1. Who this notice covers
This notice explains how Grand Hotel D’Europe handles information connected with this website, enquiries and hotel services. Hotel Management at the address below is the contact for information handled for hotel purposes. Hosting, email, AI, weather, map and other providers may also process information under their own terms.
Hotel Management — Privacy, Grievance & Security Contact
Grand Hotel D’Europe, 28, Rue Suffren, White Town, Puducherry 605001, India
enquiry@granddeeurope.com · +91 7969219999 · Phone WhatsApp · +91 7969219999 ↗ 0413 2269999 · Landline
The applicable law depends on the activity, location and legal commencement date. Indian privacy and information-technology requirements apply where in force. EU GDPR, UK GDPR and other overseas rights apply only where their territorial and other legal tests are met; visiting an Indian hotel’s website does not by itself make every international law applicable.
2. Information and purposes
| Context | Information involved | Purpose |
|---|---|---|
| Website enquiries | Name, email, travel or event dates, room preference, guest count and information you choose to enter. | Prepare an enquiry; if sent, answer questions and discuss arrangements. |
| Reservation and stay | Contact, reservation, billing and legally required guest-identification information supplied directly to the hotel. | Provide hospitality services, maintain necessary records and meet legal obligations. |
| AI FAQ | Your submitted question and ordinary request metadata needed to deliver and secure the service. | Answer hotel questions using the published hotel knowledge. |
| Website delivery and security | Network address, request time, device/browser information and access or error records processed by the platform. | Deliver pages, detect abuse, investigate faults and protect services. |
| At the property | Information provided for a stay, a dietary/access request, or captured by security CCTV where signposted. | Provide the requested service and protect people and property, subject to the applicable notice and law. |
Provide only what is necessary. Do not submit payment-card details, passwords, OTPs, passport or Aadhaar copies, or medical records through the FAQ or general enquiry fields. Ask the hotel for an appropriate channel if identification or sensitive information is required. The website does not request device geolocation for weather; it uses fixed Puducherry coordinates.
The Best Deal business and group enquiry form prepares your enquiry type, name or organisation, travel dates, guest count and optional notes in a WhatsApp message. You choose whether to send it. The website does not store these form entries; WhatsApp and the hotel handle messages you send under their applicable policies. Please avoid sensitive personal information in notes.
3. Enquiry forms and email
The current reservation, contact and celebration forms prepare an email on your device. Preparing or copying a message does not send it to the hotel or create a booking. When you choose to send it through your email application, your email provider and the hotel’s email systems process it. The site does not use these forms to take payment or check live room inventory.
Hotel correspondence may be used to respond to you, arrange services, keep necessary records and resolve concerns. Sending an enquiry is not consent to unrelated promotional marketing. Where marketing consent is required, it must be obtained separately and may be withdrawn.
4. AI FAQ and service providers
Submitting an FAQ question sends it to the website’s server and to OpenAI with relevant hotel information to generate an answer. Use of the AI guide is optional; you may browse the published FAQs or contact the hotel instead. The website does not maintain a persistent visitor chat-history database. The API request is configured with response storage disabled; this does not mean all provider security or abuse-monitoring records are disabled.
OpenAI’s applicable business/API terms and data controls govern its processing. Hosting and delivery use the ChatGPT Sites platform and its infrastructure. Map links open Google Maps only when selected. The weather panel contacts Open-Meteo; Google Fonts currently supplies the website fonts. These services receive network and browser information needed for their requests and may process it outside India.
5. Browser storage and cookies
The weather component uses session storage under grand-europe-weather to cache a weather report, not guest identity or reservation information. It can remain for the page session and can be removed using your browser’s site-data controls. The authored hotel pages do not add advertising pixels or audience-analytics cookies. The hosting or linked service providers may use essential delivery, authentication or security technologies under their own notices.
There is no blanket marketing consent from browsing this website. If optional tracking is introduced, the relevant notice and consent choices must be provided before it operates where required.
6. Processing grounds and sharing
Depending on the applicable law and purpose, processing may be necessary to respond to a request or take steps toward a booking, perform a confirmed service, meet legal requirements, or protect legitimate security and operational interests, subject to safeguards. Consent is used where the law requires it, including relevant optional or sensitive-data processing. Where processing relies on consent, you can withdraw it through the contact below; this does not invalidate lawful past processing.
Information may be shared with personnel who need it, service providers for the described purposes, your authorised representatives, or authorities where legally required. Only necessary information should be disclosed. Guest information must not be used for unrelated purposes without an appropriate legal ground.
7. Retention and international processing
Retention is determined by the purpose, whether an enquiry remains active, any confirmed stay or event, tax and accounting requirements, guest-registration duties, security needs and legal claims or preservation orders. Information should not be kept indefinitely merely because it was collected. Ask Hotel Management for the retention criteria applicable to a particular record or request deletion where permitted.
Service providers can operate internationally. This notice does not promise India-only storage for all information. Where cross-border restrictions apply, the responsible parties must satisfy them, including any required contractual or other lawful transfer mechanism. Localisation requirements for particular records, such as applicable CERT-In security logs, are separate obligations.
8. Cybersecurity and incident reporting
The website is delivered over HTTPS. The AI credential is held on the server, and the FAQ endpoint applies question-size checks and request-rate limits. These measures do not make a system risk-free. Security reports should be sent to Hotel Management with a description and relevant time or page; do not include passwords, payment credentials or unnecessary guest data.
Where the CERT-In directions apply, covered reportable incidents must be reported within six hours of noticing them or being informed of them, and covered ICT logs must be securely retained for a rolling 180 days within Indian jurisdiction. These duties concern the responsible operators and systems; this notice is not a certification that every hotel or provider system has been audited. Other breach notices follow the applicable law and its commencement provisions.
9. Privacy requests and complaints
Contact us to request information about your data, correction, access, or deletion, to withdraw consent, or to raise a privacy grievance. We may verify identity using proportionate information. Legal record-keeping or other lawful exceptions may limit a request; where they do, we will explain the basis. Responses follow the applicable statutory period, with any lawful extensions or exceptions.
Indian DPDP rights and complaint procedures apply when the relevant provisions commence. Where EU or UK GDPR applies, rights may also include restriction, objection, portability and a complaint to the competent supervisory authority. Where relevant Indian grievance rules require resolution within one month, that period applies; a shorter applicable statutory deadline takes precedence.
Hotel Management — Privacy, Grievance & Security Contact
Grand Hotel D’Europe, 28, Rue Suffren, White Town, Puducherry 605001, India
enquiry@granddeeurope.com · +91 7969219999 · Phone WhatsApp · +91 7969219999 ↗ 0413 2269999 · Landline
Use the subject “Privacy request”, “Grievance” or “Security report” to help route your message. Hotel Management is the current contact channel; no named statutory grievance officer or data-protection officer is represented as having been appointed by this website.
10. Children and special requests
Booking enquiries should be made by an adult with authority to act for the travelling party. Do not let children submit personal information through the AI guide. Where information about a child or a special dietary or accessibility need is necessary, provide only the minimum through the hotel’s appropriate channel. Any required parental verification or consent must be handled before the relevant processing; this website does not perform age or parental-consent verification.
11. Legal framework and changes
The DPDP Act, 2023 and Rules, 2025 have phased commencement. Under the notified schedule, most substantive processing duties and individual-rights provisions commence eighteen months after the November 2025 Gazette publication. This notice does not treat those future provisions as already enforceable on its review date. Applicable IT Act provisions, the 2011 sensitive-personal-data rules, consumer law and CERT-In requirements continue to matter according to their legal scope and transition arrangements.
Material changes will be reflected in an updated notice and date. New consent will be sought where a change requires it. Rights that cannot lawfully be excluded remain unaffected.