Privacy Notice for Verdi Hotels
Effective Date: 26/01/2026
We would like to thank you for visiting http://www.verdihotels.com (the “Website“).
Table of Contents
Privacy assurance
We are firmly committed to protecting your privacy and we will only collect personal information about you as a visitor in line with applicable privacy laws. This Privacy Notice (“Notice”) is issued by the Corinthia Group which includes the direct and indirect subsidiaries of International Hotel Investments p.l.c. and covers information that we collect and use in the course of our business. When we mention ‘Verdi, ‘Verdi Hotels’, ‘We’, ‘Us’, or ‘Our’, we are referring to the relevant company in the Corinthia Group that processes your personal information through the collection, use, disclosure and transfer of personal information, via this Website or at our Verdibranded properties.
The Data Controller for the data collected through our website or at one of our hotels is Corinthia Hotels Limited (“CHL”), with its registered office at 1, Europa Centre, John Lopez Street, Floriana FRN 1400, Malta. The Data Controllers for the data collected and processed at one of our hotels are the individual companies belonging to our Group. Please read this Privacy Notice before using or submitting your information to us.Please read this Privacy Policy before using or submitting your information to us.
What is personal information?
- This section of the Privacy Policy explains what “personal information” is.
- Personal information is any information that can be used to identify you, such as your name, birth date, address, email address and telephone number (“Personal Information“).
- Other categories of Personal Information may include:
- Personal details: contact information (including mobile telephone numbers), national identification information or passport information, visa information, gender, information on your driving license, photographs, images;
- Reservation details: travel and reservation history, car rental packages booked, groups you are associated with when you stay at our hotels, membership information, account applications, and other information related to your reservation, stay or visit to one of our properties;
- Health information: details relating to any dietary restrictions and/or allergies, health conditions, accessibility requirements, and other information related to your health;
- Financial information: payment card details, itemised spending, billing address, billing email address, transaction history, and other payment information;
- Other information: All other information that is provided to us, on a voluntary basis, before or during your stay in one of our properties, in the form of free text through our online (thirdparty) communication channels.
Information collected
This section of the Privacy Policy explains how we collect your Personal Information.
- Active information: We actively collect information directly from our guests. Examples where we actively collect your information include when you communicate directly with us via e-mail, by filling in online forms on our website (or via third party websites) or through our Guest Services Messaging platform (where available).
- You will be requested to provide us with Personal Information during registration and check-in at one of our Hotels. As part of this process and in line with industry best practice, we use technology and scanning devices to automatically populate the necessary personal information from your national identification or passport document into our Property Management System (PMS). Kindly note that no scan or photocopy of the actual document is taken and retained during this process.
- Other examples of where we actively collect your information include: (i) when you register your interest in booking a room or other experience with us; (ii) when ordering food and drinks from one of our restaurants or outlets, and (iii) for sales enquiries and transactions.
- Passive information: In some circumstances we may process information on the basis of (i) your related interactions with us (for example, the web page from which you navigated to the Website), or (ii) Personal Information that we have received or obtained from a third party (for example, publicly available information sources). In these circumstances, your Personal Information may be said to have been passively collected (that is, gathered without you actively providing the information). We are not responsible for the privacy and data security practices and policies of third parties such as Google, Facebook, Instagram, Apple, or any social media or wireless service provider to which you may disclose Personal Information.
- Website tracking and personalisation: When you use our websites, we collect information about how you interact with them using cookies and similar technologies. This includes information such as pages visited, actions taken on the site, device and browser details, and other technical identifiers.
We use this information to analyse website usage and to personalise content and offers so that they are more relevant to you. This processing is based on our legitimate interests in improving our websites and providing a better booking experience.
- Automated Processing and profiling: We may use automated tools to analyse website interaction data and optimise the content shown to visitors. This may involve grouping or profiling users based on browsing behaviour.
This processing does not involve automated decisions that have legal or similarly significant effects on you. You may object to this processing at any time.
- Optional SafeDirect services: If you choose to purchase optional services such as SafeDirect travel assistance during the booking process, we will share the information required to provide that service with the relevant third-party provider.
This information is limited to what is necessary to deliver the service you have chosen.
- International transfers: Some of our website service providers are located outside the European Economic Area. This means that personal data collected through our websites may be transferred internationally.
Where this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and other measures designed to protect your personal data. Refer to section “Disclosure of Information” for further information.
- Website tracking and personalisation: When you use our websites, we collect information about how you interact with them using cookies and similar technologies. This includes information such as pages visited, actions taken on the site, device and browser details, and other technical identifiers.
- Like many hotels, we value your safety and security. We may therefore record or capture images of our visitors and guests in public areas and certain location-based data (e.g. data from your room keycards and other entry passes). We may also process your Personal Information by using CCTV principally for the purposes of protecting you, our visitors, other guests and our staff. Additional property-specific information (including, where applicable, CCTV system details, retention periods, access controls and local legal requirements) is provided in the Privacy Notice available at the relevant hotel/reception and, where available, on the hotel’s website.
Children’s data
- Occasionally, we may retain children’s information in our systems. The reason for processing this data is to enhance a child’s experience, such as celebrating a birthday during their stay, and this is carried out based on the processing grounds of consent. We will only process this information when provided by a parent or guardian, and the details will be stored within the parent or guardian’s profile.
Verdi DISCOVERY membership
- You can create a Verdi DISCOVERY membership with us, which gives you added benefits, such as updating personal information and preferences; summary of past/future stays in any Verdi Hotel; member discounted rates in any Verdi Hotel; special benefits and discounts in any Verdi Hotel; and earn D$ on eligible stays which can be redeemed at any Global Hotel Alliance hotel brand. If you set up a Verdi DISCOVERY membership, you will be asked to provide the following Personal Information:
- Your full name and email address;
- Your date of birth;
- Your home address and phone number;
- Your language preference for email communication;
- Your email marketing preferences.
- Your Personal Data will be used to send you newsletters and special offers.
- The Verdi loyalty program is provided by a third-party provider, Global Hotel Alliance. You can access their privacy policy here. To deactivate your account, send an email to GHA DISCOVERY Customer Care.
Purposes and use of information
- This section of the Privacy Policy explains why we process, collect and use your Personal Information.
- We may collect, process and otherwise use your Personal Information for purposes that are required by applicable law, regulation or other contracts or to allow us to fulfil our business needs and legal obligations. These purposes include:
- to administer, improve and develop the Website;
- to personalise your user experience (e.g., by tailoring the content delivered to you on our Website);
- to identify, administer and complete your bookings, reservations and registrations;
- to manage our relationship with you and (if relevant) the organisation that you represent, including providing information regarding our products and services, customer service and concierge services;
- to arrange, plan and book group events or meetings at our properties;
- to administer membership, rewards programmes, promotional offers and related offers;
- to personalise and enhance your experience with us and thus assist us in providing the services you request at any of our properties and to ensure we meet your needs while you are staying with us;
- to allow us to contact you in relation to matters that arise from your stay with us;
- to send you newsletters or marketing communications regarding our products or services and to advise you of promotions and/or other offers and/or other information that may be of interest to you;
- for advertising, marketing and promotional purposes directly through our online promotions or indirectly through our third-party social media networks;
- for analysing customer insights and trends;
- for legal disputes, regulatory investigations and compliance purposes.
- We may rely on third party service providers to help deliver our goods and services to you, including when you visit our Website or any of our properties. Sometimes we partner with other businesses to provide you with services, products and other offers (for example, car hire services and package offers). We may need to share your Personal Information with our business partners in order to provide you with those services.
Basis for processing of information
- We use your personal information on the following bases:
- Contractual agreement purposes – we use your personal information to provide services to you when you stay or otherwise engage with us, or to take steps at your request prior to entering into such an agreement;
- Legitimate business purposes – using your personal information helps us to operate and improve our business and minimise any disruption to the services that we may offer to you. We may also use your personal information to make our communications with you more relevant and personalised, and to make your experience of our services more efficient and effective;
- Basis of consent – at times we may ask for your consent to allow us to use your personal information for one or more purposes, such as to send you marketing communications;
- Protect your vital interests – in certain circumstances we may need to use your personal information where it is essential to protect life, and where we may be unable to obtain your consent. By way of example, in health emergencies;
- Legal and regulatory obligations – such uses of your personal information may include financial reporting requirements imposed by government regulators, departments and bodies, or our auditors.
- It is to be noted that the processing of special categories of personal data (health data), as described in section 1.3.3 of this Notice takes place only with your explicit consent (or voluntary disclosure), collected for the specific purposes of managing your health and safety needs during your stay (e.g. managing food allergies).Cookies
- The Website creates “cookies” when you visit it.
- A cookie is a small piece of data that a website can send to your browser for storage (i.e. so it can later be read back from that browser). The purpose of cookies includes providing more tailored communications from websites.
- Cookies may collect information (including Personal Information), such as user preferences, general usage information, membership information and unique identifiers. Cookies may in some circumstances also remain on your device after you leave the Website.
- Your browser will return the cookie information only to the domain from where the cookie originated, i.e., the Website, and no other website can request this information. When you return to the Website, the cookie is sent back to the web server, along with your new request.
- Your browser may provide settings where you can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it or reject the cookie altogether.
- The Website uses cookies to keep track of your booking cart. We also use cookies to deliver content specific to your interests. Click here for more information.
Disclosure of information
- In some circumstances, we may need to process or disclose your Personal Information in connection with the purposes listed in this Privacy Policy or as otherwise permitted by law.
- We may disclose your Personal Information:
- to Our affiliates in the Corinthia Group;
- to other entities falling under the umbrella of International Hotel Investments p.l.c.;
- to partnering entities wherein we operate their property under the Corinthia Brand;
- to our agents, consultants and sub-contractors who assist us in running our business, including our properties, reservation systems, booking systems, communication platforms and who are subject to appropriate security and confidentiality obligations;
- to our advisers and any prospective purchasers (and their advisers) should it be decided to sell off the whole or a substantial part of our business or integrate it with another business within the Corinthia Group; and
- to government authorities, law enforcement agencies and/or courts of law where we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request.
- Some of these disclosures may involve transfers of your Personal Information to a country outside of the European Union or the wider European Economic Area (EEA) (“International Transfers“). The EEA is comprised of the member states of the European Union, and Norway, Iceland and Liechtenstein.
- In some cases, International Transfers may be made to countries which do not have similar data protection laws to those of the European Union. In those circumstances, we will only disclose your Personal Information:
- where the recipient of the Personal Information is located within a country which has been assessed by the European Commission as ensuring an adequate level of protection for personal information;
- on the basis of an agreement, designed to protect your information, in the appropriate form approved for this purpose by the European Commission (or an equivalent body);
- with your explicit consent; or
- where otherwise permitted under applicable law.
- We will make sure that adequate safeguards are in place to protect your Personal Information where disclosure of your information requires an International Transfer.
Links to other websites
- This Privacy Policy applies to the Website and Personal Information that we collect when you visit our properties. Our Website has a number of links or references to other websites, other agencies, local and international organisations.
- It is important for you to note that upon linking to or visiting another website, you are no longer on our Website, and you become subject to the privacy policy (if any) of the new website. We do not control such websites and are not responsible for their data practices. This Privacy Policy does not apply to such third-party websites.
Security
- We will take appropriate technical and organisational measures to keep your personal information confidential and secure and to ensure its integrity in accordance with our internal procedures covering the storage, access and disclosure of information and consistent with applicable data protection and privacy laws.
- Please note that messages you send to us by e-mail or via any internet connection may not be secure. If you choose to send any confidential information or Personal Information to us by such means you do so at your own risk with the knowledge that a third party may intercept this information. We are not responsible for the security or integrity of such information. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Information about related persons
- If you provide us with Personal Information about members of your family, friends, dependents, or other third parties (e.g. for the purposes of making a reservation), it is your responsibility to inform them of their rights in connection with this Privacy Policy with respect to such information. You may, for example, provide such individuals with a copy of this Privacy Policy for these purposes.
Retention of information
- We intend to keep your Personal Information accurate and up to date. We will retain your data for no longer than required and permitted by European and national laws and regulations. From time to time, we may delete or anonymise your personal information if you have not stayed with us for a certain period of time.
Your rights
- If any of the Personal Information that you have provided to us changes, please Contact Us and let us know the correct details.
- Under applicable law, you have the right to:
- request a copy of the personal information about you that we hold;
- request correction or deletion of Personal Information about you that is inaccurate;
- withdraw any applicable consent for processing and transfer;
- object to our using your personal information for marketing purposes;
- object to profiling and automated decision making.
- In some circumstances, you may also have a “data portability” right to require us to transfer your personal data to you or to a new service provider.
- We will ask your consent if we intend to use your data for marketing purposes or to disclose your information to any third party for marketing purposes. Nevertheless, we do not sell Personal Information, nor do we share Personal Information with third parties for any purpose other than to carry out the activities set forth in the Policy.
- To exercise any of these rights at any time, please Contact Us.
Complaints
You may also raise complaints or concerns about our use or other processing of your Personal Information with the body regulating data protection in your country. In Malta, this is the Information and Data Protection Commissioner (details are available at https://idpc.gov.mt/en/Pages/Home.aspx).
- Changes to this Privacy Policy
- If there are any changes to this Privacy Policy, we will replace this page with an updated version. The new terms may be displayed on-screen, and you may be required to acknowledge that you have read them before you continue to use the Website.
- It is therefore important that you check the “Privacy Policy” page when you access our website so as to be aware of any changes which may occur from time to time.
- Contact us
- If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
- email: dpo@corinthia.com
- address: 22, Europa Centre, Floriana, FRN 1400, Malta
- telephone: +356 2551 4000
Last updated: 26th January 2026