
The purpose of this Privacy Policy is to inform users about how their Personal Data is collected from the Site, how it is processed by the Publisher, and finally the rights available to users regarding these processing operations as defined below.
The following terms, whether used in the singular or plural in this Privacy Policy, shall have the following meaning:
In accordance with the Personal Data Regulations, the processing operations referred to in this Privacy Policy are supported by a specific legal basis.
Use of the website is necessarily governed by a contractual relationship between the user and the Publisher, serving in particular as the legal basis for the collection and processing of the user’s Personal Data for the proper functioning of the Site and the provision of the associated services.
The processing of Personal Data may also be necessary to comply with a legal obligation to which the Publisher may be subject.
The processing of the user’s Personal Data may finally be necessary for the purposes of the legitimate interests pursued by the Publisher or by a third party, unless the interests or fundamental rights and freedoms of the user, which require the protection of Personal Data, prevail, particularly when the user is a child.
The processing of the user’s Personal Data that is strictly necessary for fraud prevention purposes constitutes, for example, a legitimate interest of the Publisher.
In the event of processing based on the legitimate interest of the Publisher or of a third party, the Publisher ensures that the processing in question is necessary for the achievement of its legitimate interest and assesses the consequences of this processing for the user, in particular by taking into account the nature of the Personal Data processed and the way in which it is processed.
In any case, the Publisher ensures that it does not disregard the interest or fundamental rights and freedoms of the user by allowing the user, at any time, to object to all or part of the processing described in this Privacy Policy, as well as to exercise their Specific Rights, under the conditions of Article 9 below.
The user’s Personal Data is necessary to allow them to access the Site, use it and improve it, and to allow the Publisher to provide any services detailed on the Site.
The operations described below are not intended to establish profiles likely to reveal so-called sensitive Personal Data, such as racial or ethnic origins, philosophical, political, trade union or religious opinions, sexual life or health, nor are they intended to produce automated decisions by the Publisher.
The Site is hosted by the company OVH.
All precautions have been taken to store users’ Personal Data in a secure environment and to prevent it from being distorted, damaged, or accessed by unauthorized third parties. The information transmitted by the user will never be transmitted to third parties for commercial purposes, nor sold, nor exchanged.
The Publisher collects the Personal Data that the user voluntarily enters on the Site.
This Personal Data is kept by the Publisher for a period of two (2) years in the active database, from the time it is communicated through the Site.
The Personal Data concerned is then kept in Intermediate Archiving for an additional period of three (3) years in accordance with the standard limitation period.
Where applicable, the Publisher may decide to keep this Personal Data for a longer period in legal Intermediate Archiving, to comply with a legal obligation (for example Article L.123-22 of the French Commercial Code, which provides that “Accounting documents and supporting documents are kept for ten years”) or to allow it to establish proof of a right or a contract.
Only the Personal Data identified on the Site as mandatory is essential to benefit from the services provided by the Site.
The user’s Personal Data is communicated to the Publisher’s subcontractors, namely:
If applicable:
Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Mandrill, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA.
TextMagic, TEXTMAGIC LTD, Salisbury House Station Road, Cambridge CB1 2LA, United Kingdom, VAT Reg No: GB851556810, Company No: 05286521.
Stuart, SRT GROUP, 8 avenue des Ternes, 75017 Paris.
TacTill, 8 Bis Chemin de la Justice, 91940 Gometz-le-Châtel.
Fülle, SARL FULLE, 85 Impasse Leydier, 38850 Saint-Chef.
Snapshift, SNAPSHIFT SAS, 21 Rue La Boétie, 75008 Paris.
The Publisher regularly ensures that these recipients comply with the Personal Data Regulations. The Publisher undertakes not to disclose, transfer or transmit the user’s Personal Data without their prior consent and not to use it for reasons not provided for in this Privacy Policy.
In accordance with the Personal Data Regulations, the user has the Specific Rights listed below:
These Specific Rights may be exercised by the user by sending an email to info@chateaurepotel.com.
The user also has the right to provide general or specific instructions regarding the fate of their Personal Data after their death.
The Publisher implements all necessary technical and organizational measures to protect users’ Personal Data against unauthorized access, alteration, disclosure or destruction.
These measures include, in particular, data encryption, restricted access management, and the archiving of Personal Data under high-security conditions.
The Publisher reserves the right to modify this Privacy Policy in order to adapt it to legislative and regulatory developments, as well as to changes related to the processing of Personal Data carried out. Users are advised to consult this Privacy Policy regularly in order to be informed of any changes.