Privacy Policy
Marvellora Dining Restaurant | marvelloradining.com
Last updated: 1 June 2025
1. Introduction
("we", "us", "our") operates the Marvellora Dining Restaurant located at , and publishes the website at marvelloradining.com. We are committed to protecting the privacy and personal data of every person who visits our website or contacts us through it.
This Privacy Policy explains how we collect, use, store, share and protect personal data in connection with your use of marvelloradining.com. It also explains the rights you hold under applicable data protection law and how you may exercise them.
This policy applies solely to personal data processed through this website. It does not extend to data collected by third-party websites that may be linked from our pages. We encourage you to read the privacy notices of any third-party sites you visit.
2. Data Controller
The data controller responsible for your personal data collected through this website is:
| Legal entity | |
|---|---|
| Registered address | |
| Company registration number | 812476 |
| VAT number | IE 9824763K |
| Privacy contact email | info@marvelloradining.com |
For all matters relating to this Privacy Policy or to the exercise of your data-subject rights, please contact us at the privacy email address listed above.
3. Legal Framework
We process personal data in accordance with:
- Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), as it applies in Ireland;
- the Data Protection Act 2018 (Ireland) and any subsequent amending legislation;
- the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011, as amended, in respect of cookies and electronic marketing.
4. Personal Data We Collect
We collect personal data only to the extent necessary for the purposes described in this policy. The categories of personal data we collect through this website are set out below.
4.1 Contact and Reservation Request Data
When you use our online contact or reservation request form, or when you send us an email through the address published on this website, you may provide:
- First name and surname;
- Email address;
- Telephone number (where provided);
- Date, time and party size for a requested booking;
- Any dietary requirements or preferences you choose to share with us;
- Any other information you include in the free-text message field.
Submission of a reservation request through this website does not constitute a confirmed booking. A booking is confirmed only when we respond to you by email or telephone to confirm availability and acceptance.
4.2 Device and Browsing Data
When you visit marvelloradining.com, our web server and any analytics tools we use may automatically collect:
- Internet Protocol (IP) address;
- Browser type and version;
- Operating system;
- Referring URL;
- Pages viewed and time spent on each page;
- Date and time of access;
- Device type (desktop, tablet or mobile).
Where this data is aggregated and anonymised such that no individual can be identified, it falls outside the scope of this Privacy Policy. Where it constitutes or is associated with personal data, it is processed in accordance with this policy.
4.3 Cookie and Consent Data
We use cookies and similar tracking technologies on this website. When you visit our site for the first time, we present a consent banner that records your choices regarding non-essential cookies. The data collected in this context includes:
- Your consent preferences (accepted or declined categories);
- The date and time consent was given or withdrawn;
- Your IP address and user-agent string at the time of consent, for record-keeping.
Please refer to Section 9 (Cookies) below for a full description of the cookies we use, their purposes and your choices.
4.4 Special-Category Personal Data
We do not intentionally seek to collect special-category personal data through this website. If you voluntarily include special-category personal data (for example, in a free-text field when noting requirements relevant to your dining experience), we will treat that data with the additional safeguards required under Article 9 GDPR. We will use it only to fulfil your request and will not retain it beyond the period necessary for that purpose.
4.5 Data Relating to Age
Marvellora Dining Restaurant includes a casino facility. The minimum age for entry to the casino is 18 years. This website is not directed at persons under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have inadvertently received personal data from a person under 18, we will delete it promptly.
5. Purposes and Legal Bases for Processing
The table below sets out each purpose for which we process personal data, the categories of data involved, and the legal basis we rely on under Article 6 GDPR (and, where applicable, Article 9 GDPR).
| Purpose | Categories of Personal Data | Legal Basis |
|---|---|---|
| Responding to your enquiries and messages sent via our contact form or email | Contact data, message content | Legitimate interests (Article 6(1)(f) GDPR): it is in our mutual interest to respond to communications directed to us |
| Processing and managing reservation requests submitted through the website | Contact data, reservation details, dietary requirements | Pre-contractual steps at the request of the data subject (Article 6(1)(b) GDPR) |
| Operating and improving the performance and usability of this website | Device and browsing data, cookie data | Legitimate interests (Article 6(1)(f) GDPR) for strictly necessary processing; consent (Article 6(1)(a) GDPR) for analytical and non-essential cookies |
| Recording and managing cookie and marketing consent preferences | Consent data, IP address, user-agent | Legal obligation (Article 6(1)(c) GDPR): we are required to maintain records of consent under ePrivacy law |
| Sending promotional communications about Marvellora Dining Restaurant, where you have opted in | Email address, name | Consent (Article 6(1)(a) GDPR); you may withdraw consent at any time |
| Complying with legal obligations, including responding to lawful requests from public authorities | Any data relevant to the request | Legal obligation (Article 6(1)(c) GDPR) |
| Establishing, exercising or defending legal claims | Any data relevant to the claim | Legitimate interests (Article 6(1)(f) GDPR) |
5.1 Legitimate Interests Assessment
Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your interests or fundamental rights and freedoms, taking into account the nature of the data, the relationship between us, and the reasonable expectations of website visitors. You have the right to object to processing based on legitimate interests; please see Section 11 (Your Rights) for details.
6. Recipients of Personal Data
We do not sell, rent or trade your personal data. We may share your personal data with the following categories of recipients where necessary to fulfil the purposes described in this policy:
6.1 Service Providers and Data Processors
We engage carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These include:
- Website hosting and infrastructure providers: who store and serve the files that comprise marvelloradining.com;
- Email and communication platform providers: who facilitate the delivery and receipt of email communications, including reservation request confirmations;
- Web analytics providers: who help us understand how visitors interact with our website, where consent has been obtained;
- Consent management platform providers: who enable us to record and honour your cookie preferences;
- IT support and security providers: who assist with the maintenance and security of our systems.
All third-party processors are bound by data processing agreements that require them to implement appropriate technical and organisational security measures, to process data only on our instructions, and to assist us in fulfilling our obligations under GDPR.
6.2 Professional Advisors
We may share personal data with legal advisors, accountants or insurers where necessary for the exercise or defence of legal claims or for compliance with professional obligations. Such recipients are bound by professional confidentiality obligations.
6.3 Public Authorities
We may disclose personal data to An Garda Siochana, the Revenue Commissioners, the Data Protection Commission or other competent public authorities where we are required to do so by law or in response to a lawful request, court order or regulatory requirement.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of our business, personal data held by us may be transferred to the relevant successor entity, subject to that entity honouring the commitments made in this Privacy Policy.
7. International Transfers of Personal Data
We are based in Ireland and process personal data primarily within the European Economic Area (EEA). Some of our third-party service providers may be established in, or may use servers located in, countries outside the EEA, including in countries that have not received an adequacy decision from the European Commission.
Where such transfers occur, we ensure that appropriate safeguards are in place as required by Chapter V GDPR. These safeguards may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR;
- Transfer Impact Assessments conducted to verify the adequacy of protection in the destination country;
- Supplementary technical or contractual measures where required by the outcome of a Transfer Impact Assessment.
You may request further information about the specific safeguards in place for any particular transfer by contacting us at info@marvelloradining.com.
8. Retention of Personal Data
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below provides guidance on our general retention periods.
| Category of Personal Data | Retention Period | Basis for Retention Period |
|---|---|---|
| Contact and enquiry data (where no booking results) | 12 months from the date of enquiry | Sufficient to address any follow-up queries; thereafter no legitimate purpose |
| Confirmed reservation records | 7 years from the date of the reservation | Statutory limitation period under Irish law for contractual claims; financial record-keeping obligations |
| Promotional communications consent records | For the duration of the consent plus 3 years after withdrawal | Evidence of lawful marketing; limitation period for regulatory proceedings |
| Cookie and ePrivacy consent records | 3 years from the date consent was given or last renewed | Regulatory requirement to demonstrate consent; standard consent validity period |
| Device and browsing data (web server logs) | 12 months from collection | Security monitoring and incident investigation requirements |
| Anonymised or aggregated analytics data | Indefinite, as it no longer constitutes personal data | Not applicable once data is irreversibly anonymised |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained for a longer period to comply with a legal obligation or to establish, exercise or defend a legal claim, access to that data during the extended period is restricted to those with a specific need to access it.
10. Security of Personal Data
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are calibrated to the nature, scope, context and purpose of the processing, and to the risk that processing presents to the rights and freedoms of natural persons.
Security measures in place include:
- Encryption of personal data in transit using industry-standard Transport Layer Security (TLS) protocols;
- Access controls that restrict access to personal data to staff and processors who require it to perform their duties;
- Regular review and testing of our security arrangements;
- Staff awareness and training on data protection obligations and good security practice;
- Documented procedures for responding to personal data breaches in accordance with Articles 33 and 34 GDPR.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach, as required by Article 33 GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay, as required by Article 34 GDPR.
No transmission of data over the internet or storage system can be guaranteed to be completely secure. While we take our security obligations seriously and implement proportionate measures, we cannot warrant absolute security of data transmitted to or from this website.
11. Your Data Subject Rights
Under GDPR and applicable Irish data protection law, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to exemptions or limitations in specific circumstances.
11.1 Right of Access (Article 15 GDPR)
You have the right to obtain confirmation from us as to whether we are processing personal data about you and, if so, to receive a copy of that data together with information about how and why we process it.
11.2 Right to Rectification (Article 16 GDPR)
You have the right to require us to correct personal data about you that is inaccurate, or to complete personal data that is incomplete, without undue delay.
11.3 Right to Erasure (Article 17 GDPR)
In certain circumstances, you have the right to request that we delete personal data about you. This right applies, for example, where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other legal basis for processing, or where you object to processing and there are no overriding legitimate grounds. This right does not apply where we are required to retain data to comply with a legal obligation or to establish, exercise or defend legal claims.
11.4 Right to Restriction of Processing (Article 18 GDPR)
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while you contest the accuracy of the data or while we consider your objection to processing.
11.5 Right to Data Portability (Article 20 GDPR)
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller where technically feasible.
11.6 Right to Object (Article 21 GDPR)
Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Where we process your personal data for direct marketing purposes, you have an absolute right to object at any time, and we will stop processing your data for that purpose without requiring you to provide any particular reason.
11.7 Right to Withdraw Consent (Article 7(3) GDPR)
Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You may withdraw consent for marketing emails by using the unsubscribe link in any such email or by contacting us at info@marvelloradining.com.
11.8 Rights in Relation to Automated Decision-Making (Article 22 GDPR)
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significant effects concerning you.
11.9 How to Exercise Your Rights
To exercise any of the rights described above, please contact us by email at info@marvelloradining.com or by post at:
We will respond to your request within one month of receipt. In complex cases or where we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you within the initial one-month period and explain the reason for the extension.
We may need to verify your identity before processing your request. We will not charge a fee for responding to your request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.
12. Complaints
If you have a concern about how we handle your personal data, we encourage you to contact us in the first instance so that we can address your concern promptly. Please write to us at info@marvelloradining.com.
If you are not satisfied with our response, or if you believe that we are processing your personal data in a manner that is not compliant with applicable data protection law, you have the right to lodge a complaint with the supervisory authority responsible for data protection in Ireland:
Data Protection Commission21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Website: www.dataprotection.ie
You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence or place of work if this differs from Ireland.
13. Links to Third-Party Websites
Our website may contain links to external websites operated by third parties. We have no control over those sites and are not responsible for their content or their privacy practices. We recommend that you review the privacy notice of any external site before providing personal data to it.
14. Children and Minimum Age
This website is intended for use by adults only. The minimum age for admission to the casino facility at Marvellora Dining Restaurant is 18 years. Our website is not directed at persons under the age of 18, and we do not knowingly collect personal data from minors. If you believe that a person under 18 has provided us with their personal data through this website, please notify us immediately at info@marvelloradining.com and we will take steps to delete that data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or our business operations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Your continued use of marvelloradining.com after the publication of an updated Privacy Policy constitutes your acknowledgement of the updated version. Where any change significantly affects your rights or the way in which we process your personal data, we will take reasonable steps to bring the change to your attention.
16. Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us:
| info@marvelloradining.com | |
| Post | , |
| Website | www.marvelloradining.com |