Privacy Policy
The company LES MANOIRS DES PORTES DE DEAUVILLE undertakes to ensure that the processing of personal data carried out within the framework of its activity complies with the European regulation n° 2016/679, known as the General Data Protection Regulation (GDPR), as well as with the French Data Protection Act.
In this privacy policy (the " Policy "), we explain how and why we use your data, what your rights are and how to exercise them.
By accepting the Policy, you agree to our processing of your data.
What is personal data?
Personal data (" Personal Data " or " Data ") means any information relating to an identified or identifiable natural person:
- directly (name, first name, email address) or
- indirectly (IP address, geolocation).
Who is this Privacy Policy for?
This Policy applies to all of our services (the " Services ") i.e. hotel, bar and related services, via the website https://www.portesdedeauville.com (the " Site ").
It is intended to inform the Customer who uses our Services.
Who collects your Data?
The Data Controller, within the meaning of the European Data Protection Regulation, is LES MANOIRS DES PORTES DE DEAUVILLE, Sarl, represented by its manager in office.
How do we collect your Data?
LES MANOIRS DES PORTES DE DEAUVILLE collects Data online (including by e-mail), on paper or orally (during a physical appointment or by telephone) and this Policy applies regardless of the method of collection or processing.
Why do we collect your Data?
Some of your Data is necessary for the processing and provision of our Services. Failure to provide this information will prevent the proper functioning of the Services offered.
For your information, you will find below a list of categories of data collected corresponding to the purposes of our collection.
To answer your contact request:
- Categories of collected data: identity data (name, first name, postal code, city, country, ), contact data (email address, phone number), professional data (activity), free comment area.
- Category of person: users of the website.
- Legal basis: your consent obtained when sending the contact request
To offer you a subscription to our newsletter:
You can subscribe to our newsletter by email.
- Categories of Data collected: identity data (name, first name) and contact data (email address).
- Person category: users
- Legal basis: your consent obtained through your subscription to the newsletter.
You can, at any time, decide to unsubscribe from this newsletter, by clicking on the link provided for this purpose, present in each newsletter.
To process your response to a job offer or recruitment request:
- Categories of Data collected: identity data (name, surname), contact data (e-mail address, telephone number), information contained in the curriculum vitae and cover letter (free comment area).
- Category of person: website users
- Legal basis: pre-contractual measures taken at your request.
To process your reservation request:
- Categories of Data collected: identity data (last name, first name, country of residence, postal address), contact data (e-mail address, telephone number) and banking data (card number, cryptogram, holder, expiration date).
- Category of person: customers
- Legal basis: contractual measures taken at your request.
To process your request to set up a reception:
- Categories of Data collected: identity data (name, surname), contact data (e-mail address, phone number), professional data (company) and free comment area.
- Category of person: customers
- Legal basis: pre-contractual measures taken at your request.
.
To process your request for a seminar :
- Categories of Data collected: identity data (name, surname), contact data (e-mail address, telephone number), professional data (company).
- Category of person: customers
- Legal basis: pre-contractual measures taken at your request.
To carry out statistical operations of frequentation:
- Categories of Data collected: Browsing data (IP address).
- Category of person: website users
- Legal basis: your consent when you accept the deposit of statistical cookies.
When creating an account:
- Categories of Data collected: login data (password) and contact data (e-mail address).
- Category of person: website users
- Legal basis: Your consent.
To process your gift certificate request:
- Categories of Data collected: identity data (title, name, surname, address, postal code, country of residence, city), contact data (e-mail address, telephone number), free comment area and banking data (card number, cryptogram, holder, expiration date).
- Category of person: customers
- Legal basis: contractual measures taken at your request.
Are you required to provide your Personal Data?
When you make specific requests such as registering for our newsletter, the processing of your Data is mandatory. Indeed, we cannot proceed with your registration without processing your Data (email address in particular).
Please note that when you give your consent to the processing of your Personal Data, you have the right to withdraw this consent at any time via the dedicated address rgpd@buildinvest.com
How long do we keep your Data?
We keep your Data only for as long as is necessary to carry out the purposes for which it was collected, except where the law requires a different retention period.
As examples, but not an exhaustive list:
- To make a reservation request, reception or to offer a gift voucher: the data are kept for 3 months from the last contact with the customer.
- For the contact form: the data are kept for the time of the treatment of the request then immediate deletion of the data.
- For the recruitment request: the data is kept for 2 years in case of no answer or refusal. After recruitment, the data is kept for the duration of the employment contract and then destroyed 2 years after the last contact.
- For authentication: the data are kept for 1 year from the last connection.
- For statistics: the data are kept for 13 months, then, deletion or renewal of contact.
You acknowledge that the Data you provide to us and that is stored in our information systems is accurate and constitutes proof of your identity.
With whom do we share your Data?
The Data collected are shared, according to their respective needs and in accordance with the purposes mentioned above, with
- the staff of LES MANOIRS DES PORTES DE DEAUVILLE
- External reservation and delivery personnel
- External application management services staff
- staff of external hosting services for our website
- the staff of external services sending confirmation emails following orders for products/services, reservation or delivery requests.
Is your Data sent outside the European Union?
We may share some of your Data outside the European Union with service providers located outside the European Union. However, each transfer is governed by a mechanism that provides protection equivalent to that guaranteed by European Union law.
As the Site is accessible on the Internet, its content and therefore your publications may be accessible outside the European Union.
What security measures have we taken to protect you?
We undertake to implement all the technical and organizational measures necessary to respect the protection of your Personal Data.
Our contracts with our service providers include a section dedicated to data protection, in compliance with applicable laws.
What are your rights?
In accordance with the Data Protection Act and subject to compliance with the legal obligations imposed on LES MANOIRS DES PORTES DE DEAUVILLE in the context of its activity, each individual may exercise the following rights:
You can:
- Requesting a copy of your Session Content Data, Service Requests, Recruitment Requests - Right of Access
- Correcting inaccurate data about you - Right of rectification
- Request the deletion of certain Data concerning you, however this request is incompatible with the processing of your response to a job offer - Right of deletion
- To object to our processing of your Data; this request is incompatible with the processing of your product/service order or reservation request - Right to object
- Decide at any time to withdraw your consent - Right of withdrawal
- Limiting the use of your Data while your request is being processed - Right to limit processing
- Exercise your Right to Portability - if applicable
When a Data breach that may pose a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.
You may formulate directives relating to the conservation, deletion and communication of your Personal Data after your death, in accordance with article 85 of the law 78-17 of January 6, 1978.
How to exercise your rights?
These rights as well as these directives can be exercised and addressed to us by writing to
- by post to the following address Service Juridique 18, rue de Prony - 75017 PARIS;
or
- by electronic means: rgpd@buildinvest.com
In order to allow us to identify you quickly and to answer you, you will join to your request all elements allowing to establish your identity (notably customer number or request made directly via your account). An answer will be sent to you within 1 month following the reception of the request. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.
You may also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority in charge of enforcing regulations on the protection of personal data in France, by internet https://www.cnil.fr/fr/agir or by post at the following address Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.
Changes to this Privacy Policy
We may update this Policy by posting a new version on our Site. We will not lower the level of privacy of your Data substantially without informing you and obtaining your consent.
Contact
If you have a question about the Privacy Policy, contact us:
- By electronic means: rgpd@buildinvest.com
- By post: Buildinvest Legal Department 18, rue de Prony - 75017 PARIS