Legal Notice
Legal notice – legal entity
The website www.hotelannecy.com is published by JEANIES, a SARL (limited liability company)
with share capital of 20000 euros, whose registered office is located at 12, Rue de la Poste, 74000 Annecy, registered with the French authorities in Annecy, under no. 452 229 792, intra-community VAT no.: FR5245222979200018.
The publication director is Mr Baptiste CRON, 12, Rue de la Poste, 74000 Annecy, email: info@hotelannecy.com, telephone: 0450450456.
The website www.hotelannecy.com is hosted by: OVH, registered office: 2 rue Kellermann – 59100 Roubaix.
Privacy Policy & Cookie Policy
The purpose of this privacy policy (hereinafter the “Policy”) is to explain the rules governing the various processing operations of personal data that may be carried out when you use our website, accessible at the URL: www.hotelannecy.com (hereinafter the “Site”)
The processing of personal data carried out via the Site falls under the responsibility of two joint data controllers.
The controllers of your personal data are:
- The company myWebSign, which manages the JEANIES website
myWebSign is registered under number FR58ZZZ878BC6 in Marseille, France. Its registered office is located at 7 rue Louis Leprince Ringuet, Résidence de l’olympe, Bat A, ET 3, 13013 Marseille.
- JEANIES
This company is registered with the French authorities in Annecy under number 84419065200025 (hereinafter “the Establishment”). Its registered office is located at 12, Rue de la Poste, 74000 Annecy
Email of the data protection officer within the Establishment: info@hotelannecy.com
myWebSign and the Establishment are hereinafter jointly referred to as the “Controller”. The terms “we”, “our” and “us” in this privacy policy refer to the Controller.
As the Controller of your Personal Data, we do everything we can to protect your privacy as fully as possible when you visit the Site.
This Policy tells you more about the origin and use of your Personal Data, as well as the browsing information processed when you consult our Site.
For the purposes of this Policy, the term “Personal Data” means any data relating to you alone that allows you to be identified directly or indirectly, regardless of the Device you use.
The term “Device” means the hardware (computer, tablet, smartphone, telephone, etc.) you use to consult and browse the Site.
The term “Regulations” means the regulations relating to personal data, in particular Regulation (EU) No. 2016/679, known as the General Data Protection Regulation, the French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of 6 January 1978, and French Law No. 2018-493 on the protection of personal data.
By using our Site, you declare that you accept the terms of this Policy in their entirety.
If you disagree with any of these terms, you are free to stop using our Site.
This Privacy Policy is regularly updated. So that you can be properly informed of any significant change in advance, we will notify you via notifications on the services concerned or by email, as appropriate.
The Site will always display the most recent version of this privacy policy.
1. Protection of your personal data
In accordance with the Regulations, we record all processing operations carried out in a register of processing activities, which we keep available to the competent authorities.
All information you may have provided to us during your visits to the Site is strictly confidential. This information is necessary for the purposes for which it is processed.
1.1. What Personal Data is collected and processed?
The information that may be collected and processed is as follows:
– Identification and contact data: your first name, last name, gender, postal address, telephone number, email address, language and the country from which you interact with us;
– Financial and payment data: your bank details (in this respect, please note that all payment transactions are encrypted by the receiving bank or the accredited storage centre and that we do not keep any bank card numbers), information about your bookings, etc.;
– Connection data, geolocation data (only with your consent) and browsing data; and
– Personal preferences: this includes your cookie preferences.
When we ask you to enter your personal data to access a feature, some fields are mandatory, as this is data we need in order to give you access to that feature (for example, to record your booking we need your first and last name).
It is important that the personal information shared about you is accurate and up to date.
We do not process any personal data that could be classified as “sensitive” (information concerning racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex life) within the meaning of the Regulations on personal data.
In this respect, please note that our Site is not intended for children and that we therefore do not process any data relating to them.
We undertake not to transfer your personal data to third parties, except for the exceptions listed below in Article 1.3.
1.2. For what purposes is your Personal Data collected and processed?
The Personal Data listed above may be collected and processed for the following purposes:
- Managing a booking
Processing your data is necessary to keep you informed of the status of your booking, provide a summary of your booking, accept your payment, etc.
- Access to customer service
We process your Personal Data as part of our customer service in order to respond to your requests, in particular via the contact form.
- Improving our services
We process your browsing and booking data for analytical and statistical purposes. This data allows us to analyse how you use our Site and to improve its usability and quality.
- Marketing
When you subscribe to our newsletter, we process your data in order to manage your subscription and send you targeted information by email or SMS according to your preferences. We may also contact you via push notifications if you subscribe to this service.
Processing for marketing purposes requires your consent. You may therefore unsubscribe from our communications at any time.
Where you have given us your consent to receive our communications, whether via our newsletter or via push notifications, we may use the information you have provided to us for the following purposes:
– Sharing information about our events, products, services and current offers;
– Recommendations about certain products or services that may interest you; and
– Customer surveys to better understand your expectations regarding the products and services offered on our Site.
1.3. Who are the recipients of your Personal Data?
When using our Site, you may receive information from third parties with whom we work in order to offer you certain services. These may be:
– Financial institutions and accredited storage centres;
– Fraud detection and prevention entities; and
– Marketing, communication and advertising service providers.
Personal Data collected via the Site is mainly processed by the Controller’s internal departments.
However, we may share your information with the third parties listed above, in particular for the following reasons:
– processing payment, in the case of financial institutions and accredited storage centres;
– verifying your credit and identity, in the case of fraud detection and prevention entities; and
– optimising your experience on our Site and improving our services, in the case of marketing, communication and advertising service providers.
We require third-party recipients of your personal data to undertake to comply with the Regulations on personal data. The third parties listed above may only use your personal information in accordance with our instructions and not for their own purposes.
Your connection and browsing data may also be transferred to Google Analytics.
We may also disclose your Personal Data in response to an order from the legal authorities.
1.4. How long is your Personal Data kept?
We will keep your data for a period of ten (10) years following your last booking, in order to respond to any questions or complaints, or to retain all data necessary to meet legal, accounting or analytical requirements (Article L.123-22 of the French Commercial Code).
We may also keep your data for research or statistical analysis; in this case, it will be anonymised.
In the case of a newsletter subscription, we will no longer contact you if you have not opened our newsletters for more than twelve (12) months.
Any change to this Policy will be made on this page and, in the event of a substantial change, will be notified to you by email.
The Controller may also keep your data for research or statistical analysis. As this data is then anonymised, no retention period is imposed by the Regulations, since it is no longer possible to “re-identify” you subsequently.
1.5. Hosting of your Personal Data
Your Personal Data is hosted by Heroku Inc. The Landmark @ 1 Market St., Suite 300, San Francisco, CA, 94105, United States.
The servers on which your Personal Data is stored are located in Frankfurt, Germany.
In any event, the Controller has implemented appropriate technical measures to maintain the security of your Personal Data.
1.6. What are your rights?
1.6.1. Consent
Your consent must be given clearly and unambiguously. This is why, when you agree to fill in the Site’s contact form:
– the use that will be made of your Personal Data is explained to you;
– you must tick a box confirming your consent; and
– children under the age of 13 cannot give their consent.
1.6.2. Other rights
In accordance with the Regulations, you have the following rights over your Personal Data:
– Right of access: this right allows you to receive a copy of the Personal Data we hold about you;
– Right to rectification: this right allows you to request the correction of inaccurate or incomplete Personal Data concerning you;
– Right to erasure of your Personal Data: this right allows you to ask us to erase your Personal Data if one of the following legal grounds applies:
- the Personal Data is no longer necessary in relation to the purposes of the processing;
- you have withdrawn the consent on which the processing is based;
- you have objected to the processing by exercising your right to object;
- the processing of your Personal Data is unlawful; or
- your Personal Data must be erased to comply with a legal obligation.
– Right to restriction of the processing of your Personal Data; processing may be restricted where:
- you contest the accuracy of your Personal Data;
- you do not object to the erasure of your Personal Data in the case of unlawful processing but request that its use be restricted instead;
- your Personal Data is no longer used by our services but its retention is necessary solely for the establishment, exercise or defence of legal claims; or
- you object to our use of your Personal Data by exercising your right to object.
– Right to data portability: you may contact us so that we provide your Personal Data, to you or directly to another controller, in a structured, commonly used and machine-readable format;
– Right to object: you may contact us where
- the processing is carried out for the performance of a task in the public interest or for the purposes of our legitimate interests; you may object only on grounds relating to your particular situation; or
- the processing is carried out for direct marketing purposes; you may object at any time without having to give us any explanation.
– Right to decide what happens to your Personal Data after your death (digital will): one of the specific features of French regulations is that they allow you to send us your instructions on how we should process your Personal Data after your death. In this respect, you may choose to have it erased or passed on to one of your relatives.
Regardless of the purpose or legal basis on which we process your data, you may therefore, at any time and free of charge, send us an email to exercise your rights at the following address: info@hotelannecy.com
Or send us a letter at the following address:
12, Rue de la Poste, 74000 Annecy
Please note, however, that we are not always able to grant your request for legal reasons, which we will inform you of, where applicable, after receiving your request.
In any event, we remind you that you have the right to lodge a complaint with the competent supervisory authority.
1.7. What are the legal bases for processing?
We rely on legal bases for processing your data that depend on how you interact with our Site.
When you purchase products from our Site, we collect and process your personal data in order to perform the contract between us. For example, we need your postal address to deliver your order, or your bank details to process payment.
We also rely on other legal bases, such as your legitimate interests. For example, we consider it to be in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to your order information in order to serve you better, or that we can better understand how you use our Site in order to improve its usability and the services we offer you.
Finally, where Personal Data is processed for direct marketing purposes, the legal basis for processing is your consent (see Article 1.6.1. above).
2. Safe browsing on the Internet
2.1. Integrity of your data on the Internet
The Site has appropriate security measures in place to prevent any loss, misuse, unauthorised access, alteration or disclosure of your Personal Data.
All personal data collected is stored on secure servers. The Controller has also put procedures in place to deal with any personal data breach.
2.2. Malicious use
We recommend that you only connect to secure networks, preferably private ones. Remain aware of the risks involved in using public Wi-Fi networks.
Independently of the Controller to whom you have voluntarily provided your Personal Data, and given the nature of the Internet, other operators with no connection to the Controller are capable of capturing that data without your consent, in particular while you are browsing the Internet. We therefore recommend that you install anti-virus and anti-spyware software on your computer and update it regularly.
2.3. Identity theft / Phishing
The Controller will never ask you for personal information by email.
If you receive an email in the name of the Controller asking you to provide sensitive personal information (bank details, information about your private life, etc.), please do not reply and forward the email to us so that we can take the necessary action.
You should only provide information relating to your account after logging in to the Site directly via your browser.
3. Cookie policy
A cookie is a connection tracker, i.e. a text file that may be saved in a dedicated area of your Device’s hard drive when you visit a website. A cookie allows its issuer to identify the Device on which it is stored for the cookie’s period of validity or storage.
When you visit the Site, information relating to your Device’s browsing (computer, tablet, smartphone, etc.) may be saved via cookies installed on your Device, subject to the choices you have made regarding cookies, which you can change at any time.
What are the cookies placed on our Site used for?
Only the issuer of a cookie can read or modify the information it contains.
When you connect to the Site, the Controller may, subject to your choices, install various cookies on your Device that make it possible to recognise your Device’s browser for the period of validity of the cookie concerned. The cookies we place are used for the purposes described below.
The cookies we place allow us to:
- carry out studies and compile statistics on traffic volumes and the use of the various elements of our Site (sections and content visited, browsing paths), enabling the Controller to make its services more relevant and user-friendly;
- adapt the presentation of the Site to your Device’s display preferences (language, display resolution, operating system, etc.) during your visits to the Site, according to the hardware and viewing or playback software on your Device; and
- implement security measures, for example when you are asked to log in again to a piece of content or a service after a certain period of time.
3.2. Your cookie choices
There are several ways to manage cookies. Any settings you choose may affect your browsing on the Internet and your conditions of access to certain services that require the use of cookies.
You may express and change your cookie preferences at any time by the means described below.
In particular, you can configure your browser software so that cookies are saved on your Device or, on the contrary, rejected, either systematically or depending on their issuer.
You can also configure your browser software so that you are offered the choice to accept or refuse cookies on a case-by-case basis, before a cookie can be saved on your Device. For more information, see the section "How to exercise your choices, depending on the browser you use?" in Article 4.2.3. below.
3.2.1. Consenting to cookies
The saving of a cookie on a Device is essentially subject to the wishes of the Device’s user, who can express and change them at any time and free of charge through the options offered by their browser software.
If you have accepted, in your browser software, the saving of cookies on your Device, the cookies embedded in the pages and content you have viewed may be temporarily stored in a dedicated area of your Device. They can only be read there by their issuer.
3.2.2. Refusing cookies
If you refuse the saving of cookies on your Device, or if you delete those already saved there, the quality of the services offered by the Site will not be impaired.
Nevertheless, you will no longer be able to benefit from a number of features that may be necessary to browse certain areas of the Site. This would be the case if you tried to access content or services for which cookies are strictly necessary (e.g. booking a stay). This would also be the case where the Controller – or its service providers – could not recognise, for technical compatibility purposes, the type of browser used by your Device, its language and display settings or the country from which your Device appears to be connected to the Internet.
Where applicable, the Controller accepts no liability for any consequences relating to the operation of its services resulting from its inability to save or read the cookies necessary for their operation that you have refused or deleted.
Please note that certain cookies cannot be deleted insofar as they are strictly necessary for the technical operation of the Site.
3.2.3. How to exercise your choices, depending on the browser you use?
Each browser is configured differently for managing cookies and your choices. This is described in your browser’s help menu, which will tell you how to change your cookie preferences.
- For Internet Explorer:
http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- For Safari:
- For Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
- For Firefox:
http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
3.2.4. Deleting your cookies
You can delete all your cookies or only the ones you choose. Deleting cookies does not prevent browsing, nor does it prevent cookies from being reinstalled while you browse. It allows you to control your browser’s cookie library at a given moment. Technical cookies necessary for browsing will be reinstalled if you visit the Site.
Below, we explain the procedure to follow depending on your browser.
Chrome
- In the Chrome menu, select “Settings”
- Show advanced settings
- Go to the “Privacy” section
- Click on “Content settings”
- In the “Cookies” section (first section), click on “Cookies and site data”
- Find the cookies you want to delete and click “OK”. You can also choose to delete all your cookies.
Firefox
- In the Firefox menu, go to “Tools” then “Options”
- In the “Privacy” tab, click on “Show cookies”
- Find the cookies you want to delete and click “Remove cookies”
Internet Explorer
Internet Explorer does not allow cookies to be managed individually. To delete all your cookies:
- Click on “Tools” then “Internet Options”
- In the “General” tab, under “Browsing history”, click “Delete”
- Tick the “Cookies” box then click “Delete”
Safari
- In the Safari menu, select “Preferences”
- In the window that opens, go to the “Security” tab
- Click on “Show cookies”
- In the window that opens, find and select the cookies you want to delete, then click “Remove”
3.2.5. Private browsing
“Private browsing” mode, now offered by all browsers, mainly allows you to browse the Internet without keeping a history of the pages visited or downloads. As for cookies, all those saved during your browsing session will be deleted when you close your browser. It is therefore not a way of refusing cookies; however, their lifespan is then limited to the duration of your browsing session.
3.2.6. Disabling third-party cookies
Disabling third-party cookies means you only accept cookies placed by the Site, which you can also disable, delete or restrict. Here is the procedure to follow, depending on your browser, if you wish to refuse third-party cookies:
Chrome
- In the Chrome menu, select “Settings”
- Show advanced settings
- Go to the “Privacy” section
- Click on “Content settings”
- In the “Cookies” section (first section), tick the box “Block third-party cookies and site data”
- Save your changes by clicking “OK”
Firefox
- In the Firefox menu, go to “Tools” then “Options”
- In the “Privacy” tab, tick the box “Accept cookies”
- For the setting “Accept third-party cookies”, select “Never”
- Save your changes by clicking “OK”
Internet Explorer
- In the Internet Explorer menu, go to “Internet Options”
- In the “Privacy” tab, click the “Advanced” button
- Accept first-party cookies and block third-party cookies
- Save your changes by clicking “OK”
Safari
- In the Safari menu, select “Preferences”
- In the window that opens, go to the “Security” tab
- Under “Accept cookies”, select “Only from sites I visit”
3.2.7. Choices expressed online directly with us
If you do not want:
- us to collect data about your browsing,
- us to be able to identify the original special promotion when you sign up through a special promotion,
you can choose to disable all third-party cookies that are not essential for browsing the Site.
We will then save a cookie on your Device whose sole purpose is to block these cookies from being placed on your device. This cookie will be valid for twelve (12) months.
Please note that your preference is recorded by means of a cookie. If you delete all the cookies saved on your Device (via your browser), the Controller – or its service providers – will no longer know that you have chosen this option.