1. Controller
This website, palmora.rest, is operated by Palmora Casino Resort ("Palmora", "we", "us"), the controller of the personal data described here. Privacy contact: info@palmora.rest.
Postal address: 14 Avenida Brisa de Palmas, Punta Pacífica, Ciudad de Panamá, Panamá
2. Scope
This policy covers data processed through this website and through requests you send us by e-mail or phone. Data processed at the hotel itself — such as registration at check-in or the ID check at the door of the gaming floor — is covered by separate notices available at the reception.
3. Data we process
- Technical data recorded by our hosting server: IP address, date and time, requested page, browser type and referring page.
- Consent data: a small cookie that remembers your cookie choices. Analytics or advertising cookies are used only with your consent (section 6).
- Request data: your name, e-mail or phone number, dates, number of guests and anything else you choose to tell us, such as dietary or accessibility needs.
We do not take payments on this website and never ask for card details by e-mail.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Running the website securely and preventing abuse | Technical data | Legitimate interests |
| Remembering your cookie choices | Consent cookie | Legal obligation and legitimate interests |
| Answering requests and preparing a reservation you ask for | Request data | Steps taken at your request before a contract |
| Special requests (dietary or accessibility needs) | Information you choose to share | Your explicit consent, which you can withdraw at any time |
| Measuring visits and advertising, if enabled | Cookie identifiers, technical data | Your consent, which you can withdraw at any time |
We apply Panama's Law 81 of 2019 on the protection of personal data and its regulations (Executive Decree 285 of 2021) and, for visitors from the European Union or the United Kingdom, the GDPR or UK GDPR where they apply.
5. Recipients
- Our hosting provider (website and server logs).
- Our e-mail provider (correspondence).
- Google, only if you consent to analytics or advertising cookies.
- Authorities, where disclosure is required by law.
We do not sell personal data and do not share it with gaming or betting companies.
6. Cookies
A necessary cookie stores your cookie choices. Analytics and advertising cookies load only after you accept them; you can change your choice at any time via "Cookie settings" at the bottom of each page. See our Cookie Policy.
7. Transfers abroad
Some providers, such as Google, may process data outside Panama. Such transfers rely on recognised safeguards, such as the EU–US Data Privacy Framework or Standard Contractual Clauses, and on the conditions for international transfers set by Panamanian law.
8. Retention
- Server logs: up to 30 days, longer only to investigate a security incident.
- Cookie choice: up to 6 months.
- Requests without a booking: up to 12 months after our last reply.
- Requests that lead to a booking: as long as needed for the stay and legal or accounting obligations.
9. Security
The website uses HTTPS, server access is restricted and automated protection blocks repeated intrusion attempts. Only team members who need request data can see it.
10. Your rights
You may ask for access to your data, rectification, cancellation (deletion), opposition to processing and a portable copy — the rights of access, rectification, cancellation, opposition and portability recognised by Panama's Law 81 of 2019 — as well as restriction of processing where the GDPR applies, and you may withdraw consent at any time. Write to info@palmora.rest; we reply within the time limits set by the applicable law.
You may also complain to a data protection authority — in Panama, the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI) (antai.gob.pa), or the authority in the country where you live or work.
11. Children
This website is intended for adults planning a stay. We do not knowingly collect data from children under 16. The gaming floor admits adults aged 18 and over only.
12. Automated decisions
We make no decisions about you based solely on automated processing.
13. Updates
We update this policy when our website, services or the law change; the date above shows the current version.