Article 1 : preamble
This privacy policy is intended to inform users of the website :
- This privacy policy aims to inform users about how their personal data is collected. Personal data is considered to be any information that allows the identification of a user. This may include: their name, age, postal or email address, location, or IP address (non-exhaustive list) ;
- On the rights they have regarding this data ;
- On the person responsible for processing the personal data collected and processed ;
- On the recipients of these personal data.
Article 2 : principles regarding the collection and processing of personal data
- Processed lawfully, fairly, and transparently in relation to the data subject ;
- Collected for specified, explicit, and legitimate purposes (see Article 3.1 herein), and not further processed in a manner that is incompatible with those purposes ;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed ;
- Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay ;
- Stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed ;
- Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
Processing shall be lawful only if, and to the extent that, at least one of the following applies :
- The data subject has given consent to the processing of their personal data for one or more specific purposes ;
- The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract ;
- The processing is necessary for compliance with a legal obligation to which the controller is subject ;
- The processing is necessary to protect the vital interests of the data subject or another natural person ;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller ;
- The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Article 3 : personal data collected and processed during website navigation
Article 3.1 : data collected
The personal data may be collected when users interact with the Relais du Gland website, particularly when they fill out contact forms, subscribe to newsletters, make reservations, or participate in surveys.
The collection and processing of this data serve the following purposes :
- Responding to user inquiries and providing the requested services ;
- Sending information, newsletters, or promotional offers, subject to the prior consent of the user ;
- Improving user experience and personalizing website content ;
- Analyzing the use of the site and services to improve their quality and relevance.
Article 3.2 : data collection method
Personal data is collected when you perform the following operations on the platform: sending a contact form, booking through Elloha platform.
They are stored by the data controller under reasonable security conditions, for a period of 12 months.
The company may retain certain personal data beyond the deadlines announced above in order to fulfill its legal or regulatory obligations.
Article 3.3 : data hosting
The website relaisdugland.com is hosted by :
OVH SAS
2 rue Kellermann
BP 80157
59053 ROUBAIX CEDEX 1
Website : https://www.ovhcloud.com/en/
Article 4 : data controller and data protection officer
Article 4.1: data controller
Personal data is collected by Adeline GRULET, a sole trader, whose SIRET number is 51501770500010.
The person responsible for processing personal data can be contacted as follows:
By mail at the address: 5 rue le Terne Jean Servais – 08380 BROGNON;
By phone, at +33(0)6 76 48 68 54;
By email: contact[at]relaisdugland.com.
Article 4.2: data protection officer
The Data Protection Officer of the company or the controller is:
Adeline GRULET, 5 rue le Terne Jean Servais – 08380 BROGNON – +33(0)6 76 48 68 54 – contact[at]relaisdugland.com.
If you believe, after contacting us, that your “Data Protection” rights are not respected, you can submit a complaint to the CNIL.
Article 5: user rights regarding data collection and processing
Any user concerned by the processing of their personal data may exercise the following rights, in accordance with the European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978) :
- Right of access, right to rectification, and right to erasure of data (respectively set out in Articles 15, 16, and 17 of the GDPR) ;
- Right to data portability (Article 20 of the GDPR) ;
- Right to restriction (Article 18 of the GDPR) and right to object to data processing (Article 21 of the GDPR) ;
- Right not to be subject to a decision based solely on automated processing ;
- Right to determine the fate of data after death ;
- Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).