Privacy policy

Reference texts: GDPR (General Data Protection Regulation) 25/05/18: regulation that governs the rules for the protection of personal data (EU Regulation 2016/679). French law on personal data protection (adaptation of the former Data Protection Act to the new European rules): law n°2018-493 of June 20, 2018 relating to the protection of personal data.

Definitions:

1.1 The Publisher: the person, physical or legal, who publishes online public communication services. 1.2 The Site: all the sites, Internet pages, and online services offered by the Publisher. 1.3 The User: the person using the Site and the services. 1.4 Personal data: “information that allows, in any form whatsoever, directly or indirectly, the identification of the individuals to whom it applies” (Article 4 of law n° 78-17 of January 6, 1978).

Who are we?:

2.1 The Publisher: SARL Hôtel du Château de Salettes Phone: +33 5 63 33 60 60 salettes@chateaudesalettes.com SIRET 40087569600017 VAT FR 51400875696 NAF code 551 A RCS 400875696 Albi Company located at the place called “Salettes, 81140 Cahuzac sur Vere – FRANCE Data Protection Officer (DPO): Catherine Le Net Email address: direction@chateaudesalettes.com Phone: +33 5 63 33 60 60 Webmaster: Lionel Martin (Wami-Infotech – contact@wami-infotech.com)

2.2 The Site: https://www.chateaudesalettes.com managed by the company SARL Hôtel du Château de Salettes represented by Catherine Le Net – direction@chateaudesalettes.com

The above-mentioned URL will be referred to as the “Site”. Its use is subject to this Policy.

Nature of personal data and collection:

In the context of using the Site, the Publisher may collect the following categories of personal data concerning its Users: When they fill out contact forms, request information, ask for a quote, etc.: Civil status, identity, identification data: name, surname Data allowing to contact the user: email When they request access, rectification, deletion, export, opposition, or limitation of the processing of personal data: Civil status, identity, identification data: name, surname Data allowing to contact the user: email, phone

Storage and protection of personal data:

4.1 Hosting of data: The Site is hosted by: Gandi SAS, whose head office is located at 63-65 boulevard Masséna – 75013 Paris. The host can be contacted at the following telephone number: +33 (0) 1 70.37.76.61. (privacy policy: https://www.gandi.net/fr/contracts/privacy-policy) The Publisher undertakes to implement all appropriate technical and organizational measures to ensure a level of security adapted to the risks of accidental, unauthorized or unlawful access, disclosure, alteration, loss, or destruction of personal data concerning Users. The Site is protected by the “https” protocol and by a tool ensuring its security and anti-spam.

4.2 Publisher’s equipment and security measures: The equipment (computer and hard drive) used by the Publisher is protected by antivirus and firewall. Access is secured by a password.

4.3 Messaging service: Email exchange is managed by the following service(s): Thunderbird: https://www.mozilla.org/fr/privacy/faq/ Outlook: https://privacy.microsoft.com/fr-fr/privacystatement Google mail: https://policies.google.com/privacy?hl=fr Orange: https://c.orange.fr/pages-juridiques/donnees-personnelles.html

Communication of personal data to third parties:

5.1 No transfer, rental, exchange, or resale to third parties: User data is not communicated to third parties (neither transferred, rented, exchanged, nor resold). However, the Publisher informs the User that they may be disclosed in application of a law, regulation, or pursuant to a decision of a competent regulatory or judicial authority.

5.2 Submission of personal data to third-party services: Personal data is not submitted to any third-party service.

5.3 Transmission of personal data to subcontractors, service providers, or other third parties: User personal data is transmitted to the Company’s subcontractors. These are bound by contractual obligations to respect the confidentiality of the Data and to exploit it only for the purposes for which it is transmitted to them, in accordance with Article 28 of the GDPR: the IT service provider the website webmaster the accounting department

Purposes of processing of collected personal data:

The personal data collected may be reused by the Publisher to: fulfill its contractual commitments and perform operations related to customer management concerning: quotes; contracts; invoices; accounting and customer account management; customer relationship management such as conducting satisfaction surveys, handling complaints, and after-sales service; manage requests for access, rectification, and opposition notify the User of changes to its legal notices or privacy policy manage unpaid bills and litigation, provided that their management does not relate to offenses and/or does not result in the exclusion of the individual from the benefit of a right, benefit, or contract. The data collected for this purpose is not used for any other purpose. Similarly, within the company, access to personal data is strictly limited to employees of the data controller authorized to process them by virtue of their duties.

Links to Third-Party Sites:

The Site may contain links to other sites or to various social media platforms managed by individuals or legal entities over which the Publisher has no control. Therefore, it cannot be held responsible for how the User’s personal data will be stored or used on the servers of these third parties. It is advisable for the User to familiarize himself with the applicable privacy policy of each third-party website he accesses via the Site in order to appreciate how his data will be used.

Data aggregation:

8.1 Aggregation with non-personal data The Publisher may publish, disclose, and use aggregated information (information relating to all its Users or specific groups or categories of Users that it combines in such a way that an individual User cannot be identified or mentioned) and non-personal information for sector and market analysis and demographic profiling purposes.

8.2 Aggregation with personal data available on User social media accounts: User personal data is not aggregated with personal data available on their social media accounts.

Collection of identity and identification data:

9.1 Free consultation: Consulting the Site does not require prior registration or identification. It can be done without the User providing any personal data (name, first name, address, etc.). The Publisher does not record any personal data for the simple consultation of the Site.

9.2 Collection of identification data: The site does not offer a “subscriber” or “client” account, nor the possibility to leave comments (informational site only).

Data collection from the terminal (user hardware):

10.1 Collection of profiling data and technical data for the purpose of service provision: Some of the technical data from the User’s device is automatically collected by the Site through cookies. This information includes, in particular, the IP address, internet service provider, hardware configuration, software configuration, browser type, and language… The collection of this data is necessary for the provision of services. They allow, among other things, the adaptation of the site to its hardware (responsive site).10.2 Collection of technical data for statistical, commercial, and advertising purposes: Technical data from the User’s device is automatically collected and recorded by the Site, solely for statistical purposes (Matomo service). This information helps the Publisher to personalize and continuously improve the user experience on the Site. It does not collect or retain any personal data (name, first name, address…) possibly attached to technical data.

Cookies:

As on the vast majority of websites, browsing on the Site may result in the installation of cookie(s) on the User’s computer. A “cookie” is a small file (less than 4 kb), stored by the Site in the browser’s memory or on the User’s hard drive, containing information about the device, language, and browsing habits of the user.11.1 Cookie retention period: In accordance with the recommendations of the CNIL, the maximum retention period for cookies is 13 months maximum after their first deposit in the User’s terminal, just like the validity period of the User’s consent to the use of these cookies. The lifespan of cookies is not extended with each visit. Therefore, the User’s consent must be renewed after this period.11.2 Purpose of cookies: Cookies can be used:

to enable the proper functioning and customization of the site based on anonymized information about browsing on the service: functional cookies (customization). These cookies do not require acceptance by the User to be used by the Site. However, the User can disable them by following the procedure indicated in paragraph 11.4;for statistical purposes, in particular, to optimize the services provided to the User, based on anonymized information about browsing on the service (pages visited, date and time of visit…), access frequency, page customization as well as operations carried out and information consulted: statistical cookies;to display relevant advertising messages or information tailored to the interests of the User and to allow sharing of content on social networks: marketing cookies;

11.3 User cookie management during browsing on the Site: “Complianz” is the tool chosen by the Publisher that allows the User to manage and customize cookies on the Site throughout his visit and at each of his visits if he wishes. When the User arrives on the Site (on any page), a “cookies” banner appears in the center of the page, preventing navigation. To access the Site, the User must choose one of the options offered by clicking on:

“Accept all cookies”, meaning accepting the installation of all cookies, without exception;”Refuse cookies”, meaning refusing the installation of cookies not necessary for browsing on the site;or “Customize”: a pop-up window opens and he can then accept or refuse the installation of each type of cookies (statistical and marketing). A link to our “Privacy Policy” is provided for the User to consult. On this page, in section 11.4 below, he can view information about cookies and the list of cookies that may be installed on the hardware during browsing on the site. After the first visit, the User’s choice (to accept or refuse cookies) is stored in his browser. If he wishes to change his choice, he simply needs to click on the “manage cookies” button located in the bottom left corner of the screen to bring up the pop-up window for customization with his previous choices.

11.4 User’s right to refuse cookies, with deactivation resulting in degraded service operation: The User acknowledges having been informed that the Publisher may use cookies. If he does not wish cookies to be used on his terminal, even necessary cookies, most browsers allow him to disable cookies through the settings options. However, the User is informed that some services may no longer function properly.For information, the user can find the procedures to follow in order to configure his browsing software to oppose the recording of “cookie” files at the following addresses: Chrome: https://support.google.com/accounts/answer/61416?hl=en Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies Opera: http://www.opera.com/help/tutorials/security/cookies/ If the user decides to disable “cookie” files using the above methods, he can continue browsing the site. However, any malfunction of the site caused by this manipulation could not be considered the responsibility of the Publisher of the site.11.5 Possible association of cookies with personal data to enable service operation: The Publisher does not associate personal data with cookies to enable service operation.11.6 Description of “Cookies” files used by the site: The site’s publisher draws the User’s attention to the fact that the following cookies are used during his browsing: _pk_id.4.4634, _pk_ses.4.4634, _pk_ref.2.2904 (expiration 1 month/6 months/session): Google Analytics 4 cookie allowing the retrieval of visitor data and their interactions cmplz_banner-status, cmplz_consented_services, cmplz_functional, cmplz_marketing, cmplz_policy_id, cmplz_preferences, cmplz_statistics (expiration 1 year): cookies from our cookie management tool

Retention period of technical data:

Technical data is kept for the strictly necessary duration to achieve the purposes mentioned above.

Retention period of personal data and anonymization:

13.1 Data retention during the contractual relationship: In accordance with Article 5 of the General Data Protection Regulation of 25/05/18 concerning computers, files and freedoms, personal data undergoing processing is not kept beyond the time necessary for the performance of the obligations defined at the conclusion of the contract or for the predefined duration of the contractual relationship (maximum 3 years). Once the period has expired, personal data is erased.13.2 Retention of anonymized data beyond the contractual relationship/account deletion: The Publisher keeps personal data for the strictly necessary duration to achieve the purposes described in this privacy policy. Beyond this duration, they will be anonymized and kept solely for statistical purposes and will not be exploited in any way.

Instructions in case of security breach detected by the Publisher:

14.1 User information in case of security breach: In the event that the Publisher becomes aware of illegal access to personal data concerning the User stored on its servers or those of its service providers, or of unauthorized access resulting in the realization of the risks identified above, it undertakes to:

Notify the User as soon as possible;Examine the causes of the incident and inform him about them;Take the necessary measures within a reasonable limit to mitigate the negative effects and damages that may result from said incident

14.2 Limitation of liability: Under no circumstances can the commitments defined in the above point regarding notification in the event of a security breach be construed as any recognition of fault or liability regarding the occurrence of the incident in question.

Transfer of personal data abroad:

The Publisher undertakes not to transfer the personal data of its Users outside the European Union.

Modification of the privacy policy:

16.1 Privacy Policy: This privacy policy can be consulted at any time at the following address: https://www.chateaudesalettes.com/politique-de-confidentialite/ The Site Publisher reserves the right to modify it to ensure compliance with the law in force. Therefore, the user is invited to regularly consult this privacy policy to stay informed of the latest changes that will be made to it. It is brought to the attention of the User that the date of the last update of this text is indicated at the top of this page.16.2 In case of modification, commitment not to substantially lower the level of confidentiality without prior information of the persons concerned The Publisher undertakes to inform the User in the event of a significant modification of the privacy policy, and not to substantially lower the level of confidentiality of the data of its users without informing them and obtaining their consent.

User’s rights regarding the collection and processing of data:

17.1 Right of access, rectification and right to erasure The User may become aware of, update, modify or request the deletion of personal data concerning him, in accordance with the following procedure: written and signed request, accompanied by a copy of the identity document with the signature of the holder of the document, specifying the address to which the response should be sent. by email: direction@chateaudesalettes.com by mail: lieu dit “Salettes, 81140 Cahuzac sur Vere – FRANCE17.2 Right to data portability The Publisher undertakes to offer the User the possibility of having all his data returned upon simple request. The User is thus guaranteed better control over his data, and retains the possibility of reusing it. This data must be provided in an open and easily reusable format. This right can be exercised by following the following procedure: written and signed request, accompanied by a copy of the identity document with the signature of the holder of the document, specifying the address to which the response should be sent. by email: direction@chateaudesalettes.com by mail: lieu dit “Salettes, 81140 Cahuzac sur Vere – FRANCE17.3 Right to restriction and objection to data processing The user has the right to request restriction or to object to the processing of his data by the Site, without the Site being able to refuse, except to demonstrate compelling legitimate grounds, which override the interests and rights and freedoms of the User. In order to request the restriction of the processing of his data or to formulate an objection to the processing of his data, the user must follow the following procedure: written and signed request, accompanied by a copy of the identity document with the signature of the holder of the document, specifying the address to which the response should be sent. by email: direction@chateaudesalettes.com by mail: lieu dit “Salettes, 81140 Cahuzac sur Vere – FRANCE17.4 Right not to be subject to a decision based solely on automated processing In accordance with the provisions of Regulation 2016/679, the User has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning him or significantly affects him in a similar way.17.5 Right to appeal to the competent supervisory authority If the data controller decides not to respond to the user’s request, and the user wishes to challenge this decision, or if he believes that one of the rights listed above is being infringed, he has the right to appeal to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent court.

A propos

CONTACTS

Informations

About

CONTACTS

Informations