Privacy Policy
1.1 This Privacy Policy (hereinafter the “Privacy Policy”) pertains to the processing of personal data by Karimjee Value Chain Limited, with its registered office in Tanzania, as the data controller (hereinafter “KVCL”). KVCL collects and processes personal data about its customers, prospective customers, and persons whose data were provided to KVCL by its customers (hereinafter referred to as the “Data” and the “Clients”) in connection to the services provided on the website of The Overhang Boutique Hotel accessible at www.theoverhang.co.tz (hereinafter the “Website”).
1.2 The Data are processed in compliance with the Data Protection Act 2019 of Tanzania.
1.3 KVCL is the sole controller responsible for the compliance with applicable data protection laws.
1.4 Contact details of the Controller - Email: reservations@theoverhang.co.tz
2.1 While browsing the Website, certain information may be collected passively by means of various techniques and tools, such as IP addresses, cookies (i.e., without the Clients actively providing any information).
2.2 For detailed information about the cookies and other tracking technologies used on the Website, please see our Cookies Policy. In the Cookies Policy, you will find information about what cookies are and how cookies and tracking technologies may be disabled. If you do not disable cookies or other tracking technologies, you are deemed to have agreed to their use.
3.1 This Privacy Policy does not govern the data privacy, information provision, and other practices of external partners for which KVCL has no responsibility, including external partners operating websites or web areas (including without limitation applications) that can be accessed through the Website or to which a link on the Website points. The accessibility of or any link on our Website to such website or web area shall not be construed as KVC’s approval of such site.
4.1.1 What Data do we process? For making accommodation reservations, KVCL collects and processes the following Data:
Name and surname
Contact information, including permanent residence and email address
Credit card data
Age of child
4.1.2 Why do we need this Data? Data processing is necessary for the performance of the rights and obligations under the accommodation agreement entered into between the Client and KVCL. Provision of this Data is a requirement to enter into a contract. Without this Data, it will not be possible to make a reservation of accommodation and conclude the accommodation agreement.
4.1.3 For how long do we keep this Data? The Data necessary for making reservations are processed and stored for the duration of the reservation and for an adequate time after the termination of a legal relationship among the Clients and KVCL for potential related disputes. This period generally does not exceed 3 years from the termination of the reservation; however, in some cases, the Data may be stored for a longer period given specific circumstances.
4.2.1 What Data do we process? For direct marketing purposes, particularly for registration for receiving newsletters, KVCL collects and processes the following Data: a) Name and surname; b) Email address.
Name and surname
Email address
4.2.2 Why do we need this Data? Data processing is necessary for sending commercial communications to the Clients. The commercial communications will be sent to the Client only if the Client gives consent to receiving this communication.
4.2.3 For how long do we keep this Data? The Data necessary for direct marketing purposes are processed and stored for the duration of the consent of the Client. The Client is entitled to withdraw this consent at any time by contacting KVCL at reservations@theoverhang.co.tz.
4.3.1 What Data do we process? The Data are processed for the purposes of prevention and safety of property and persons, and to respond to outstanding debts. For these reasons, KVCL may decide to include any Client whose behavior has been inappropriate in the category of “blacklisted” Clients. The Data relating to the identity and blacklisted status of the Client are intended for authorized personnel of KVCL.
4.3.2 Why do we need this Data? Data processing is necessary for purposes of the legitimate interest pursued by KVCL.
4.3.3 For how long do we keep this Data? The Data necessary for this purpose are processed and stored for a period that generally does not exceed 3 years from the termination of the reservation. However, in some cases, the Data may be stored for a longer period given specific circumstances.
5.1.1 The Data collected and processed by KVCL may be made available to our contractual partners and external service providers to enable them to provide services such as website administration, data analysis, payment processing, infrastructure provision, IT services, email and direct messages service, verification services, and other services.
5.1.2 The Data will be stored on servers located in Tanzania. In order to ensure an adequate level of protection of your Data, KVCL provides appropriate safeguards, particularly by entering into standard data protection contractual clauses adopted by the relevant authorities.
6.1 The Client has the right to access the Data and to obtain information from KVCL. KVCL shall provide a copy of the Data being processed free of charge. For any further copies requested by the Client, KVCL may charge a reasonable fee.
6.2 By exercising the right to rectification, the Client also has the right to have incomplete personal Data completed.
6.3 In the case of the Client exercising the right to erasure, KVC L has the obligation to erase personal Data.
6.4 The Client has the right to object to the processing of their personal Data on grounds related to their particular situation at any time.
6.5 The Client has the right to obtain restriction of processing from KVCL.
6.6 Where the Data are processed based on the Client’s consent, the Client may withdraw this consent at any time.
6.7 Regarding the right to data portability, the Client has the right to receive the personal Data in a structured, commonly used, and machine-readable format and to transmit those Data to another controller. Where technically feasible, the Client has the right to have the personal Data transmitted directly from one controller to another.
6.8 Regarding automated individual decision-making and profiling, where decisions are based solely on automated processing (including profiling), the Client has the right to be excluded from such activity.
6.9 Every Client has the right to lodge a complaint with a supervisory (data protection) authority if the Client considers that the processing of their personal Data infringes the applicable data protection laws. In Tanzania, the contact details of the relevant supervisory authority are available upon request.
6.10 Every Client has the right to an effective judicial remedy if they consider that the processing of their personal Data has resulted in infringement of their rights, as well as the right to claim compensation before the court.