This Statement applies to individuals who use our in-room Roxy device or our Roxy management website (we call these our "Services"). It does not apply to information collected by us offline or through any other means, or by any third party (including through any application or content that may be accessible through our Services).
Roxy provides information and functionality for adult guests. No one under age 13 may provide any information to us through or in connection with the Services, and we do not knowingly collect information from children under 13 (and you are prohibited from providing such information to us). If you are under 13, you may not access or use the Services for any reason whatsoever.
For some Services we make decisions on how personal information is used in the context of a Service (Roxy is a controller of personal information in this case), and for other Services we will only use personal information as instructed by our customers (Roxy is a processor of personal information in this case). Below you can find more information on the cases in which Roxy is a controller of personal information and information on how to contact us.
We collect personal information about you from your interactions with the Roxy device. This information is pseudonymous and is not tied to your name but rather to your room number. Roxy does not have access to information needed to connect your name to your room number. We obtain this pseudonymous personal information from you through your interactions with us and our Service, such as when you make a request to Roxy for an item or for information.
The type of personal information we collect depends on how you are interacting with Roxy.
You can choose whether or not to provide us with this information, but if you choose not to provide us with such information, you may not access or use Roxy.
The personal information we collect is pseudonymous and consists of the following:
We use personal information to provide and improve Services and for other purposes that are in our and our users' legitimate interests, as well as for compliance purposes.
Some laws require us to explain our lawful reason for processing your personal information. We process personal information about you on the basis that it is:
You are welcome to contact us for further information on the legal grounds that we rely on in relation to any specific processing of your personal information.
We share pseudonymised voice transcripts with hotels in order for them to recognize common requests and improve their service. These transcripts are not associated with your name or room number, and the hotels have no ability to connect you with your query. We also share pseudonymised personal information if necessary for compliance for a legal obligation (e.g., to respond to a requirement of applicable law, a court order or other judicial process, or a request from a law enforcement agency, regulatory authority or other governmental authority).
Roxy takes the security of personal information seriously, and we use appropriate technologies and procedures to protect personal information (including administrative, technical and physical safeguards) according to the risk level and the Services provided.
Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet the sensitivity of the personal information we handle, our business needs, and changes in technology and regulatory requirements.
The pseudonymised voice data and recordings and retained indefinitely, or until the hotel the data was captured in requests that we delete the data.
You may have rights under European Union and other laws to gain access to your personal information and to ask us to rectify, erase or restrict use of your personal information. You may also have rights to object to your personal information being used, to ask for the transfer of personal information you have made available to us and to withdraw consent to the use of your personal information. Further information on how to exercise your rights is set out below.
We will honor your rights under applicable data protection laws. You have the following rights under European Union laws and may have similar rights under the laws of other applicable jurisdictions:
These rights are not absolute and they do not always apply in all cases. In response to a request, we will ask you to verify your identity if we need to, and to provide information that helps us to understand your request better. If we do not comply with your request, whether in whole or in part, we will explain why. In order to exercise your rights please email us at email@example.com.
If you have any questions, comments, complaints or suggestions in relation to data protection or this Statement, or any other concerns about the way in which we process information about you, please contact our Privacy Team at firstname.lastname@example.org.