We attach great importance to the confidentiality and protection of the personal data we process.
As the party responsible for processing your personal data, we do everything in our power to protect your privacy and the information you provide to us, in particular when you visit our website, book a room or accommodation, purchase a gift voucher or subscribe to our newsletters.
By reading this document, you will know in particular how we collect your personal data, what type of information is collected and for what purpose it is used, with whom we share this data and what measures are taken to protect it.
By using this site and/or our products and services, you consent to the processing of your personal data as described in this privacy policy.
We may change our Privacy Policy from time to time. Any changes will take effect immediately upon posting on our site. Consequently, we invite you to refer to it each time you visit our site in order to be aware of the latest version available.
I – Why do we collect personal data?
We collect and use your personal data in order to improve and develop our products and services, to provide you with optimal customer service during your stay at SPA VENTOUX PROVENCE and the use of our services, and to facilitate your navigation on our website.
We collect your personal data for legitimate reasons and with your consent.
We use your personal data for the following purposes:
1. As a result of the conclusion of a contract or the performance of contractual obligations
We collect your personal data in order to identify you, provide you with a service or make and manage your reservations.
The collection of your personal data enables us to provide you with information about your reservation, invoicing and customer relations. This data may also be used before your stay in order to send you information about your stay at the Hotel. Once you have left the hotel, we may also send you information about your stay, as well as satisfaction surveys to provide you with feedback about your experience at SPA VENTOUX PROVENCE.
2. Because of our legitimate interest in collecting your personal data
In order to communicate with you and answer your questions.
We use personal data to monitor the activity of our users’ accounts and to ensure the security of our customers.
Such processing is justified by our legitimate interest in ensuring the security of our products and services.
3. With your consent
Subject to your prior consent, we may use your personal data, and mainly information relating to your stay, in order to individualize your booking experience on our site, personalize our offers and make recommendations to you concerning our services offered by third-party sites and applications that may be of interest to you.
We use personal data to facilitate our advertising and marketing campaigns and to provide you with information about services that we think may be of interest to you.
If you have given us your consent, we may send you promotional messages, marketing offers, advertisements and other information that may be of interest to you based on your holiday preferences. This includes possible competitions and other promotional activities. You may ask us not to send you promotional material or information at any time.
4. To meet legal obligations
We process your personal data in order to fulfill our legal obligations.
We reserve the right to anonymize the personal data collected and to use this data.
We save your billing information and other information collected about you for as long as necessary for accounting purposes or in compliance with other legal obligations to which we are bound.
We may process your personal data for purposes other than those mentioned here, but only if they are compatible with the original purpose for which the data was collected. To do so, we will ensure that:
– The link between the purposes, the context and the nature of the personal data are suitable for further processing;
– Further processing does not harm your interests and;
– There is an appropriate safeguard for the processing carried out.
II – What type of data do we collect and how do we collect it?
The term “data” refers to any personal information that allows you to be identified as an individual and that you provide in the course of your interactions with us.
We may, on various occasions, collect information about you, namely :
1. The data you provide
We collect the socio-professional data concerning you that you may provide to us, such as your surname, first name, e-mail address, home and work addresses, telephone number, nationality, date of birth and preferences during your stay, which you provide to us when you book a room via our reservation system or directly at the hotel, purchase and/or use one of our products or services, or during the various interactions you may have with our services, in particular when you register on our site or subscribe to our e-newsletter, when you contact us, when you participate in one of our loyalty programs, in an online survey, in promotional operations, when you submit an application or any other function on our site.
We also collect the identifiers used to access your online account, i.e. username and password. This is necessary for us to create a personal user account.
In addition, on the occasion of any booking, we (or our financial providers) collect personal data related to that booking as necessary to process your request. The information collected includes payment details, in particular your credit/debit card number.
2. Data we collect automatically
When you browse our website, we collect data relating to the follow-up of the commercial relationship with you: type of stay booked, type of room booked, special requests made to the Hotel in anticipation of your stay, product and/or service purchased in addition to the booking, quantity, amount, frequency, as well as any other relevant information about your stay at the Hotel, the history of your bookings and the services you have requested, correspondence and/or telephone exchanges with our teams, etc.
3. Information from our partners
We collect information from our trusted partners subject to confirmation that they have legitimate grounds for sharing the information with us. This is either information that you have provided to them directly or that they have collected about you for other valid legal reasons.
This is, for example, the case when you book your stay at the Hotel via a travel agency.
4. Public information
We may collect information about you that is publicly available.
We voluntarily do not collect sensitive information, such as racial or ethnic origins, political opinions, religious or philosophical beliefs or health details.
III – How long do we keep data?
We will only retain your personal data for as long as is necessary for the purposes set out in this Privacy Policy or as required by applicable law.
Retention periods are defined according to the purposes of the processing carried out by SPA VENTOUX PROVENCE and take particular account of applicable legal provisions imposing a specific retention period for certain categories of data, any applicable limitation periods and CNIL recommendations concerning certain categories of data processing.
However, at the end of the above-mentioned periods, and from the date of your request for deletion, your personal data may be archived intermediately in order to meet our legal, accounting and tax obligations and/or any limitation periods attached to our relationship.
IV – Where is your personal data stored?
We may use the services of various third-party service providers to assist us in providing services related to our website. Our service providers may be located inside or outside the European Economic Area (“EEA”). Where applicable, transfers of your personal data will be made in accordance with the applicable laws.
Our service providers have limited access to your personal data in order to carry out the tasks they perform on our behalf, and are contractually bound to protect and use it only for the purposes for which it was provided and in accordance with this Privacy Policy. Before sharing your personal data with third parties, we have put in place the necessary measures to ensure that there is a sufficient level of data protection with these third parties.
V – With whom do we share personal data?
We undertake not to sell or pass on your details to third parties for their own commercial activities.
We may also temporarily and securely transfer to third parties certain personal data that is necessary for the operation, animation and maintenance of our website, in particular to ensure the sending of emails that you have chosen to receive, and/or the performance of tasks necessary for the execution of services, your reservation, to ensure the provision of services.
If you do not want us to share your personal information with these companies, please contact us at the following address ” SPA VENTOUX PROVENCE Route de beaumont 84340 Malaucène ” or by e-mail : contact@spa-ventoux-provence.com
We may also be required to disclose personal information when required to do so in connection with a judicial proceeding, court order, subpoena, warrant or legal process, or when required by law, to protect human life; to maintain the safety of our products; and to protect our rights and our customers, as well as in connection with a compelling investigation and strictly to the extent required by applicable law.
VI – How do we protect your personal data?
We take appropriate technical and organizational measures, in accordance with applicable legal provisions, to protect your personal data against unlawful or accidental destruction, loss or alteration, or unauthorized disclosure or access.
We are constantly adapting our security measures to keep abreast of technological advances and developments. To make card payments as secure as possible, all data is transmitted in encrypted form. This means that your data is transmitted via a secure connection and that external parties cannot read your personal data. For card reservations and purchases, we work with PCP-compliant payment service providers, who help us to verify directly with your bank that the card allows you to make purchases, in compliance with data protection standards. Our payment service providers process your card data in accordance with the PCI DSS international security standards developed by the VISA and MasterCard credit card companies. This means that your card data is processed with a very high level of security. When you pay by card, we reserve the right to carry out an identity check.
You can also help keep your data secure by taking the following security measures:
– Change your password regularly, using a combination of letters and numbers;
– Make sure you use a secure Internet browser.
VII – What about cookies and other technologies?
A “cookie” is a text file that may be stored, subject to your choices, in a dedicated space on your terminal’s hard disk when you consult the site. A cookie file enables its issuer to identify the terminal in which it is stored for the duration of the cookie’s validity or storage, and must therefore be considered as personal data.
We (and third-party service providers acting on our behalf) use cookies and similar technologies to process your personal data when you visit our website.
This enables us to connect you, to provide you with advertising based on your preferences and interests, to fight fraud, to analyze the performance of our products and services, and to fulfill other legitimate objectives, such as knowing which pages of our site are the most visited, as well as the activity and time spent by visitors on our site. These technological tools also enable us to assess the effectiveness of our marketing and, consequently, the attractiveness of our products and services to our customers.
As with most websites of this nature, certain information is automatically recorded via a protocol. This information includes protocol addresses (IP addresses), type of browser used, Internet service provider, reference and final pages, operating system, date and time.
Cookies do not record information provided by users during online booking or customer account registration. Cookies identify your browser (rather than you) and cannot by themselves reveal your identity.
You can set your browser to block these cookies, although this may affect your ability to perform certain operations, use certain functions and access certain content on our website.
In addition to the cookies used to identify browsing history and feed statistical tools, we also use the technologies of our partners, who are subject to their own personal data protection policies. We inform you of the purpose of the Cookies we are aware of, and of the means available to you to make choices with regard to these Cookies.
How can I manage my Cookie preferences?
You can easily deactivate and/or delete Cookies from your computer, tablet or mobile device by managing your browser settings.
Below are the instructions for managing and deactivating cookies, according to the main browsers:
Internet Explorer
Click on the Tools button, then on Internet Options.
Click on Privacy, then on Advanced.
In the Cookies window, select your preferences.
Google Chrome
Click on the Menu button, then Settings.
Click on the Show advanced settings link.
In the “Privacy” section, click on the Content settings button.
Then in the “Cookies” section, select your preferences.
Mozilla Firefox
Click on the Menu button, then select Options (Windows) or Preferences (Mac).
Select Privacy.
In the History field, for the Retention rules option, select Use custom settings for history.
Check or uncheck the Accept cookies box, then select your preferences.
Safari
Click on the Safari menu, then on Preferences, Click on the Security tab.
In the Block cookies section, select your preferences.
VIII – What are your rights and, in particular, your rights of recourse?
– Right to information: This enables you to find out whether your personal data is being processed; what data is collected, where it comes from, why and by whom it is processed.
– Right of access: You have the right to access the data collected about you. This includes your right to request and obtain a copy of your collected personal data.
– Right of rectification: You have the right to request the rectification or deletion of inaccurate or incomplete personal data.
– Right of deletion: Under certain circumstances, you may request that your personal data be deleted from our archives.
– Right to restrict processing: You have the right to restrict the processing of your personal data.
– Right to object to processing: In certain cases, you have the right to object to the processing of your personal data, for example in the case of direct marketing.
– Right to object to automated processing: You have the right to object to automated processing, including profiling. You can exercise this right when the use of profiling produces legal effects that significantly affect you.
– Right to data portability: You have the right to obtain your personal data in a machine-readable format or, if feasible, by direct transfer from one processor to another.
– Right to withdraw consent: You have the right to withdraw any consent given for the processing of your personal data.
– Right to give instructions on what to do with your personal data after your death: You have the right, at any time, to give us instructions on how you wish the personal data we process about you to be managed after your death.
– Right to lodge a complaint with the supervisory authority: You may, at any time, lodge any complaint with the competent supervisory authority, i.e. the CNIL.
All requests will be processed as quickly as possible and in accordance with applicable law.
If you request the deletion or erasure of your data, we inform you that we may, if necessary, archive your data for the period permitted by the applicable legal provisions in order to comply with our legal obligations or if we consider it necessary to prevent fraud or any other type of abuse, as well as for legitimate purposes such as the analysis of non-personal data, debt collection or the respect of our/your rights in the event of a claim or appeal.
To make such requests, please contact us at the following postal address: “SPA VENTOUX PROVENCE Route de beaumont 84340 Malaucène” or by e-mail: contact@spa-ventoux-provence.com
IX – What about third-party websites and services?
Our websites, products and services may contain links or give you the opportunity to access third-party websites, products and services. We are not responsible for the privacy practices of such third parties, nor for the information or content of their products and services. This privacy statement applies solely to data collected by us through browsing and transactions relating to our products and services.
X – What about information on minors?
Our products and services are intended exclusively for adults. Therefore, we do not knowingly collect, use or disclose data from minors under the age of 16. If we learn that we have collected personal data from a minor under the age of 16, we will take the necessary steps to delete this data as soon as possible. If you learn that a minor under the age of 16 has provided us with personal data, please inform us immediately.
