YOUR INFORMATION · EXPLAINED

Privacy Policy

Version 2026-08-29-2 · Updated 29 August 2026

We use your booking information to handle your enquiry and administer your stay. Reading this notice is not consent to advertising. The current website does not take payments or collect card details.

1. Contact and responsibility

Shannon River Escape, Athlone, Ireland, is responsible for deciding how booking information is used (the data controller). For privacy questions or a rights request, contact Rimworkmail@gmail.com.

2. What the website records

The enquiry form records your name, phone number, requested check-in and check-out dates, selected stay package and displayed price. It also records a booking reference, submission time, and the version, time and three acknowledgements of the booking documents. Administration adds a request status and an activity history. The operator may also hold correspondence or arrangements you supply separately.

Server logs may contain your IP address, requested URL, browser information, date and time for operation and security. Only dates of unavailability are shown in the public calendar, not guest names, phone numbers or booking references.

3. Why information is used

• To respond to your enquiry and arrange or perform a stay: steps you request before a contract and performance of a contract, under GDPR Article 6(1)(b).
• To protect the website, prevent duplicate or abusive requests and keep appropriate evidence when handling disputes: legitimate interests under Article 6(1)(f), balanced against your rights.
• Where required by a specific legal duty, for example an applicable accounting obligation: Article 6(1)(c).

Your name, phone number and stay details are needed to handle an online enquiry. Without them, this form cannot submit a request. The three acknowledgements record that the booking information was presented and accepted or read; the Privacy Policy checkbox is not the legal basis for necessary booking processing. There is no marketing opt-in on this form.

4. Access, service providers and location

Booking records are stored in a private database on the dedicated website server in Germany, separate from publicly served files. Access is intended for the operator and authorised technical support where necessary. Hosting is supplied through Senko Digital. Information may also need to be provided to professional advisers or authorities when legally necessary.

If you email our Gmail contact, Google handles that correspondence. The website does not automatically email your submitted form or send it to a messaging bot. Email handling may involve processing outside the European Economic Area; consult Google's privacy information and contact the operator for details of the arrangements and safeguards applicable to your correspondence. Do not send sensitive information by email unnecessarily.

5. Retention and deletion

Retention depends on whether an enquiry is active, whether a stay proceeds, any outstanding issue or claim, and applicable legal record-keeping duties. Data should not be kept merely because storage is available. This system currently has no automatic expiry: removal from the administration list is a soft deletion, and private audit records and backups may remain. Contact the operator to request erasure; the request must be assessed against any continuing lawful need to retain specific information. Removing a list entry is not a complete response to an erasure request.

6. Security and cookies

HTTPS protects information in transit. Booking records require administrator authentication; no system can guarantee absolute security. The current customer booking form does not use advertising or analytics cookies. The administration area uses a necessary session cookie for signed-in staff, with a maximum session lifetime of 12 hours. No payment provider or automated marketing service is connected.

7. Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. If a future optional activity uses consent, you can withdraw that consent without affecting earlier lawful processing. We may need proportionate information to verify a rights request. Contact the address above and include your booking reference if available, not payment-card or identity-document details unless specifically needed.

You can complain to Ireland's Data Protection Commission or another competent supervisory authority. There is no profiling or solely automated decision making with legal or similarly significant effects in this enquiry system; the owner reviews bookings. Calendar validation only checks date availability.

8. Changes

This notice describes the current enquiry-only service. It must be reviewed before adding payments, analytics or new notification providers. The version acknowledged with a request is recorded; accepting a later notice will not be attributed to an earlier guest.

Further information: DPC — information you should receive and lawful processing.