We collect and use certain personal data belonging to the people who use our website. In doing so, we act as the controller of this data and are subject to Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and to French law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
We care about protecting your personal data and therefore provide this privacy policy, which contains important information about: who should use our website; what data we collect and what we do with it; your rights regarding your personal data; and how to contact us.
1) Who should use our website?
This website is designed for anyone who wishes to: get to know our hotel, accommodation and services; contact us; find out prices, availability, promotions and offers, based on the number of guests and arrival and departure dates; make a booking through our online booking system; or any other matter relevant to planning a trip.
As this website has no adult content, it may be accessed by people under 18. Children under 15 should not send us personal data without the consent of their parents or legal guardian.
2) What data do we collect and why?
a) Which personal data is expressly requested?
We collect the data that our users expressly provide: name, e-mail address, phone number, arrival date, departure date, number of adults and number of children, in order to inform our reception of your plans to stay and to answer your request. We may also request information related to the payment method chosen, such as bank card details or bank details for refunds where applicable.
b) When is this data collected?
– Booking accommodation: to be able to host you, we collect and process the data needed to perform the contract, such as your identification and payment details. They may be provided directly by you, by e-mail, phone or WhatsApp, or by third parties such as travel agencies and online travel agencies. In the latter case, these third parties may have their own privacy policies.
– Police registration form: at check-in, we collect the information required by French regulations, in particular the individual police form for foreign guests.
– Customer service, enquiries and quotes: when you contact us through our website, WhatsApp, e-mail or phone, we need your name and e-mail to handle your request.
– Activities at the hotel: when you allow a minor under your care to take part in our activities, we collect some data to run the activity, ensure their safety and contact you in case of an incident.
– Recruitment: when you apply for a position, we collect the data in your CV, which is needed to assess your application.
– Business contacts: when we keep in touch for business reasons, we store information about your identity, job title and employer, in order to support our business relationships.
c) Do we collect sensitive data?
No. No sensitive data within the meaning of Article 9 of the GDPR (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, data concerning health or sex life) will be collected.
d) Do we share personal data with third parties?
We do not sell your personal data. It may be processed by service providers acting on our instructions (website hosting, booking system, e-mail sending) under GDPR-compliant contracts. We may also disclose it to comply with a legal obligation or an order issued by a public authority. Your data is not transferred outside the European Union unless appropriate safeguards are in place.
e) How long is your personal data stored?
We keep data for as long as needed for the purposes described here: booking data for the duration of the contractual relationship, then accounting records for the legal periods; marketing data for 3 years from the last contact; unsuccessful CVs for a maximum of 2 years. Once these periods expire, data is deleted or anonymised.
3) Your rights regarding your personal data
a) What are the legal bases for processing?
We process your data: with your consent; when necessary to perform a contract (your booking); to comply with a legal obligation; or to serve our legitimate interest, which is hosting our guests safely and improving our services.
b) What are your rights?
Under the GDPR, you have the following rights: access to your data; rectification; erasure; restriction of processing; objection to processing; data portability; withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal; and the right to set guidelines on what happens to your data after your death.
c) How can you exercise your rights?
Write to us at [e-mail address]. To make sure the request comes from the person concerned, we may ask for proof of identity, only where necessary. We reply within one month.
d) What security measures apply?
We use technical and organisational measures capable of protecting personal data from unauthorised access, destruction, loss or alteration. Among the measures we adopt:
– access to the database is restricted;
– any changes to the privacy policy will be notified on the website;
– a link to this policy is displayed on every page of the website;
– we will inform you, and the CNIL where the law requires it, of any data breach likely to result in a risk to your rights and freedoms.
e) Can you lodge a complaint?
Without prejudice to any other remedy, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr.
f) Cookies
We use cookies that are necessary for the website to work and, with your consent, audience measurement tools. You can decline optional cookies at any time.
g) Changes to this policy
This version of the Privacy Policy was last updated on: [date to be completed].