MAS DE LA FOUQUE RGPD POLICY
WHO ARE THE STAKERS?
The Data Protection Officer:
A data protection officer is the person responsible for data protection within an organisation.
Contact:
Helline Meyrueix, Quality Manager, Groupe E4, 18 chemin de la plaine, 34 990 Juvignac, France
e-mail: hmeyrueix@groupe-e4.com
telephone: 04 67 04 33 91
The data controller:
The data controller is the person, company or other organisation that determines the purpose and means of processing personal data (alone or jointly with others).
Contact:
Le Mas de la Fouque, route du petit Rhône, 13460 Saintes Maries de la Mer
e-mail: info@masdelafouque.com
telephone: 04 90 97 81 02
WHAT PERSONAL DATA? AT WHAT TIME?
The Company collects the following data:
Customer identification data (such as surname, first name, e-mail address, postal address and telephone number of the Customer or his representatives and agents) ;
Financial data (such as the Customer’s bank details)
This data is collected when the Customer:
Requests a reservation;
Accesses their reservation (entry management);
pays any sums due to the Company.
When the Customer provides personal data relating to third parties, he/she guarantees that he/she has received the necessary authorisations and consents from the persons concerned by this data.
1/ For what purposes?
The Company processes the Customer’s personal data for the following purposes: Managing admissions
- Management of ‘check in check out’ reservations
- Management of customer invoicing
- Improvement of its services by inviting the Customer to take part in the satisfaction survey;
- Participation in games, competitions or promotional operations;
- Development of sponsorship offers via the Shopnsha. re, specialising in WordPress e-commerce;
- Compiling commercial statistics;
- Communicating with the
- Customer regarding his/her contract, the Company’s products, services and promotional offers;
- Exchanging files of customers and prospective customers with its partners;
- Sending newsletters by electronic communication to Customers;
- Managing requests for the right of access, rectification, opposition, portability, deletion, withdrawal, defining directives on the use of his/her data after his/her death;
- Debt collection and the exercise of any legal right by the Company…
If the Customer’s personal data is processed for different purposes, the Company undertakes to inform the Customer and, where required by law, to obtain the Customer’s prior consent.
2/ On what basis?
Customers’ personal data is processed by the Company in accordance with the regulations in force, and in particular under the following conditions:
- When the Customer has given their free, specific, informed and unequivocal consent to the processing of their data (e.g.: request for information, request for a quote, etc.);
- When this is necessary for the performance of a contract in the context of processing the Customer’s file;
- When this is necessary to comply with the Company’s legal or regulatory obligations as imposed by the legislator (e.g.: fight against fraud, etc.); When the Company’s legitimate interests so require: fighting fraud…);
- When justified by the Company’s legitimate interests (e.g. security measures…);
- When necessary for the exercise or defence of a legal right of the Company (e.g. debt recovery, civil or criminal liability action…).
3/ Personal data and profiling?
The Company does not carry out any profiling activities using the data processed hereunder.
4/ Who receives the Customer’s personal data?
The Company communicates the data collected to the technical service providers responsible for the maintenance and hosting of its IT system, as well as to the service providers in charge of the marketing, sales, legal, litigation and accounting departments and those responsible for processing the relationship with the Customer, and to any sub-contractors, solely for the purposes mentioned above and to the extent necessary to carry out the tasks entrusted to them.
These recipients may contact the Customer directly using the contact details provided. The Company requires these recipients to use the Customer’s personal data solely to manage the services for which they are responsible and in accordance with the laws and regulations applicable to the protection of personal data.
Where applicable, the Customer’s personal data may be communicated to third parties authorised by law (in particular in the context of an express and reasoned request from the legal authorities).
Similarly, if the Company is involved in a merger, acquisition, transfer of assets or receivership, it may be required to transfer or share all or part of its assets, including the Customer’s personal data. In this case, the Customer will be informed prior to any transfer of his/her personal data to a third party.
Finally, the Company reserves the right, with the express authorisation of the Customer, to use
directly or indirectly (by transmitting it to its partners, for example) the
personal data of Customers for commercial prospecting purposes.
5/ How is the Customer’s personal data stored and is it transferred outside the European Union?
The Customer’s personal data is stored within the European Union in the Company’s databases or those of its service providers.
6/ How is the Customer’s personal data protected?
The Company implements organisational, technical, software and physical digital security measures to protect the Customer’s personal data against alteration, destruction and unauthorised access. However, it should be noted that the Internet is not a completely secure environment and that the Company cannot guarantee the security of the transmission or storage of Customer data on the Internet.
You have the option of registering free of charge on the www.bloctel.fr website in order to be protected from any telephone canvassing.
7/ How long is the Customer’s personal data kept?
Data is kept in accordance with the law for a period justified by the purpose of the processing and, in any event, for the legal retention periods.
8/ What are the Customer’s rights?
In accordance with the provisions of Regulation no. 2016/679 of 27 April 2016 and Act no. 78-17 of 6 January 1978 as amended, the Company clearly and fully informs Customers of their rights. Should the Customer have any further queries, the Company’s dedicated service remains available to guide the Customer and provide all useful information in order to preserve their rights.
The Customer has :
- a right of access to their data: the Customer has the right to obtain confirmation as to whether or not his/her data is being processed, as well as a copy of his/her data and information about the characteristics of the processing carried out by
- a right to rectification of inaccurate information and incomplete data;
- a right to the deletion of data that is no longer required for processing, a right to withdraw consent to processing, a right to object to the processing of his/her data where there are no compelling legitimate grounds for processing, a right to object to commercial canvassing;
- a right to the limitation of processing in the event of inaccuracy of the data during the time it takes to verify it, or where it is still required for the exercise of a legal right;
- a right to the portability of their data, in order to request that data supplied with their consent or when concluding the contract be passed on to another party responsible;
- a right not to be the subject of a decision based exclusively on automated processing that produces significant legal effects concerning them;
- a right to define directives concerning the fate of their data after their death.
The Customer may exercise these rights at any time by contacting the Company:
By post at the following address:
Mas de la Fouque
Route du petit Rhône
13 460 Saintes Maries de la Mer
By e-mail to the following address: info@masdelafouque.com
The Customer must specify in his/her request his/her surname, first name, e-mail address or postal address to which he/she would like the Company’s reply to be sent.
For security reasons and to avoid fraudulent requests, this request must be accompanied by proof of identity. Once the request has been processed, this proof of identity will be destroyed.
In accordance with the law, this request will be answered within one month of receipt.
This period may be extended to two months if there are difficulties in meeting the request or if there is a large number of requests.
Finally, the Customer has the right to lodge a complaint with the CNIL or any other competent supervisory authority in his/her country of residence.
The Customer may make this complaint to the French CNIL:
By post to the following address:
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
By telephone on 01 53 73 22 22 (Monday to Thursday from 9am to 6.30pm / Friday from 9am to 6pm);
By fax on 01 53 73 22 00;
Via the CNIL website at the following address : https://www.cnil.fr/fr/plaintes.
Via the consent form