Privacy Policy

Last updated: June 2025

1. Controller Information

The data controller responsible for ibisstylestallinn.ee and the personal data processed through it is:

Company: Duco Styles OÜ

Registry code: 16715416

Registered address: Toompuiestee 19, 10137 Tallinn, Harju maakond

Hotel address: Toompuiestee 19, 10137 Tallinn, Estonia

Reservations phone: +372 699 4397

Reservations email: reservations.duco@accor.com

Reception phone: +372 699 6391

Reception email: HC1M7@accor.com

Publishing Director: Hotel General Manager

Duco Styles OÜ operates ibis Styles Tallinn under an Accor franchise licence. The brand owner is ACCOR SA, 110 Avenue de France, 75013 Paris, France. Capital €700,317,363. Paris Trade Registry B 602 036 444. VAT FR 93 602 036 444.

2. What Personal Data We Collect

We collect your personal data in the following categories:

• Booking data: name, email address, phone number, payment details (last four digits and expiry of payment card), stay dates and number of guests.

• Website usage data: cookies, IP address, browser type and version, device details, and site visit history (see our Cookie Policy for full details).

• Guest preferences and special requests: dietary requirements, extra beds, accessibility needs, and other preferences submitted during a stay.

• Loyalty programme data: if you are a member of ALL – Accor Live Limitless, we process programme-related information (membership number, points data) in accordance with Accor SA's privacy policy.

• Marketing consent data: your preferences regarding our newsletter and offers, together with the date and method of consent.

3. Why We Collect Data

We process your personal data on the following legal bases:

• Contract performance (GDPR Art. 6(1)(b)): to fulfil obligations arising from your booking — including room reservation, check-in, and billing.

• Legal obligation (GDPR Art. 6(1)(c)): to retain accounting records under the Estonian Accounting Act and to comply with other statutory requirements.

• Legitimate interest (GDPR Art. 6(1)(f)): to improve our services, ensure website security, prevent fraud, and produce aggregated analytics. You have the right to object to processing on this basis.

• Consent (GDPR Art. 6(1)(a)): to send marketing emails and to use non-essential cookies — only where you have given explicit consent. You may withdraw consent at any time.

4. Who We Share Data With

We share your personal data only where necessary for the following purposes:

• Accor SA group systems: the property management system (PMS), central reservation system (CRS), and the ALL loyalty programme operate on platforms managed by Accor SA. Accor SA acts as a separate data controller in that context and applies its own privacy policy. Duco Styles OÜ has entered into a data processing agreement with Accor SA (pursuant to GDPR Art. 26 and/or Art. 28 as applicable) governing personal data flows through shared systems.

• Payment processors: to the extent necessary to process transactions. Payment processors are contractually obligated to protect your data in accordance with PCI-DSS standards.

• Competent authorities: where required by law (e.g. tax authority, law enforcement).

We do not sell or transfer your personal data to third parties for commercial purposes.

5. Data Retention

• Booking and financial data: 7 years, as required by Section 12 of the Estonian Accounting Act.

• Marketing consent: until consent is withdrawn. You may withdraw consent at any time without consequence.

• Cookie data: in accordance with the retention periods set out in our Cookie Policy. Session cookies are deleted when the browser is closed; persistent cookies have a specific expiry date.

• Service logs and security data: up to 12 months, unless the data is required in connection with an ongoing investigation or dispute.

6. Your Rights

You have the following rights in relation to your personal data (GDPR Articles 15–22):

• Right of access (Art. 15): you have the right to receive confirmation of whether we process your data and to obtain a copy.

• Right to rectification (Art. 16): you have the right to request correction of inaccurate or incomplete data.

• Right to erasure (Art. 17): you have the right to request deletion of your data in certain circumstances.

• Right to restriction of processing (Art. 18): you have the right to request that processing be restricted while a dispute is being resolved.

• Right to data portability (Art. 20): you have the right to receive your data in a structured, machine-readable format.

• Right to object (Art. 21): you have the right to object to processing based on legitimate interest, including processing for direct marketing.

• Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without consequence.

To exercise your rights, contact us at: reservations.duco@accor.com. We will respond to a substantiated request within 30 days.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

• Website: www.aki.ee

• Phone: +372 627 4135

• Email: info@aki.ee

7. Contact

For any privacy-related questions or requests, please contact us:

• Email: reservations.duco@accor.com

• Post: Duco Styles OÜ, Toompuiestee 19, 10137 Tallinn, Estonia

We will respond to all privacy enquiries within 30 calendar days.