In the context of the use of its services and in particular the services accessible on its website, its mobile site, its online shop and its mobile applications, HOTEL RIVAGE & SPA ANNECY, in its capacity as data controller, is likely to collect and process personal data concerning you.
We are committed to respecting the rules for protecting the privacy of prospects and visitors to our sites: website, mobile site, online shop and mobile applications. All processing of personal data implemented within the framework of the accessible services complies with the local regulations applicable to the protection of personal data and in particular with the provisions of the amended "Data Protection Act" of 6 January 1978 and the General Data Protection Regulation (EU Regulation 2016/679) or "RGPD".
1 - WHAT ARE OUR COMMITMENTS REGARDING THE PROTECTION OF PERSONAL DATA?
HOTEL RIVAGE & SPA ANNECY undertakes to guarantee a high level of protection for the personal data of its customers, prospective customers, users of its websites: website, mobile site, online shop and mobile applications and any other person whose personal data it processes.
HOTEL RIVAGE & SPA ANNECY undertakes to comply with the regulations applicable to all processing of personal data that it implements:
- Your personal data are processed in a lawful, fair and transparent manner;
- Your personal data is collected for specified, explicit and legitimate purposes and is not further processed in a way that is incompatible with those purposes;
- Your personal data are kept adequate, relevant and limited to what is necessary for the purposes for which they are processed;
- Your personal data is accurate, kept up to date and all reasonable steps are taken to ensure that inaccurate data, having regard to the purposes for which it is processed, is erased or rectified without delay.
HOTEL RIVAGE & SPA ANNECY implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and data of the persons concerned from the outset of the processing operations.
Furthermore, HOTEL RIVAGE & SPA ANNECY contractually imposes the same level of personal data protection on its subcontractors (service providers, suppliers, etc.).
2 - WHAT PERSONAL DATA DO WE COLLECT?
A - Depending on the purpose of the collection
The personal data we collect varies depending on the purpose of the collection and the Service we are providing to you.
Generally, we may collect the following categories of personal data directly:
a) personal details, such as your surname, first name, e-mail address, postal address and telephone number(s);
b) the login details used to access your online account, i.e. username and password. This is necessary for us to create a personal user account;
c) exchanges with us, which may include details of conversations via chat, customer service ;
d) demographic information, such as your age, gender and lifestyle preferences (including your favourite products and your interest in them);
e) browsing history, such as the pages visited, the date of the visit, the location of the visit, or the IP address;
f) payment information when a purchase or reservation is made on one of our websites, online shops, or applications. Typically the invoice is issued in your name, billing address and payment details such as credit card or bank account;
We may also collect personal data about you indirectly when you share content on social networks, websites, shops or applications relating to our products and services, or respond to our social network posts and promotions.
B - Personal data concerning minors
HOTEL RIVAGE & SPA ANNECY does not collect or process personal data relating to children under the age of 18 without the prior consent of the child's parents or guardians.
If personal data about children is collected via our website, mobile site, online shop and mobile applications, parents or guardians have the possibility to object to this by contacting us at the address indicated at the bottom of this page.
3 - HOW IS PERSONAL DATA COLLECTED?
A - Means of collecting your data
In the context of our relationship, you may communicate your personal data to us by various means and in particular on our websites: website, mobile site, online shop and mobile applications when you browse the Internet, make purchases, make reservations, fill in the various collection forms, subscribe to the e-newsletter, create an account, submit an application, post comments on our social networking pages, make any contact with our establishment or otherwise transmit your personal data to us.
B - IP address
C - Cookies
In order to constantly improve the quality of the services offered on our sites: website, mobile site, online shop and mobile application and to ensure that they meet your expectations, HOTEL RIVAGE & SPA ANNECY may use "cookies", text files used to identify your terminal when you connect to one of our services. The deposit of a cookie or tracer in your terminal (computer, tablet, smartphone, etc.) enables HOTEL RIVAGE & SPA ANNECY to collect information and personal data, depending on your choice of terminal settings.
Types of cookies used :
b) Site performance cookies. Performance cookies allow us to optimise our website and to detect any technical problems you may encounter. They allow us to collect information about how you use the site, such as the number of visits per page, the number of error messages displayed, the time spent on a page, or the number of clicks on an area of the site. The information collected is not used for commercial purposes.
c) Feature cookies. These cookies allow the site to remember the choices you have made (such as your username, language choice, or region) and provide more accurate and personal features. These cookies can also be used to remember changes made by the user, such as text size or font. They may also be used to provide services that you have requested, such as watching a video or leaving a comment on a blog. The information collected by these cookies can be anonymised and cannot track your browsing activity on other sites. By using our website, you agree to receive such cookies on your device.
d) Advertising marketing cookies. These cookies collect information about your web browsing habits in order to serve you ads that are tailored to you and your interests. They also help limit the number of times you see an advertisement and help us measure the effectiveness of our advertising campaigns. They are usually installed by advertising networks with the permission of the website operator. They remember visits to a site and share this information with other companies (such as advertisers). Targeted or advertising cookies are often linked to the site features provided by the partner company. The information is collected and shared with third parties to provide audience targeting and optimisation solutions for advertisers and publishers. No personal data is collected and no individual can be identified through the data collected.
e) Cookies from third party websites and social networks Our website contains links and/or content to other websites and social networks, and we do not know which cookies are used by them. To find out more, please see the information provided by these third party sites and social networks about their own cookies.
D - Respecting your privacy
We are committed to protecting your privacy and respect the following 2 principles.
- We do not associate any information with your cookies that can directly and personally identify you. Cookies do not allow us to know your address, date of birth, telephone number or any other information that could identify you.
- We do not provide any personal information to advertisers or third party sites that display our ads based on your interests.
If your computer or mobile phone is used by more than one person, or if it has more than one browser, it is possible that the content displayed to other users will match your preferences. If you wish, you can change your browser settings.
For more information on how cookies and targeted advertising work, you can visit the CNIL website: https: //www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
E - Links to third party sites
Our websites: website, mobile site, online shop and mobile applications may contain links to third party websites.
We are not responsible for the collection, use, management, sharing or disclosure of data and information by these third parties.
4 - WHAT IS THE PURPOSE OF THE DATA THAT MAY BE COLLECTED?
Your data is mainly used for booking and purchasing purposes (supply of services, specific services and products), canvassing, loyalty, animation, commercial information, satisfaction surveys, organisation of competitions, new services and products intended to improve your customer experience within our establishment, statistical studies, recruitment, after-sales service, processing your requests and/or complaints. In addition to cases where your consent has been obtained (in particular to send you personalised offers), the processing of your data for the various purposes mentioned above is necessary:
- To ensure the performance of the service contract ;
- To comply with a legal obligation ;
- For the purposes of the legitimate interests pursued by our institution (in particular to develop new services and offers, improve customer service, etc.).
In particular, your data is used:
- To enable you to benefit from all the services available on the website of our establishment, its mobile site, its shop and its mobile applications: creation of a user account, e-newsletter, reservation management, assistance and complaints, management of loyalty programmes, etc. ;
- To enable you to browse our websites;
- To best match our information, notifications, offers and other services to your interests;
- To facilitate the completion of administrative formalities relating to the reservation and purchase.
5 - HOW LONG WILL YOUR DATA BE KEPT?
HOTEL RIVAGE & SPA ANNECY undertakes to keep your personal data for no longer than is necessary for the purposes for which they are processed.
The retention periods are defined according to the purposes of the processing carried out by HOTEL RIVAGE & SPA ANNECY and take into account, in particular, the applicable legal provisions imposing a specific retention period for certain categories of data, any applicable limitation periods and the recommendations of the CNIL concerning certain categories of data processing.
6 - WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?
A - Recipients of your data
The data collected on our website, mobile site, online shop and mobile applications may be communicated to our internal staff or to its ancillary service providers (subcontractors, service providers, banks) in order to carry out all or part of the services referred to above. We remind you that in this context, HOTEL RIVAGE & SPA ANNECY requires its service providers to implement strict confidentiality and data protection measures.
B - Data transfers outside the European Union
Personal data may be processed outside the European Economic Area (EEA). If this is the case, HOTEL RIVAGE & SPA ANNECY will make every effort to ensure that this international transfer of data has an adequate level of security and guarantees.
7 - HOW TO EXERCISE YOUR RIGHTS?
In accordance with the applicable regulations on the protection of personal data, you may, at any time, exercise your rights of access, rectification, deletion of data concerning you as well as your rights to limit and oppose the processing and portability of your personal data.
In addition, you have the legal right to define directives concerning the fate of your personal data after death.
Furthermore, any person who was a minor at the time of the collection of his or her personal data may obtain its deletion as soon as possible.
These rights can be exercised by mail to the following address:
HOTEL RIVAGE & SPA ANNECY
33 Avenue du Petit Port
74 940 ANNECY-LE-VIEUX
In this context, we kindly ask you to accompany your request with the elements necessary for your identification (surname, first name, e-mail) as well as any other information necessary to confirm your identity. You also have the right to appeal to the Commission Nationale de l'Informatique et des Libertés in the event of a breach of the regulations applicable to the protection of Personal Data and in particular the RGPD.
8 - COMPUTER SECURITY / SECURING TRANSACTIONS
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for HOTEL RIVAGE & SPA ANNECY. We therefore implement all technical and organisational measures that are useful, in view of the nature, scope and context of the personal data you provide and the risks presented by their processing, to preserve the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorised access to such data.
We offer a secure online payment system using the latest technology.
HOTEL RIVAGE & SPA ANNECY strives to combat identity theft on the Internet. This is why we use, for example, a device to detect fraudulent payments made by bank card. This device is designed to protect you in the event of loss or theft of your bank card.
The security and confidentiality of personal data depend on the good practices of each individual. This is why we invite you not to communicate your passwords to third parties, to systematically disconnect from your profile and your social account (especially in the case of linked accounts) and to close your browser window at the end of your work session, especially if you access the Internet from a computer shared with other people. This will prevent other users from accessing your personal information.
9 - CONTACT US
If you have any further questions about this policy or about how HOTEL RIVAGE & SPA ANNECY handles your personal data, please contact us at: email@example.com
10 - AMENDMENTS TO THE DECLARATION