Privacy Policy Text
Privacy policies
LS ALPES – LA SAVONNETTEPRIVACY POLICY
PROTECTION OF PERSONAL DATA
Applicable from 1 February 2020
References: PDC – LSA – 202001
Definitions:
“IT Providers” : refers to the IT service providers with whom the Data Controller has contracted for the design, corrective and evolutionary maintenance and hosting of the Site.
“Order” : refers to the order of Products placed via the Site by the User.
“Products” : refers to the items sold by LS ALPES and listed on the Site. The Products are described and presented by LS ALPES as accurately as possible, it being understood that in the event of any discrepancy between the presentation of the Products and their actual appearance, LS ALPES cannot be held liable.
“Users” : refers to natural persons accessing and using the Site.
Article 1: General provisions and acceptance of the privacy policy
1.1 This privacy policy applies to the processing of personal data carried out by the company LS ALPES, a single-member simplified joint-stock company with a capital of 7,000 euros, registered with the Annecy trade and companies register under number 880 935 598, whose registered office is Parc d'activités de La Ravoire – Impasse de La Ravoire – 74370 EPAGNY METZ TESSY, represented by its current President, duly authorized for the purposes hereof, (hereinafter "the Data Controller"), in the context of the operation of the website accessible at www.lasavonnette.com (hereinafter "the Site").
1.2 The purpose of this privacy policy is to define and inform Users about how the Data Controller collects, uses and protects Users' personal data (hereinafter "the Data"), in accordance with the French Data Protection Act of 16 January 1978, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data ("GDPR"). The Act and the GDPR are collectively referred to as "the Applicable Regulations".
1.3 The Data Controller reserves the right to modify this Privacy Policy, at its discretion or in order to comply with legislative, regulatory, jurisprudential or technological developments.
In this case, the modification date will clearly appear at the top of the privacy policy.
It is therefore the User's responsibility to regularly consult this Privacy Policy in order to be aware of any changes.
Article 2: Data collected
2.1 The User is informed that they can visit the Site without providing any of their Data to the Data Controller. In any event, the User is not obligated to provide their Data to the Data Controller.
However, if refused, the User may not be able to benefit from all the services offered by the Site, in particular regarding the Product Ordering service.
Indeed, in the context of certain services (Order, newsletter, etc.), the Data Controller may ask the User to provide certain Data as mentioned below.
2.2 The Data Controller collects various personal data from Users, namely:
2.2.1 Information necessary for using the Site and placing Orders
When using the Site, and in order to make a Reservation, the User must provide the following information:
- civility
- User's first and last name;
- postal address;
- e-mail address ;
- phone number.
2.2.2 Information collected automatically
When the User browses the Site, the Data Controller will automatically collect certain Data, namely:
- Geolocation information : The Data Controller may collect information on the User's precise or approximate location, including the User's IP address or GPS data from their mobile device. However, the User is informed that they can disable the use of location services on their mobile device.
- Usage information : The Data Controller may collect information regarding the User's interactions with the Site, including viewing pages viewed and Bookings made.
The Data Controller may process the Data to (i) improve, power and develop the Site, (ii) create and maintain a more secure environment, (iii) provide, personalize and improve advertising on the services, (iv) manage Accounts and (v) for the commercial management of Orders.
3.1 Regarding the improvement, maintenance and development of the Site
The Data Controller may use the Data to power, improve and develop the Site, in particular to:
- to allow the User to access and use the Site;
- manage, protect, improve and optimize the Site, for example by carrying out analyses and studies;
- to allow the User to use the services;
- to perform internal analyses and statistics
3.2 Regarding the maintenance of a secure environment
The Data Controller may use the Data to create and maintain a secure environment, and in particular to:
- detect and prevent fraud, spam, abuse, security incidents and other harmful activities;
- conduct security investigations and risk assessments;
- conduct checks with databases or other sources of information, including police or background checks, to the extent permitted by applicable laws and with the User's consent, where appropriate;
- to comply with its legal obligations;
- resolve any disputes that the Data Controller may have with Users and enforce its contracts with third parties;
- to enforce the General Terms of Use and any other applicable policies,
3.3 Regarding marketing management and customer relations
The Data Controller may use the Data to personalize and improve its services and advertising, and in particular to:
- Sending Users promotional messages, commercial, advertising and other information that may be of interest to them based on their preferences, including through sending the newsletter;
- personalize, evaluate and improve your advertising;
- to enable the promotion of Hosts and their offers,
- to collect and distribute User reviews about their stays with Hosts.
3.4 Regarding Account Management
The Data Controller may use the Data to manage Accounts and in particular to send Users alert messages in case of incorrect or missing information or to request additional information from Users.
The Data Controller processes this Data for the purposes listed in this section, given its legitimate interest in having valid information from Users.
3.5 Regarding Order Management
The Data Controller may use the Data to manage Orders placed by Users.
The Data Controller processes this Data for the purposes listed in this section, given the contractual relationships it has with Users, and for the proper execution of said contracts.
Article 4: Recipients
For the proper provision and execution of services, and for proper navigation on the Site for the User, the Data Controller may need to transmit the collected Data to its partners, and in particular to its IT Service Providers.
The Data Controller undertakes to ensure that said partners provide the necessary guarantees regarding the protection of personal data in order to protect the security and confidentiality of the Data.
Article 5: Shelf life
The Data is kept by the Data Controller only for the time corresponding to the purposes specified above.
Article 6: User Rights
In accordance with applicable regulations, the User benefits from the rights expressed below concerning his Data.
6.1 Right of access to and communication of Data
Each User may request the Data Controller to confirm whether or not personal data concerning him or her are being processed, and where they are, access to said personal data as well as to a certain number of details (purposes of the processing, categories of data concerned, recipient of the data, existence of a transfer outside the EU, period of retention, etc.).
The Data Controller must then respond to the User within one month from the date of the request (a two-month extension is possible "given the complexity and number of requests" and if the User has been informed within the initial one-month period).
Although the response is in principle free of charge, the Data Controller reserves the right to request payment of reasonable fees if the request generates administrative costs and the request is manifestly unfounded or excessive.
In this regard, it should be noted that the Data Controller is not required to respond if:
- the request is clearly abusive, particularly due to its repeated or systematic nature;
- The data is not stored.
Each User has the right to obtain from the Data Controller, without undue delay, the rectification of inaccurate personal data concerning him or her.
Furthermore, given the purposes of the processing, each User also has the right to have incomplete Data completed, including by providing a supplementary statement.
6.3 Right to be forgotten and to erasure
Each User has the right to obtain from the Data Controller the erasure, without undue delay, of personal data concerning him or her.
The right to erasure includes the right to delisting and deletion of collected data.
This right is not general, however, and only applies for a limited number of reasons, namely:
- the Data is no longer necessary for the purposes for which it was collected or processed;
- the User withdraws his or her consent on which the processing is based and there is no other legal basis for the processing;
- The User objects to the processing and there are no overriding legitimate grounds for the processing;
- The Data has been processed unlawfully;
- The data must be erased to comply with a legal obligation.
- to the exercise of the right to freedom of expression and information;
- to comply with a legal obligation which requires processing, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health,
- for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes insofar as the right in question is likely to render impossible or seriously impair the achievement of the objectives of said processing;
- to the establishment, exercise or defense of legal rights.
The Data Controller will then inform him whether his request is admissible or not, providing reasons for his decision.
6.4 Right to restriction of data processing
The right to restriction means that the User has the right to obtain from the Data Controller the restriction of processing, this restriction being defined as "the marking of stored personal data, with a view to limiting their future processing" .
However, this right can only be exercised under certain circumstances, namely:
- The User disputes the accuracy of the Data;
- when the processing is unlawful, the User objects to the erasure of the Data and instead demands a limitation of its use;
- The Data Controller no longer needs the Data for the purposes of the processing, but you still need the data for the establishment, exercise or defence of your legal rights;
- The User objected to the processing.
6.5 Right to object to the processing of Data
In accordance with the Applicable Regulations, the User has the right to object at any time, for reasons relating to his or her particular situation, to the processing of personal data concerning him or her.
It should be noted that this right is not absolute and that the User must provide a legitimate reason to be able to benefit from this right.
In the event that the User wishes to object to the processing of all or part of his Data processed by the Data Controller, the latter shall have to examine whether there are legitimate and compelling grounds for the processing which prevail over the interests of the User, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Therefore, it is possible that the User's objection request may be refused, in accordance with applicable legal rules.
In this case, the User may appeal either to the services of the Data Controller or to the CNIL.
6.6 The Data Controller informs the User that they can download application forms relating to the rights described above from the website of the National Commission for Information Technology and Freedoms (CNIL).
Article 7: Withdrawal of consent
If the Data is processed by the Data Controller on the basis of the User's consent, the User may withdraw their consent at any time by notifying the Data Controller, by email or mail to the addresses indicated below.
Article 8: Security
The Data Controller shall implement and continuously update administrative, technical and physical security measures to protect the Data against unauthorized access, loss, destruction or alteration.
If the User has reason to believe that their Data has been stolen, lost or misappropriated, it is their responsibility to report it immediately to the Data Controller.
Article 9: Contact
The User may exercise their rights or make any request to the Data Controller at the following contact details:
- Email address: contact_AT_lasavonnette.com (replace _AT_ with @)
- Mailing address: La Ravoire Business Park – Impasse de La Ravoire – 74370 EPAGNY METZ TESSY
