CONFIDENTIALITY

1. HÔTEL DES CAUSSES' COMMITMENT TO THE PROTECTION OF PRIVACY
Because we see you as a valued customer, our first priority is to offer you exceptional stays and moments at our hotel.

Your complete satisfaction and your confidence in Hôtel des Causses are essential to us.

This is why, as part of our commitment to meet your expectations, we have implemented a policy to protect your personal data. This charter materializes our commitments to you and describes the methods by which the Hôtel des Causses uses your personal data.


2. SCOPE OF APPLICATION
In this charter, the Hôtel des Causses designates:

Hotel des Causses
2 rue Mathieu Prevot
12100 Millau
France

3.10 PRINCIPLES OF HOTEL DES CAUSSES REGARDING THE PROTECTION OF YOUR PERSONAL DATA
In accordance with the regulations in force, in particular the General Data Protection Regulations adopted in Europe, we have established the following 10 principles for the processing of your data within the Hôtel des Causses:

  • Lawfulness: We only use personal data if:
- we have obtained the consent of the person, OR
- this is necessary for the performance of a contract to which the person is a party, OR
- this is necessary for compliance with a legal obligation, OR
- this is necessary to protect the vital interests of the person, OR
- we pursue a legitimate interest by using personal data and this use does not infringe the freedoms and interests of the person.

  • Loyalty: we explain how the personal data we collect are useful to us
  • Determined purposes and data minimization: we only collect personal data that is really necessary for us. If we can achieve the same result using less personal data, then we make sure to only use that data alone.
  • Transparency: we inform data subjects of how we use their data.
  • We facilitate the exercise of their rights by the persons concerned: access to data, rectification and erasure of data and opposition to data processing.
  • Retention periods: we only keep personal data for limited periods.
  • We ensure the security of personal data, that is to say their integrity and confidentiality.
  • If a third party needs to use personal data, we make sure that they are able to protect the personal data.
  • If personal data has to be transferred outside the European Union, we make sure that this transfer is framed by the appropriate legal arrangements.
  • If personal data is compromised (lost, stolen, damaged, unavailable ...), we notify this violation to the competent data protection authorities and to the persons concerned, if the violation is likely to generate high risks for the rights and freedoms of individuals .
For any questions about the 10 data protection principles of the Hôtel des Causses, please contact the hotel (contact@hoteldescausses.com).


4. WHAT PERSONAL DATA IS COLLECTED?
At various times, we collect information about you or about the people accompanying you, in particular:
  • contact details (for example surname, first name, telephone number, email address);
  • personal information (eg date of birth, nationality);
  • information about your children (eg first name, date of birth, age);
  • your credit card number, (for transaction and reservation purposes);
  • information appearing on an identity document (e.g. identity card, passport or driving license);
  • your arrival and departure dates;
  • your preferences and interests (eg smoking or non-smoking room, preferred floor, type of bedding, type of print media read, sports, cultural interests, food and drink preferences, etc.);
  • your questions / comments, during or following a stay at the Hôtel des Causses;
  • technical and location information generated through the use of our websites and applications.
The collection of information on persons under the age of 16 is limited to their name, nationality and date of birth, which can only be provided to us by an adult. We thank you for ensuring that your children do not send us any personal data without your permission (especially via the Internet). In the event that such a transmission takes place, you can contact the Hôtel des Causses (contact@hoteldescausses.com) so that this information is deleted.

In order to meet your requests or to provide you with the appropriate service (for example a specific diet) we may need to collect sensitive information, such as concerning racial or ethnic origins, political opinions, religious and philosophical beliefs, union membership, health or sexual orientation details. In this case, we will only collect this data with your express prior consent.


5. WHAT OCCASIONS ARE YOUR PERSONAL DATA COLLECTED?
Personal data may be collected on different occasions, including:

  • Hotel activities:
- Room reservation ;
- Registration and payment;
- Hotel stay and services offered in the accommodation sector;
- Consumption at the hotel bar or restaurant during a stay;
- Requests, complaints and / or disputes.
  • Participation in marketing programs or events:
- Registration in loyalty programs;
- Contribution to satisfaction surveys (eg Guest Satisfaction Survey);
- Subscription to newsletters, in order to receive offers and promotions by email.
  • Transmission of information from third parties:
- Tour operators, travel agencies (online or not), GDS reservation systems and others;
  • Internet activities:
- Connections to Hôtel des Causses websites (IP address, cookies, etc.);
- Online collection forms (online reservations, questionnaires, Hôtel des Causses pages on social networks, connection devices using your social network identifiers, exchanges with a conversational agent or "chatbot").


6. FOR WHAT PURPOSES ARE YOUR DATA COLLECTED AND FOR WHAT LONG ARE THEY KEPT?
The table below shows the purposes for which we process your data, the legal basis for this processing as well as the associated retention periods:

A)
  • Purpose / Activity
Fulfill our obligations to our customers.

  • Legal basis for processing, including legitimate interest pursued
Processing necessary for the performance of a contract to which you are a party.

Processing necessary to comply with a legal obligation.

Processing necessary for the pursuit of our legitimate interest in managing our business and providing you with requested products and services.

  • The duration of the conservation
10 years from the date of booking, in accordance with our legal obligations.


B)
  • Purpose / Activity
Manage room reservations and accommodation requests, in particular establish and keep legal documents in accordance with accounting standards.
  • Legal basis for processing, including legitimate interest pursued
Processing necessary for the performance of a contract to which you are a party.

Processing necessary for the pursuit of our legitimate interest in managing our business and providing you with requested products and services.
  • The duration of the conservation
10 years from the date of booking, in accordance with our legal obligations.


VS)
  • Purpose / Activity
Manage your stay at the hotel:
- Management of access to rooms
- Monitoring of your consumption (telephone, bar, payTV, etc.).
  • Legal basis for processing, including legitimate interest pursued
Processing necessary for the performance of a contract to which you are a party.

Processing necessary to comply with a legal obligation.

Processing necessary for the pursuit of our legitimate interest in managing our business and providing you with requested products and services.
  • The duration of the conservation
For the duration of your stay.


D)
  • Purpose / Activity
Improve our hotel service, in particular:

- Personalize your welcome at the hotel, improve the quality of service and the customer experience
- Process your personal data in our customer marketing program, in order to carry out marketing and brand promotion operations and to have a better understanding of your needs and wishes
- Adapt our products and services to best meet your requests
- Personalize merchant offers and relational messages for you
  • Legal basis for processing, including legitimate interest pursued
Processing necessary for the performance of a contract to which you are a party as part of the management of your membership in the loyalty program.

Processing necessary for the pursuit of our legitimate interest of promoting our services, carrying out direct marketing actions and improving our services.
  • The duration of the conservation
If you are not a member of the Loyalty Program, 3 years from the date you were last active with us in any way.

If you are a member of the Loyalty Program, 6 years from the date you were last active with us in any way.


E)
  • Purpose / Activity
Comply with any applicable legislation (e.g. retention of accounting records), including:

- Management of requests to unsubscribe from newsletters, promotions, tourist offers and satisfaction surveys
- Management of requests from data subjects regarding the protection of their personal data.
  • Legal basis for processing, including legitimate interest pursued
Processing necessary for compliance with a legal obligation.
  • The duration of the conservation
For the duration fixed in the applicable local law.



7. CONDITIONS OF ACCESS BY THIRD PARTIES TO YOUR PERSONAL DATA

We share your data with a limited number of people and authorized departments within the Hôtel des Causses, in order to offer you the best possible experience in our hotels. The following teams can access your data:
Hotel staff;
IT services ;
Possibly medical services;
Generally, any appropriate person at the Hôtel des Causses for certain specific categories of personal data.

Local Authorities: We may also need to provide your information to local authorities if this is required by law or as part of an investigation and in accordance with local regulations.
Top of page

8. PROTECTION OF YOUR PERSONAL DATA DURING INTERNATIONAL TRANSFERS
For the purposes indicated in article 6 of this charter, we may transfer your personal data to internal or external recipients who may be in countries offering different levels of personal data protection.

Data flows, other than those necessary for the execution of your reservation, to countries that do not have equivalent personal data protection are then governed by the standard contractual clauses defined by the European Commission. Flows to the United States can also be made to entities that have signed up to the Privacy Shield program.


9. DATA SECURITY
The hotel des Causses takes the appropriate technical and organizational measures, in accordance with the applicable legal provisions (in particular article 32 of the GDPR), to protect your personal data against destruction, loss or alteration, misuse and unauthorized access, modification or disclosure, whether these actions are unlawful or accidental. To this end, we have put in place technical measures (such as firewalls) and organizational measures (such as an identifier / password system, physical protection means, etc.) in order to '' ensure the constant confidentiality, integrity, availability and resilience of processing systems and services. When you provide your credit card information when making your reservation, SSL (Secure Socket Layer) encryption technology helps secure your transactions. Organizational measures ensure the security of the processing.


10. COOKIES AND OTHER TRACERS
The Hôtel des Causses does not use cookies and other tracers on its websites.


11. YOUR RIGHTS
You have the right to obtain information and to access your personal data collected by the Hôtel des Causses, subject to the applicable legal provisions.

You also have the right to have your data rectified, have them erased or restrict their processing. In addition, you have the right to the portability of your data and the right to define instructions for the processing of your data after your death. You can also object to the processing of your data, in particular object to your data relating to your stays, your preferences, your satisfaction being shared between the Hôtel des Causses.

If you wish to exercise these rights, contact Hôtel des Causses directly by e-mail at contact@hoteldescausses.com or by writing to the following address:

Hotel des Causses
2, rue Mathieu Prevot
12100 Millau, France

For the sake of confidentiality and protection of your personal data, we will have to identify you in order to respond to your request. For this, in case of reasonable doubts about your identity, you may be asked to attach in support of your request, a copy of an official identity document, such as an identity card or a passport. In this case, a black and white front copy of one of these documents is sufficient.

All requests will be dealt with as soon as possible and in accordance with applicable law.

You can also exercise your rights with regard to your personal data stored and processed by a hotel in its capacity as data controller. You must contact this hotel directly for this purpose. You will find all the information you need to get in touch with the hotel on the website www.hoteldescausses.com. For any assistance in your efforts, please write to the Hôtel des Causses or to the postal address above.

Finally, you can lodge a complaint with a supervisory authority and you can contact the Hôtel des Causses by writing to contact@hoteldescausses.com or to the postal address above.


12. UPDATES
We may modify this charter periodically. Consequently, we invite you to consult this charter regularly, particularly when making a reservation in one of our hotels.


13. QUESTIONS AND CONTACTS
For any questions concerning the personal data policy within the Hôtel des Causses, please contact us (contact@hoteldescausses.com).
Share by: