Privacy Policy

Privacy Governance, GDPR Principles & New Zealand Requirements

Dravessianluxelodge operates this gaming hotel website with a privacy-by-design approach. The website administrator is Dravessianluxelodge Limited, located at 42 Victoria Street West, Auckland 1010, New Zealand. The gaming website is intended to provide information about accommodation, gaming facilities, responsible gaming and guest services. Personal information is handled in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where the European Union or United Kingdom GDPR applies because of a visitor's location or the nature of a processing activity, we also apply the relevant GDPR requirements.

Controller and contact point

The company identified above acts as the controller or responsible organisation for personal information collected directly through this website. Privacy enquiries may be sent in writing through the privacy request form on this page or by using the contact details displayed on the website. Our general email address is info@dravessianluxelodge.com and our telephone number is +64 9 889 2746. These details are displayed as text and are not used to initiate automatic communications.

Information we may collect

Depending on how you use the casino hotel website, we may process information you voluntarily provide, such as your name, email address, telephone number, enquiry subject, message content and any preferences you choose to include. We may also process limited technical information generated by normal website use, including device type, browser type, approximate region, language, page interactions, timestamps, security events and consent preferences. We do not intentionally request special-category information through ordinary website forms and visitors should not submit unnecessary sensitive information.

Purposes and lawful bases

Information is used to respond to enquiries, provide requested casino and hotel information, maintain website security, remember privacy choices, investigate faults, meet legal obligations and improve the clarity and accessibility of our digital services. Where GDPR applies, the lawful basis may be consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation or our legitimate interest in operating a secure and useful hospitality website. We do not use consent as a condition where another lawful basis is more appropriate.

Data minimisation and accuracy

We aim to collect only information reasonably necessary for the stated purpose. Casino guest enquiries are reviewed only to the extent needed to provide a response or maintain an appropriate record. Visitors are encouraged to provide accurate information and may request correction if details are incomplete or incorrect. We periodically review form fields and internal records so that unnecessary information is not retained simply because it was once available.

Cookies and local browser storage

The website may use strictly necessary storage to remember cookie choices and to support form functionality. Optional functional or analytics technologies are used only in accordance with the Cookie Policy and applicable consent requirements. This locally packaged website does not depend on remote advertising networks, external fonts, external tracking scripts or third-party marketing pixels. The casino website's preference controls are designed so that non-essential choices can be declined without blocking access to core public information.

Recipients and service providers

Personal information may be available to authorised staff who need it for guest support, privacy administration, security or legal compliance. If specialist processors are engaged in a production deployment, they must be subject to appropriate confidentiality, security and data-processing obligations. We do not sell personal information. We do not disclose casino enquiry information to unrelated advertisers. Any disclosure required by law is limited to what is legally necessary.

International transfers

If information must be transferred outside New Zealand or the country in which it was collected, we assess the destination, the recipient and the safeguards required by applicable law. Where GDPR applies, an international transfer may rely on an adequacy decision, approved contractual safeguards, a lawful derogation or another recognised transfer mechanism. We do not represent that every possible destination is automatically adequate.

Retention

We retain personal information only for as long as reasonably needed for the purpose for which it was collected, for legitimate operational records, dispute management, security, accounting or legal requirements. Routine enquiries that do not lead to an ongoing relationship are deleted or anonymised when they are no longer needed. Retention periods may differ where a casino or hotel record is subject to a specific legal requirement.

Security

Reasonable administrative and technical measures are used to protect personal information against accidental loss, unauthorised access, misuse, alteration and disclosure. Measures may include access restrictions, secure configuration, software maintenance, staff awareness and incident-response procedures. No internet service can guarantee absolute security, so visitors should avoid placing unnecessary confidential information in free-text fields.

Your privacy rights

Depending on the law that applies, you may have rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing is based on consent. New Zealand visitors may exercise access and correction rights under the Privacy Act 2020. GDPR rights are not absolute and may be limited by legal exceptions. We may need to verify identity before acting on a request so that personal information is not disclosed to the wrong person.

Complaints

Please contact us first if you believe the casino hotel website has handled personal information incorrectly. We will review the concern and respond within a reasonable period. New Zealand individuals may also have the right to contact the Office of the Privacy Commissioner. Individuals covered by GDPR may have the right to complain to the competent supervisory authority in their country of habitual residence, work or the place of the alleged infringement.

Policy changes and archived versions

We review this Privacy Policy when our website, casino services, legal obligations or processing practices materially change. The current version displayed on this page replaces earlier public versions. A visitor who requires information about a previous version may request the relevant effective date and material changes through the privacy request form. Material changes will not be applied retroactively in a way that removes rights provided by applicable law.