Legal Notice
Legal notice – legal entity
The website www.atipikhotel.fr is published by LES PORTES DU LAC, a simplified joint-stock company (SAS)
with share capital of 10000.0 euros, whose registered office is located at 19, Rue Vaugelas, registered with the French administration in Annecy under no. 84419065200025, intra-community VAT no.: FR844190652.
The publication director is Mr RENE, 19, Rue Vaugelas, email: a.rene@atipikhotel.fr, telephone: 0450528433.
The website www.atipikhotel.fr is hosted by: OVH, registered office: 2 rue Kellermann – 59100 Roubaix.
Privacy Policy & Cookie Policy
The purpose of this privacy policy (hereinafter the “Policy”) is to set out the rules governing the various processing operations of personal data that may be carried out when you use our website, accessible at the following URL: www.atipikhotel.fr (hereinafter the “Site”)
The processing of personal data carried out via the Site falls under the responsibility of two joint data controllers.
The data controllers of your personal data are:
- The company myWebSign, which manages the website of LES PORTES DU LAC
myWebSign is registered under number FR58ZZZ878BC6 in Marseille, France. Its registered office is located at 7 rue Louis Leprince Ringuet, Résidence de l’olympe, Bat A, ET 3, 13013 Marseille.
- LES PORTES DU LAC
This company is registered with the French administration in Annecy under number 84419065200025 (hereinafter “the Establishment”). Its registered office is located at 19, Rue Vaugelas
Email of the data protection officer within the establishment: a.rene@atipikhotel.fr
myWebSign and the Establishment are hereinafter jointly referred to as the “Data Controller”. The terms “we”, “our” and “us” in this privacy policy refer to the Data Controller.
As the Data Controller of your Personal Data, we do everything in our power to protect your privacy as best we can when you visit the Site.
This Policy explains the origin and use of your Personal Data, as well as of your browsing information processed when you visit our Site.
For the purposes of this Policy, the expression “Personal Data” means any data relating to you alone that allows you to be identified directly or indirectly, regardless of the Device you use.
The term “Device” means the hardware (computer, tablet, smartphone, telephone, etc.) you use to view and browse the Site.
The term “Regulations” means the regulations relating to personal data, in particular Regulation (EU) No. 2016/679, known as the General Data Protection Regulation, French Data Protection Act No. 78-17 of 6 January 1978 (Loi Informatique et Libertés) and French Law No. 2018-493 on the protection of personal data.
By using our Site, you declare that you accept the terms of this Policy in their entirety.
If you disagree with any of these terms, you are free to stop using our Site.
This Privacy Policy is updated regularly. So that you can be properly informed of any significant change in advance, we will notify you via notifications on the services concerned or by email, as appropriate.
The Site will always display the most recent version of this privacy policy.
1. Protection of your personal data
In accordance with the Regulations, we record all processing operations carried out in a register of processing activities, which we keep available to the competent authorities.
All information you may have provided to us during your visits to the Site is strictly confidential. This information is necessary for the purposes for which it is processed.
1.1. What Personal Data is collected and processed?
The information that may be collected and processed is as follows:
– Identification and contact data: your first name, last name, gender, postal address, telephone number, email address, language and the country from which you interact with us;
– Financial and payment data: your bank details (in this respect, please note that all payment transactions are encrypted by the receiving bank or accredited storage centre and that we do not keep any bank card numbers), information about your bookings, etc.;
– Connection, geolocation (only with your consent) and browsing data; and
– Personal preferences: this includes your cookie preferences.
When we ask you to enter your personal data to access a feature, certain fields are mandatory because they contain data we need in order to give you access to that feature (for example, to record your booking we need your first and last name).
It is important that the personal information shared about you is accurate and up to date.
We do not process any personal data that could be classified as “sensitive” (information concerning racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex life) within the meaning of the Regulations on personal data.
In this respect, please note that our Site is not intended for children and that we therefore do not process any data relating to them.
We undertake not to transfer your personal data to third parties, except for the exceptions listed below in Article 1.3.
1.2. For what purposes is your Personal Data collected and processed?
The Personal Data listed above may be collected and processed for the following purposes:
- Booking management
The processing of your data is necessary to keep you informed of the status of your booking, send you a summary of your booking, accept your payment, etc.
- Access to customer service
We process your Personal Data as part of our customer service in order to respond to your requests, in particular those sent via the contact form.
- Improving our services
We process your browsing and booking data for analytical and statistical purposes. This data allows us to analyse how you use our Site and to improve its usability and quality.
- Marketing
When you subscribe to our newsletter, we process your data in order to manage your subscription and send you targeted information by email or SMS according to your preferences. We may also contact you via push notifications if you subscribe to this service.
Processing for marketing purposes requires your consent. You may therefore unsubscribe from our communications at any time.
If you have given us your consent to receive our communications, whether via our newsletter or via push notifications, we may use the information you have provided to us for the following purposes:
– Sharing information about our events, products, services and current offers;
– Recommending certain products or services that may be of interest to you; and
– Customer surveys to better understand your expectations regarding the products and services offered on our Site.
1.3. Who are the recipients of your Personal Data?
When using our Site, you may receive information from third parties with whom we work in order to offer you certain services. These may include:
– Financial institutions and accredited storage centres;
– Fraud detection and prevention entities; and
– Marketing, communication and advertising service providers.
Personal Data collected via the Site is mainly processed by the Data Controller’s internal departments.
However, we may share your information with the third parties listed above, in particular for the following reasons:
– processing payment, in the case of financial institutions and accredited storage centres;
– verifying your credit and identity, in the case of fraud detection and prevention entities; and
– optimising your experience on our Site and improving our services, in the case of marketing, communication and advertising service providers.
We require third parties receiving your personal data to undertake to comply with the Regulations on personal data. The third parties listed above may only use your personal information in accordance with our instructions and not for their own purposes.
Your connection and browsing data may also be transferred to Google Analytics.
We may also disclose your Personal Data in response to an order from the legal authorities.
1.4. How long is your Personal Data kept?
We will keep your data for a period of ten (10) years following your last booking, in order to respond to any questions or complaints, or to retain all data necessary to meet legal, accounting or analytical requirements (Article L.123-22 of the French Commercial Code).
We may also keep your data for research or statistical analysis; in that case, it will be anonymised.
As part of a newsletter subscription, we will no longer contact you if you have not opened our newsletters for more than twelve (12) months.
Any change to this Policy will be made on this page and, in the event of a substantial change, will be notified to you by email.
The Data Controller may also keep your data for research or statistical analysis. As this data is then anonymised, no retention period is imposed by the Regulations, since it is no longer possible to “re-identify” you subsequently.
1.5. Hosting of your Personal Data
Your Personal Data is hosted by Heroku Inc. The Landmark @ 1 Market St., Suite 300, San Francisco, CA, 94105, United States.
The servers on which your Personal Data is stored are located in Frankfurt, Germany.
In any event, the Data Controller has implemented appropriate technical measures to maintain the security of your Personal Data.
1.6. What are your rights?
1.6.1. Consent
Your consent must be given clearly and unambiguously. This is why, when you agree to fill in the Site’s contact form:
– you are told how your Personal Data will be used;
– you must tick a box confirming your consent; and
– children under the age of 13 cannot give their consent.
1.6.2. Other rights
In accordance with the Regulations, you have the following rights over your Personal Data:
– Right of access: this right allows you to receive a copy of the Personal Data we hold about you;
– Right to rectification: this right allows you to request the correction of inaccurate or incomplete Personal Data concerning you;
– Right to erasure of your Personal Data: this right allows you to ask us to delete your Personal Data if one of the following legal grounds applies:
- the Personal Data is no longer necessary in relation to the purposes of the processing;
- you have withdrawn the consent on which the processing is based;
- you have objected to the processing by exercising your right to object;
- the processing of your Personal Data is unlawful; or
- your Personal Data must be erased to comply with a legal obligation.
– Right to restriction of the processing of your Personal Data; processing may be restricted when:
- you contest the accuracy of your Personal Data;
- you do not object to the erasure of your Personal Data in the case of unlawful processing but request that its use be restricted instead;
- your Personal Data is no longer used by our services but its retention is necessary solely for the establishment, exercise or defence of legal claims; or
- you object to our use of your Personal Data by exercising your right to object.
– Right to data portability: you may contact us so that we provide your Personal Data, to you or directly to another data controller, in a structured, commonly used and machine-readable format;
– Right to object: you may contact us when
- the processing is carried out for the performance of a task in the public interest or for the purposes of our legitimate interests; you may object only on grounds relating to your particular situation; or
- the processing is carried out for direct marketing purposes; you may object at any time without having to give us any explanation.
– Right to determine what happens to your Personal Data after your death (digital will): one of the specific features of French regulations is that they allow you to send us instructions on how we should process your Personal Data after your death. You may therefore choose to have it deleted or passed on to one of your relatives.
Regardless of the purpose or legal basis on which we process your data, you may therefore, at any time and free of charge, send us an email to exercise your rights at the following address: a.rene@atipikhotel.fr
Or send us a letter at the following address:
19, Rue Vaugelas
Please note, however, that we may not always be able to grant your request for legal reasons, which we will inform you of, where applicable, after receiving your request.
In any event, we remind you that you have the right to lodge a complaint with the competent supervisory authority.
1.7. What are the legal bases for processing?
To process your data, we rely on legal bases that depend on how you interact with our Site.
When you purchase products from our Site, we collect and process your personal data in order to perform the contract between us. For example, we need your postal address to deliver your order or your bank details to process payment.
We also rely on other legal bases, such as legitimate interests. For example, we consider it to be in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to your order information in order to serve you better, and that we can better understand how you use our Site in order to improve its usability and the services we offer you.
Finally, where Personal Data is processed for direct marketing purposes, the legal basis for the processing is your consent (see Article 1.6.1. above).
2. Security when browsing the Internet
2.1. Integrity of your data on the Internet
The Site has appropriate security measures in place to prevent any loss, unauthorised use or access, alteration or disclosure of your Personal Data.
All personal data collected is stored on secure servers. The Data Controller has also put procedures in place to handle any personal data breach.
2.2. Malicious use
We recommend that you only connect to secure networks, preferably private ones. Be aware of the risks involved in using public Wi-Fi networks.
Independently of the Data Controller to whom you have voluntarily provided your Personal Data, and given the nature of the Internet, other operators with no connection to the Data Controller are able to capture this data without your consent, particularly while you are browsing the Internet. We therefore recommend that you install antivirus and anti-spyware software on your computer and update it regularly.
2.3. Identity theft / Phishing
The Data Controller will never contact you by email to request personal information.
If you receive an email in the name of the Data Controller asking you to provide sensitive personal information (bank details, information relating to your private life, etc.), please do not reply and forward the email to us so that we can take the necessary action.
You should only provide information relating to your account after logging in to the Site directly via your browser.
3. Cookie policy
A cookie is a small text file that may be stored in a dedicated area of your Device’s hard drive when you visit a website. A cookie allows its issuer to identify the Device on which it is stored for as long as the cookie remains valid or stored.
When you visit the Site, information relating to your Device’s browsing (computer, tablet, smartphone, etc.) may be recorded through cookies placed on your Device, subject to the choices you have made regarding cookies, which you can change at any time.
What are the cookies placed on our Site used for?
Only the issuer of a cookie can read or modify the information it contains.
When you visit the Site, the Data Controller may, subject to your choices, place various cookies on your Device that allow your Device’s browser to be recognised for as long as the cookie concerned remains valid. The cookies we issue are used for the purposes described below.
The cookies we issue allow us to:
- carry out studies and compile statistics on traffic volumes and the use of the various elements of our Site (sections and content visited, browsing paths), enabling the Data Controller to improve the relevance and usability of its services;
- adapt the presentation of the Site to your Device’s display preferences (language, display resolution, operating system, etc.) during your visits to the Site, according to the viewing or playback hardware and software on your Device; and
- implement security measures, for example when you are asked to log in again to content or a service after a certain period of time.
3.2. Your choices regarding cookies
There are several ways to manage cookies. Any settings you choose may change your Internet browsing and the conditions under which you can access certain services that require cookies.
You may choose at any time to express and change your cookie preferences using the means described below.
In particular, you can configure your browser so that cookies are stored on your Device or, on the contrary, rejected, either systematically or depending on their issuer.
You can also configure your browser so that you are asked to accept or refuse cookies on a case-by-case basis, before a cookie can be stored on your Device. For more information, see the section "How to exercise your choices, depending on the browser you use?" in Article 4.2.3. below.
3.2.1. Accepting cookies
The storing of a cookie on a Device is essentially subject to the wishes of the Device’s user, which they can express and change at any time and free of charge through the options offered by their browser.
If you have accepted in your browser that cookies may be stored on your Device, the cookies embedded in the pages and content you have viewed may be stored temporarily in a dedicated area of your Device. They can only be read there by their issuer.
3.2.2. Refusing cookies
If you refuse the storing of cookies on your Device, or if you delete those already stored there, the quality of the services offered by the Site will not be affected.
However, you will no longer be able to benefit from a number of features that may be necessary to browse certain areas of the Site. This would be the case if you tried to access content or services for which cookies are strictly necessary (e.g. booking a stay). This would also be the case where the Data Controller – or its service providers – could not recognise, for technical compatibility purposes, the type of browser used by your Device, its language and display settings, or the country from which your Device appears to be connected to the Internet.
Where applicable, the Data Controller declines all liability for the consequences relating to the operation of its services resulting from its inability to store or read the cookies necessary for their operation that you have refused or deleted.
Please note that certain cookies cannot be deleted insofar as they are strictly necessary for the technical operation of the Site.
3.2.3. How to exercise your choices, depending on the browser you use?
Each browser is configured differently for managing cookies and your choices. This is described in your browser’s help menu, which will explain how to change your cookie preferences.
- For Internet Explorer:
http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- For Safari:
- For Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
- For Firefox:
http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
3.2.4. Deleting your cookies
You can delete all your cookies or only those you choose. Deleting cookies does not prevent browsing, nor does it prevent cookies from being placed again while you browse. It allows you to control your browser’s cookie library at a given moment. Technical cookies, which are necessary for browsing, will be placed again if you visit the Site.
Below, we explain the steps to follow depending on your browser.
Chrome
- In the Chrome menu, select “Settings”
- Show advanced settings
- Go to the “Privacy” section
- Click on “Content settings”
- In the “Cookies” section (first section), click on “Cookies and site data”
- Find the cookies you want to delete and click on “OK”. You can also choose to delete all your cookies.
Firefox
- In the Firefox menu, go to “Tools” then “Options”
- In the “Privacy” tab, click on “Show cookies”
- Find the cookies you want to delete and click on “Remove cookies”
Internet Explorer
Internet Explorer does not allow cookies to be managed individually. To delete all your cookies:
- Click on “Tools” then on “Internet Options”
- In the “General” tab, under “Browsing history”, click on “Delete”
- Tick the “Cookies” box then click on “Delete”
Safari
- In the Safari menu, select “Preferences”
- In the window that opens, go to the “Security” tab
- Click on “Show cookies”
- In the window that opens, find and select the cookies you want to delete, then click on “Remove”
3.2.5. Private browsing
“Private browsing” mode, now offered by all browsers, mainly allows you to browse the Internet without keeping a history of the pages visited or downloads. As for cookies, all those stored during your browsing session will be deleted when you close your browser. It is therefore not a way of refusing cookies; however, their lifespan is limited to the duration of your browsing session.
3.2.6. Disabling third-party cookies
Disabling third-party cookies means you only accept cookies placed by the Site, which you can also disable, delete or limit. Here is the procedure to follow, depending on your browser, if you wish to refuse third-party cookies:
Chrome
- In the Chrome menu, select “Settings”
- Show advanced settings
- Go to the “Privacy” section
- Click on “Content settings”
- In the “Cookies” section (first section), tick the box “Block third-party cookies and site data”
- Save the changes by clicking on “OK”
Firefox
- In the Firefox menu, go to “Tools” then “Options”
- In the “Privacy” tab, tick the box “Accept cookies”
- For the “Accept third-party cookies” setting, select “Never”
- Save the changes by clicking on “OK”
Internet Explorer
- In the Internet Explorer menu, go to “Internet Options”
- In the “Privacy” tab, click on the “Advanced” button
- Accept first-party cookies and block third-party cookies
- Save the changes by clicking on “OK”
Safari
- In the Safari menu, select “Preferences”
- In the window that opens, go to the “Security” tab
- Under “Accept cookies”, select “Only from sites I visit”
3.2.7. Choices you express online directly with us
If you do not want:
- us to collect data about your browsing,
- us to be able to identify the original special operation when you sign up via a special operation,
you can choose to disable all third-party cookies that are not essential for browsing the Site.
We will then store a cookie on your Device whose sole purpose is to prevent these cookies from being placed on your device. This cookie will be valid for twelve (12) months.
Please note that your preference is recorded by means of a cookie. If you delete all the cookies stored on your Device (via your browser), the Data Controller – or its service providers – will no longer know that you have chosen this option.