Privacy Policy

1. Introduction & Overview

Bruzendia operates as an independent luxury hotel and resort reservation recommendation portal, facilitating seamless accommodations browsing, luxury suite reservations, amenities planning, and curated travel reviews. We are firmly committed to safeguarding the privacy, confidentiality, and integrity of the personal data entrusted to us by our visitors and registered guests.

This comprehensive Privacy Policy outlines the specific mechanisms and protocols by which Bruzendia collects, records, organizes, structures, stores, adapts, retrieves, consults, and securely transfers personal data when you interact with our website, access digital booking management utilities, or utilize our premium hospitality concierge recommendations.

2. Categories of Personal Data Collected

To ensure high standards of booking precision, user account stability, and statutory compliance, Bruzendia processes several distinct tiers of information:

• Identity & Guest Verification Data: Full legal name, title, date of birth, preferred salutation, nationality, and, where strictly required by local hotel check-in ordinances, official government identification references.
• Reservation & Preference Data: Check-in and check-out dates, room configurations, suite categories, requested bed types, special dietary preferences, on-site lounge access requests, accessibility accommodations, and booking confirmation identifiers.
• Transaction & Billing Details: Encrypted payment verification tokens, cardholder billing designations, authorized transaction timestamps, and invoice settlement records processed through verified and certified payment gateways.
• Technical & Analytical Identifiers: IP addresses, browser fingerprint characteristics, operating system versions, device parameters, language settings, referring URLs, session duration metrics, and navigation paths across our resort catalog.

3. Purpose and Legal Grounds for Processing

Bruzendia processes personal information strictly in accordance with recognized lawful bases, ensuring transparent operational processing without undue interference with individual privacy rights. Our primary legal processing rationales include:

1. Performance of a Contractual Agreement: Processing is essential to facilitate booking inquiries, transmit guest reservations directly to contracted hotel properties, confirm stay availability, issue automated receipts, and manage customer account profiles.
2. Compliance with Legal Obligations: Retention of transaction summaries, tax records, fraud prevention logs, and hospitality registry audit sheets required by applicable civil and financial statutes.
3. Legitimate Commercial Interests: Enhancing website performance, optimizing resort search filters, monitoring server health, preventing unauthorized portal access, and maintaining rigorous cybersecurity standards across our booking infrastructure.
4. Consent-Based Communications: Delivering opted-in newsletters, VIP loyalty updates, and tailored luxury resort travel guides, which users may freely decline or withdraw at any given point.

4. Data Sharing and Third-Party Disclosures

Bruzendia never sells, rents, or monetizes individual user databases to unaffiliated third parties. Data transfers occur strictly under binding non-disclosure, confidentiality, and data protection agreements under the following operational circumstances:

• Partner Hotels & Resort Operators: Transmission of guest reservation itineraries, check-in requirements, and personalized suite preferences to the destination resort selected by the traveler during booking.
• Authorized Payment Gateways: Secure routing of billing information to certified, encrypted financial processing networks to authorize room guarantees and incidental reserves without retaining unencrypted card numbers on our local databases.
• Technical Service Providers: Trusted cloud infrastructure hosts, content delivery networks (CDNs), and analytical monitoring providers operating under strict European and international data processing standards.
• Legal & Regulatory Authorities: Competent judicial or government agencies when strictly required by a court summons, statutory requirement, or regulatory inquiry to safeguard life, property, or systemic platform integrity.

5. Security Architecture & Data Safeguards

To defend stored information against unauthorized disclosure, accidental destruction, alteration, or malicious exfiltration, Bruzendia employs an enterprise-grade multi-layer defense framework:

• End-to-End Encryption: Modern Transport Layer Security (TLS 1.3) protocols protecting all web traffic, reservation forms, and communication channels.
• Granular Access Control: Strict role-based authentication limiting internal employee access to identifiable guest information solely on a strict need-to-know basis.
• Continuous Monitoring: Real-time intrusion detection systems, recurring vulnerability scans, and rigorous perimeter firewall configurations.

6. Data Retention Protocols

Personal data is retained only for the duration necessary to satisfy the specific purposes detailed within this policy, including ongoing booking support and statutory accounting obligations. Standard user account records remain active while an account is registered. Inactive booking logs and financial summaries are retained for up to five (5) years in compliance with standard commercial audit guidelines, after which all identifying parameters are permanently expunged or irreversibly anonymized.

7. Individual Privacy Rights

Guests and platform visitors maintain full statutory autonomy over their personal information. Depending on jurisdiction, you hold the right to exercise the following legal entitlements:

• Right of Access: Request a comprehensive copy of all personal records currently held in connection with your user profile.
• Right to Rectification: Demand immediate corrections of inaccurate, outdated, or incomplete personal details.
• Right to Erasure (Right to Be Forgotten): Request the permanent deletion of non-essential personal information where retention is no longer legally mandated.
• Right to Restriction of Processing: Restrict data operations during formal disputes regarding accuracy or lawful handling grounds.
• Right to Data Portability: Obtain your personal submission history in an interoperable, structured, and machine-readable electronic format.
• Right to Object & Opt-Out: Object to legitimate interest processing or immediately discontinue receiving marketing and promotional briefings.

8. Cookies and Tracking Technologies

Bruzendia utilizes functional, analytical, and preference cookies to elevate user browsing comfort, maintain active session states, remember sorting filters, and analyze aggregate resort traffic. Users maintain complete liberty to configure browser settings to block or delete cookies, although disabling essential cookies may impact certain reservation interface features.

9. Cross-Border Data Transfers

Given the global nature of premier international resort bookings, reservation details may occasionally be routed to servers or hotel concierge teams located outside your domestic jurisdiction. In every such circumstance, Bruzendia guarantees that suitable safeguards, including standard contractual clauses and rigorous cross-border protection frameworks, are applied to preserve uninterrupted privacy rights.

10. Updates to This Privacy Policy

Bruzendia reserves the statutory right to revise and modernize this Privacy Policy periodically to reflect technological evolutions, legislative adjustments, or enhancements to our hospitality booking suite. Any amendments will become effective immediately upon formal publication on this portal, accompanied by an updated effective date at the top of this document.