Privacy Policy
1. General Provisions
This privacy policy explains how Hotel Metsis collects, uses, and protects personal data. Personal data is processed in accordance with applicable legislation, including the European Union General Data Protection Regulation (GDPR).
1.1 Data Controller
The data controller is Sistem OÜ (registry code 10882679), address J. Kuperjanovi 63, Valga city, 68207 Valga municipality, Valga County.
Email: info@hotellmetsis.com
Phone: 7666050
2. What Data We Collect
2.1 Through the contact form
- First and last name
- Email address
- Phone number
- Content of the inquiry
2.2 When making reservations and providing accommodation services
- First and last name
- Phone number
- Email address
- Document number
- Year of birth
- Citizenship
- Booking details (dates, special requests)
2.3 When subscribing to the newsletter
- Email address
2.4 Automatically collected data
- IP address
- Cookies
- Website usage statistics
3. Purpose and Legal Basis for Data Processing
Personal data is processed for the following purposes:
- Responding to customer inquiries
- Managing bookings and accommodation
- Fulfilling legal obligations (e.g., collection of accommodation data)
- Providing and improving services
- Marketing (e.g., newsletters), if consent has been given
- Ensuring security and protecting property
3.1 Legal bases
Processing of personal data is based on:
- Performance of a contract (e.g., bookings)
- Legal obligation (e.g., accommodation reporting requirements)
- Consent (e.g., newsletters, marketing)
- Legitimate interest (e.g., security, video surveillance, web analytics)
4. Data Retention
Personal data is retained only as long as necessary to fulfill the purposes or legal requirements:
- Booking and accommodation data: up to 7 years (accounting and legal requirements)
- Contact form data: up to 12 months
- Newsletter data: until consent is withdrawn
- Video surveillance recordings: up to 30 days unless required for legal proceedings
5. Data Sharing
Hotel Metsis does not sell or rent personal data to third parties.
Data may be shared with:
- Service providers (e.g., IT services)
- Payment service providers
- Authorities when required by law
Where necessary, data may also be processed outside the European Economic Area in compliance with GDPR requirements and safeguards.
6. Cookies
The Hotel Metsis website uses cookies to:
- Improve user experience
- Analyze web traffic
- Ensure website functionality
The following types of cookies may be used:
- Functional cookies
- Analytical cookies
Consent for cookies is obtained via the cookie notice. Cookies can be managed in browser settings.
7. Data Security
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, or disclosure.
8. Your Rights
You have the right to:
- Access your personal data
- Request correction or deletion of data
- Restrict processing of data
- Object to data processing
- Withdraw your consent
To exercise your rights, contact us by email: info@hotellmetsis.com
You also have the right to file a complaint with the Data Protection Inspectorate.
9. Video Surveillance
Video surveillance is used on the premises of Hotel Metsis to ensure the safety of property and persons. Surveillance is carried out based on legitimate interest.
9.1 Scope of surveillance
The hotel uses 9 surveillance cameras located in public areas (e.g., entrances, corridors, parking lot). Cameras are not installed in private areas (e.g., hotel rooms or restrooms).
9.2 Data processed
- Image of a person
- Movement and activity
- Date and time
9.3 Purpose
- Ensuring security
- Protecting property
- Preventing incidents
9.4 Retention
Recordings are stored for up to 30 days, unless required for legal purposes.
10. Contact
If you have questions regarding personal data processing, please contact us:
Email: info@hotellmetsis.com
Phone: 7666050
11. Changes
Hotel Metsis reserves the right to update this privacy policy if necessary. All changes will be published on this page.
Last updated: 31.03.2026