The protection of your privacy and your personal data is of the utmost importance to us.<\/span><\/p>\n We particularly care about the protection and confidentiality of the personal data that we process and collect.<\/span><\/p>\n We are committed to ensuring the best level of protection for your personal data in accordance with the personal data protection regulations in force, applicable in Europe (Regulation (EU) 2016\/679 of the EU Parliament and the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (hereinafter the GDPR) and in France.<\/span><\/p>\n The purpose of this policy is to provide you with an explanation about:<\/span><\/p>\n –the personal data that we collect,<\/span> This privacy policy is designed to apply to all Users, Customers or Prospects visiting our Site http:\/\/www.purethermalresort.fr<\/a>, and\/or using our services or who have sent their contact details to us as part of events, business card exchanges, etc.<\/span><\/p>\n Our privacy policy should therefore be read carefully because it contains important information about your personal data.<\/b><\/p>\n The terms “we”, “our” and “our” designate the Pure Thermal Residence operating the Pure Thermal Residence tourist residence. <\/span><\/p>\n Site Owner and Publisher<\/span><\/p>\n HABITAT 06<\/span> Host<\/span><\/p>\n WPEngine, Inc. Irongate House,<\/span> Data Controller<\/span><\/p>\n Laurent CHADAJ<\/span> First of all, we would like to inform you that we undertake to collect only the data we need to perform the services we offer you on the Site.<\/span><\/p>\n You will be informed if the requested personal data is mandatory (identified by asterisks) or if it is optional. <\/span><\/p>\n The consequences of the failure to send data considered mandatory will be specified at the time of collection.<\/span><\/p>\n Certain data collected on the Site is strictly necessary to establish and monitor your contract (e.g.: reservation of a stay).<\/span><\/p>\n Failure to provide it will make it impossible for the person concerned to access the Services and use them.<\/span><\/p>\n We may collect personal data directly from you (for example when you make an online reservation, when you contact us, when you sign up for the Newsletter) or indirectly (for example from your electronic devices interacting with our Site).<\/span><\/p>\n 3.1 Personal data that you send us directly<\/span><\/p>\n You may need to provide us with your personal data when:<\/span><\/p>\n –you create an online account on our Site,<\/span> The information collected by us may be the following:<\/span> 3.2 The data we collect during our commercial relationship<\/span><\/p>\n In the course of our business relationship, we also collect the following information:<\/span><\/p>\n –the history of our commercial relationship, (customer number, reservation number, requests for documentation, services reserved and purchased, quantity, amount, frequency, number of children, children\u2019s date of birth, children\u2019s first names, correspondence with the customer and after-sales service;<\/span> As such, we recommend that you provide only the data requested or necessary for your request, excluding any sensitive data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, and data about your health, sex life or sexual orientation.<\/span><\/p>\n 3.3. The data we collect automatically<\/span><\/p>\n We may collect data when you use our Site, with the web server automatically recording data and information about your device and the browser it uses. (Information about the type of browser and the version used, the operating system, the internet service provider, the IP address, the date and time of access to the Site, the pages visited, etc.).<\/span><\/p>\n Some cookies and other trackers are necessary for our Site to function properly and others are used for analytical purposes that help us provide you with more personalised services and a better digital experience.<\/span><\/p>\n For more information about cookies and how to change your preferences, please read our Cookie Policy below.<\/span><\/p>\n Geolocation may also be set up on Mobile Apps with your consent. The personal data concerned will not be kept when you leave the Site. You can turn off geolocation at any time.<\/span><\/p>\n 3.4. Social networks<\/span><\/p>\n When you use a Service via a social network, you are permitting us to access certain information that you have given the social network, especially your username, your first and last name, your profile picture, and any of your data relating to the use of this Service.<\/span><\/p>\n By accessing a Service through a social network, you authorise us to collect, store and use any information that you have authorised the social network to provide us with.<\/span><\/p>\n 3.5 Data relating to minors<\/span><\/p>\n Please remember that we do not enter into commercial relations with persons under the age of 18.<\/span><\/p>\n We do not collect or store personal data about minors under the age of 18 without obtaining verifiable parental consent, in the full knowledge that those with parental authority may request to know what information we hold about their child and that they may request its deletion.<\/span><\/p>\n 3.6. Data relating to a third party<\/span><\/p>\n We may need to collect data about you from third parties, including a spouse who contacts us on your behalf or if your friends provide us with your contact details.<\/span><\/p>\n If you provide us with personal data about a third party, you must first ensure that you have the right to disclose that data to us and that, without us taking other measures required by data protection law, we may collect, use and disclose such data for the purposes described in this policy.<\/span><\/p>\n For example, you must ensure that the person in question is aware of the various details set out in this Policy.<\/span><\/p>\n 4.1. We collect and process your personal data so that we can perform our pre-contractual and contractual relations, for legitimate purposes and in accordance with the provisions of Article 6 (1) b) of the GDPR, for the purposes of:<\/span><\/p>\n –providing you with the products or services that you have reserved;<\/span> 4.2. We may also process your personal data based on our legitimate interests in accordance with the provisions of Article 6 (1) f) of the GDPR so that we can ensure the continuity of our services and especially so we can respond to requests, promote services similar to those already provided in the past, analyse Site navigation so we can improve its ergonomics, manage and develop our activities, including risk management or for any other purposes, which, while respecting the interests, fundamental rights and freedoms of the persons concerned, are lawful and are presented in the special context of their processing.<\/span><\/p>\n 4.3. Your Data is also processed so we can comply with our legal obligations, namely and particularly for accounting reasons and when we need to send it to authorities or public bodies in accordance with the legislations in force based on the provisions of Article 6 (1) c).<\/span><\/p>\n 4.4.<\/span> With your consent and in accordance with the provisions of Article 6 (1) a) of the GDPR, we may lastly process and collect your personal data to send you promotional, loyalty, satisfaction, and prospecting communications and newsletters, and so on via email, texts, phone calls etc.<\/span><\/p>\n Generally speaking, your consent is given when ticking the boxes or by activating the options designed for this purpose when you register for the Services, or even subsequently. <\/span>You may withdraw your consent at any time but this has no retroactive effect on the lawfulness of the Processing conducted on this basis, prior to said withdrawal. <\/span><\/p>\n Your personal data is kept no longer than the period necessary to complete the purposes for which it was collected, to comply with legal and regulatory obligations or to establish, exercise or defend legal rights if required.<\/span><\/p>\n So:<\/span><\/p>\n –With regard to our prospects (potential customers): your data is kept for three years from your last action, then deleted or archived so we can comply with legal retention obligations;<\/span><\/p>\n –With regard to our customers: your data is kept for the duration of our business relationship and for up to 6 years, then in principle is deleted or archived so we can comply with legal retention obligations<\/span> (with some exceptions: ongoing litigation, to meet specific requirements);<\/span><\/p>\n –With regard to the cookies used on the site: they are stored for up to 13 months from the time they were installed on your device.<\/span><\/p>\n –Your credit card information is kept for 10 days after your stay or cancellation.<\/span><\/p>\n 6.1. <\/span>Access to personal data<\/span><\/p>\n Our employees and staff may have access to some of your personal data for the purposes of carrying out their job responsibilities. <\/span><\/p>\n Access to your data is based on individual and limited access permissions. <\/span><\/p>\n Staff who can access personal data are subject to strict NDAs (through a name-based, personal non-disclosure agreement).<\/span><\/p>\n 6.2. <\/span>Data transfer<\/span><\/p>\n The following may have access to some of your data:<\/span><\/p>\n Subcontractors<\/span><\/p>\n These provide services on our behalf and according to our instructions, mainly including:<\/span><\/p>\n –Online payment services, security and fraud prevention<\/span> Our subcontractors access your data subject to signed contracts that specify their data security and privacy protection obligations.<\/span><\/p>\n These service providers undertake to respect confidentiality and are not authorised to use your personal data for any other purpose. <\/span><\/p>\n We also require them to apply the appropriate security measures to protect your personal data.<\/span><\/p>\n Police, judicial or administrative authorities<\/span><\/p>\n When we have a legal obligation to do so or in order to uphold our rights, property and safety.<\/span><\/p>\n Social media platforms<\/span><\/p>\n Using social networks to interact with our Site is likely to result in data being exchanged between our Site and the social networks indicated above.<\/span><\/p>\n Please be vigilant and check the personal data protection policies of these social networks so you have precise knowledge of what data is collected by these sites and apps as well as what your data is being used for.<\/span> The data we collect, particularly when it comes to reservations, is, in principle, not processed outside the European Union (EU), or the European Economic Area (EEA).<\/span><\/p>\n However, it is possible for the data we collect to be transferred to subcontractors or partners located in other countries, some of which may have less effective personal data protection legislation than the legislation in force in the country where you reside. <\/span><\/p>\n If there is a transfer of this type, we ensure that the processing is carried out in accordance with this privacy policy and that it is subject to the European Commission\u2019s standard contractual clauses which guarantee sufficient levels of protection individuals\u2019 privacy and fundamental rights.<\/span><\/p>\n As a data controller, we implement all the appropriate technical and organisational measures in accordance with applicable legal provisions, to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorised access.<\/span><\/p>\n All your personal data is strictly confidential.<\/span><\/p>\n We have implemented security measures to protect your personal data against unauthorised access and use. <\/span><\/p>\n We follow all the appropriate security procedures as applicable to retaining and disclosing your personal data to prevent unauthorised access by third parties and to prevent accidental loss of your data. <\/span><\/p>\n We only allow people to access your data who genuinely need access to it for business reasons. <\/span><\/p>\n The people who access your data are subject to non-disclosure obligations.<\/span><\/p>\n We also require the persons to whom we send your personal data to comply with the above.<\/span><\/p>\n You can at any time ask the Data Controller for access, rectification, removal, deletion and portability of your personal data, or to restrict its processing or oppose this. <\/span><\/p>\n Your rights are as follows:<\/span><\/p>\n –Your right of access: the right to receive a copy of your personal data. (Art.15 GDPR)<\/span><\/p>\n –Your right of rectification: the right to ask us to rectify any errors in your data or to complete it. (Art.16 GDPR)<\/span><\/p>\n –Your right to be forgotten: the right to ask us to delete your personal data, in certain situations. (Art 17 GDPR)<\/span><\/p>\n –Your right to restricted processing: the right to ask us to restrict the processing of your personal data, in certain circumstances, (Art 18 GDPR)<\/span><\/p>\n –Your right to data portability: the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format and\/or to send this data to a third party, in certain situations. (Art 20 GDPR)<\/span><\/p>\n –Your right to oppose the processing of your personal data when the processing is based on legitimate interests for reasons arising from your particular situation, except when subject to legal constraints to the contrary, or if it is needed for the purposes of executing a contract, or the information is needed for defending a legal right or if there are no risks to your fundamental rights and freedoms.<\/span> These rights are more fully explained on the French data protection authority website at<\/span> : https:\/\/www.cnil.fr<\/a>.<\/p>\n You also have the right to lodge a complaint with your local data protection authority if there’s an alleged violation of the data protection rules applicable to you.<\/span><\/p>\n
\n–why we collect it,<\/span>
\n–the way we use it,<\/span>
\n–as well as your rights in this regard.<\/span><\/p>\n2.WHO ARE WE?<\/h2>\n
\nSoci\u00e9t\u00e9 Economie Mixte<\/span>
\nWith a capital of 4 785 760 \u20ac<\/span>
\nHead office : Immeuble \u00ab Le Centaure \u00bb<\/span>
\n64-66 avenue Val\u00e9ry Giscard d\u2019Estaing, 06200 NICE<\/span>
\nNICE TRADE AND COMPANIES REGISTER NO 303 469 159<\/span>
\nVAT NO : FR00 852 276 625<\/span>
\nEmail : contact@purethermal.fr<\/a>\u00a0<\/span><\/p>\n
\n22-30 Duke\u2019s Place Londres, EC3A 7LP,<\/span>
\nUK<\/span>
\nPhone<\/span> : 08 00 50 53 049<\/p>\n
\nEmail : lchadaj@habitat06.fr<\/a><\/p>\n3.WHAT DATA IS COLLECTED AND HOW?<\/h2>\n
\n–you book one of the services we offer on our Site,<\/span>
\n–you wish to contact us via our Site,<\/span>
\n–you respond to our customer satisfaction surveys,<\/span>
\n–you subscribe to our Newsletter;<\/span>
\n–you are attending one of our events.<\/span><\/p>\n
\n–your identity (including your title, first name, last name, date of birth)<\/span>
\n–the identity of your spouse, partner (including title, first name, last name, date of birth) as well as the number of children, their first names and their date of birth,<\/span>
\n–your contact details (including your postal address, email address, telephone numbers);<\/span>
\n–your username and the encrypted password used for logging onto our Site,<\/span>
\n–data about our commercial relationship (customer number, reservations, etc.)<\/span>
\n–payment data, invoicing, payment receipt.<\/span><\/p>\n
\n–your participation in events that we may run,<\/span>
\n–any requests you have sent to our customer service or any incidents that you may have reported to them,<\/span>
\n–information about services you have purchased,<\/span>
\n–any other information that you wish to bring to our attention.<\/span><\/p>\n4.WHAT IS THE PURPOSE OF DATA COLLECTION?<\/h2>\n
\n–managing your stay and your visit to our establishment (such as monitoring your use of services (telephone, bar, etc.), managing room access, etc.)<\/span>
\n–running checks to identify you and verify your identity;<\/span>
\n–carrying out customer satisfaction surveys,<\/span>
\n–responding to your questions, requests and suggestions,<\/span>
\n–managing the events you have registered for and\/or attended;<\/span>
\n–building a customer database.<\/span><\/p>\n5.HOW LONG DO WE KEEP YOUR DATA FOR?<\/h2>\n
6.WHO CAN GET ACCESS TO YOUR DATA?<\/h2>\n
\n–Developers and IT support,<\/span>
\n–Site host,<\/span>
\n-D-Edge,
\n–Chartered accountant etc.<\/span><\/p>\n
\nUsing these “social network” buttons is entirely up to you and you hold full responsibility for that.<\/span><\/p>\n7.IS YOUR DATA TRANSFERRED?<\/h2>\n
8.HOW DO WE PROTECT YOUR DATA?<\/h2>\n
9.WHAT ARE YOUR RIGHTS OVER YOUR DATA?<\/h2>\n
\nHowever, you can at any time object to the processing of your data when it is processed for prospecting purposes.<\/span><\/p>\n