data in strict compliance with the Dominican Republic Organic Law No. 172-13 on Personal Data Protection, Article 44 of the Dominican Constitution (Right to Privacy), the European Union General Data Protection Regulation (EU GDPR 2016/679 / UK GDPR), and United States state privacy laws, including the California Consumer Privacy Act amended by CPRA (Cal. Civ. Code § 1798.100 et seq.), VCDPA, and CPA.

2. Notice at Collection & Data Categories

We collect personal information necessary to deliver premier hospitality services and fulfill regulatory requirements:

  • Identity & Contact: Full legal name, official government passport or ID (mandatory for hospitality registry), email address, phone number, and country of residence.
  • Stay & Booking Details: Check-in and check-out dates, selected apartment layout, guest count, vehicle license plate (for on-site parking), and personalized concierge requests.
  • Payment & Security Credentials: Tokenized payment authorization codes via certified PCI-DSS Level 1 gateways. We never store full credit card numbers or CVV codes on our local servers.
  • Technical Data & Telemetry: Anonymized/SHA-256 hashed identifiers, IP addresses, and browser telemetry used solely to secure the infrastructure, prevent DDoS attacks, and measure site stability.

3. Lawful Bases for Processing (GDPR Art. 6)

Data processing operations are grounded on lawful bases:

  • Contractual Performance (Art. 6.1.b): Administering reservations, online check-in, concierge assistance, and guest billing.
  • Legal Obligation (Art. 6.1.c): Mandatory hospitality registry reporting and Dominican tax compliance (DGII).
  • Legitimate Interests (Art. 6.1.f): Server cybersecurity, fraud detection, and operational integrity.
  • Explicit Consent (Art. 6.1.a): Non-essential analytics (Google Analytics 4) and opt-in newsletters.

4. Cookies, Analytics & Meta Conversions API

We utilize essential technical cookies for reservation routing and security. Optional Google Analytics 4 (G-40XYEYDSDN) and server-side Meta Conversions API (CAPI) operate with SHA-256 cryptographic hashing to evaluate campaign effectiveness.

Global Privacy Control (GPC): Our infrastructure automatically honors the browser navigator.globalPrivacyControl signal to opt out of data sharing or targeted advertising.

5. Financial Security & PCI-DSS

Puerto Plaza Hotel & Shops does not store unencrypted cardholder data. All online and in-person card payments are processed directly through certified financial gateways compliant with PCI-DSS standards under the supervision of the Central Bank of the Dominican Republic.

6. Your Privacy Rights (ARCO, GDPR & CCPA/CPRA)

Depending on your jurisdiction, you are entitled to exercise the following rights:

  • Dominican Republic (Law 172-13): Access, Rectification, Cancellation, and Opposition (ARCO).
  • European Union / UK (GDPR): Right of erasure ("Right to be Forgotten"), data portability, restriction of processing, and lodging complaints with a Data Protection Authority.
  • United States (CCPA/CPRA): Right to opt-out of the sale or sharing of personal data, right to correct inaccurate data, and freedom from discriminatory treatment.

To exercise your rights, email our Privacy Team at info@puertoplazalasterrenas.com with subject line "PRIVACY RIGHTS REQUEST" and a copy of your valid photo identification.

7. Data Retention & International Transfers

Accounting and billing records are retained for 10 years per Dominican tax regulations. Server access logs are purged after 90 days. International data transfers to global cloud systems are safeguarded by Standard Contractual Clauses (SCCs) and end-to-end TLS 1.3 encryption.