1. Introduction

La Villa Haussmann ("we", "us", "our") offers its customers and prospects ("you", "your") hotel services, room rentals, special offers, gift packs, news, restaurant offers, and much more.

La Villa Haussmann is responsible for processing your personal data.

This Privacy Policy describes our practices and policy regarding the collection, use and transfer of your personal data.

Given the importance we place on your trust, we are committed to respecting your privacy, in particular by ensuring that your personal data is protected in accordance with data protection regulations.

2. Collecting your personal data

We may collect personal data that you communicate directly to us as part of our contractual and pre-contractual relations (registration on forms, information communicated at reception or when you make a reservation, etc.).

We may also collect your technical data by recording your interaction with our services, for example using cookies on our website (such as the IP address of your computer or mobile device, connection dates, pages viewed, services booked, etc.).

Certain data may also be communicated to us by other persons (online booking sites, travel agencies, etc.) who provide us with contact and booking information on behalf of a customer, in which case we inform the person concerned of this collection.

We may also collect data from affiliated entities, business partners, subcontractors and service providers if their personal data protection policies so permit.

3. The personal data we process

The term "personal data" refers to any information collected that directly or indirectly identifies a natural person, for example: name, e-mail address, date of birth, payment information, language, booking details, etc.

For example, we process data that you may provide about yourself and the people accompanying you, such as :

- Surname, first name, telephone number, e-mail address,
- Nationality, date of birth, gender,
- First name, age, date of birth of minors under your responsibility,
- Payment card number : for the booking transaction,
- IP addresses and connection details,
- Arrival and departure dates,
- Your preferences and interests,
- Your questions/comments, during or following a stay in one of our establishments,
- Images and video recordings by means of video surveillance systems collected during a visit to a hotel, where permitted by applicable law,
- Contact details of employees of customer companies and suppliers and of other natural persons with whom we work (e.g., customers, suppliers, customers' representatives). e.g., travel agents travel agents, reservation management organizations, event planners),
- And other types of information that you decide to communicate to us of your own free will.

Data collected from people under the age of 18 - necessarily limited to their name, nationality and date of birth - can only be transmitted to us by an adult declaring that they have the necessary authority to do so. Please ensure that your children do not transmit any personal data without your authorization (particularly via the Internet).

We do not voluntarily collect sensitive data, such as your religious beliefs or details of health, dietary restrictions or sexual orientation, but we may process them if you provide them to us voluntarily and thereby express your consent to the processing.

4. When is your personal data collected?

Personal data may be collected on various occasions, in particular via :

- Our hotel services: room reservation,
- Purchase of gift vouchers,
- Organization of an event,
- Check-in and payment,
- Consumption at the hotel bar or restaurant during a stay,
- Use of concierge services, spa, activity reservations,
- Requests, complaints and/or disputes,
- Participation in marketing programs or events: contribution to satisfaction surveys,
- Subscription to newsletters, in order to receive offers and promotions by email,
- Transmission of information from third parties: tour operators, travel agencies, online booking systems, others,
- Internet activity: connection to our website (IP address, cookies),
- Online collection forms (online booking, questionnaires, social networks).

5. Cookies and other Web technologies

We collect data via cookies and similar technologies (web beacons). Cookies are small text files that are automatically copied to your computer or mobile device when you visit a website. These files are stored by your browser. These cookies contain basic information about your use of the Internet. Your browser sends these cookies to our website each time you visit it, so that your computer or mobile device is recognized and your browsing experience is personalized and enhanced.

You can control cookies using your browser settings and other tools, but refusing to install a cookie may prevent you from accessing certain services.

In connection with and for the purpose of providing Wi-Fi services in our hotel, we may collect device identifiers (such as your IP address, or other unique identifier).

In addition, our website may contain links to third-party websites, plug-ins and applications. If you access other websites from links provided on our website, the operators of those websites may collect or share information about you. This information will be used by these operators in accordance with their privacy policies, which may differ from ours. We invite you to read those privacy policies and to refer directly to those third parties if you have any questions about their practices.

6. Purposes of processing and use of your personal data

We collect your personal data in a lawful manner and in particular:
- When you have specifically consented,
- For the execution of pre-contractual measures requested,
- For the execution of contractual measures,
- In our legitimate interest or that of a third party,
- To comply with our legal obligations,
- In your vital interest or that of another person (medical emergency).

Our legitimate interest consists, for example, in providing a superior and personalized service or in improving our services.

We collect and process your data for specified, explicit and legitimate purposes:
- Fulfilling our obligations towards our customers,
- Executing and performing our services (managing room reservations, managing your stay at the hotel),
- Improving our services,
- Managing our relationship with our customers before, during and after your stay,
- Securing, managing and improving the use of our Website,
- Improving our customer knowledge,
- Managing our relationships with our partners and service providers,
- Complying with our legal obligations (keeping accounting documents, for example).

7. Recipients of your data

Within our group, only authorized persons may access your personal data when this is necessary for the performance of their duties.

Some data may be sent to third parties to meet legal, regulatory or contractual obligations, or to legally authorized authorities (police headquarters, town hall, obligations to combat money laundering and the financing of terrorism, Tracfin declaration, etc.).

We may also share your information with others, such as other companies in the group to which we belong and the third parties listed below:

- Our service providers and subcontractors providing services or functionality on our behalf, including reservation and customer management software, payment processing and fraud prevention.
- Our business partners with whom we may jointly offer products or services (car rental, restaurant reservations, show bookings, etc.).
- Affiliated websites. If you are redirected to our website from another website, we may share your registration information, such as your name, e-mail and postal addresses, telephone number and travel preferences, with that referring website. We recommend that you consult the privacy policies of any website that redirects you to our Website.
- We may share your personal data with companies in our group. This sharing enables us to offer you, in accordance with your marketing preferences, information about products and services (hotel and other) that may be of interest to you.

8. Retention period of personal data

We retain your personal data for as long as is necessary for the purposes for which it was collected, including the fulfilment of any legal or accounting requirements and any legal accountability obligations.

9. Your rights

In accordance with data protection regulations, you have the following rights with regard to your personal data:
- Right of access (right to request access to your data and obtain confirmation from us that we are processing your data),
- Right of rectification (right to modify or complete your data when it is inaccurate or incomplete),
- Right of erasure (right to request the deletion of your data from our processing),
- Right to limit processing (right to request the limitation of processing concerning your data),
- Right to data portability (right to request the transfer of your data to you or to another data controller),
- Right to object (right to object to certain processing operations, in particular those for marketing purposes),
- Right to appeal to the Cnil.

You can exercise your rights by providing proof of your identity (e.g. a copy of your signed identity card) by e-mail to reception@lavillahaussmann.fr or by post to the following address: 132 boulevard Haussmann, 75008 PARIS.

We inform you that your requests to exercise your rights are processed by us for tracking and proof purposes and that we keep them for six (6) years.

We inform you that despite the exercise of your right of deletion, we may retain some of your data as evidence in the event of litigation or to meet our legal obligations.

10. Personal data security

We attach particular importance to the security of personal data.

We have implemented technical and organizational measures appropriate to the sensitivity of personal data, to ensure data integrity and confidentiality, and to protect it against malicious intrusion, loss, alteration or disclosure to unauthorized third parties.

We carry out regular audits to check that data security rules are being properly applied at operational level.

We therefore undertake to take the physical, technical and organizational security measures necessary to :

- protect our activities,
- preserve the security of the personal data of our customers, partners, Internet users, suppliers and service providers

Against any unauthorized access, modification, distortion, disclosure, destruction or access to personal data held by us.

Nevertheless, the security and confidentiality of personal data depend on everyone's good practices, so we urge you to remain vigilant.

In accordance with our commitments, we choose our subcontractors and service providers carefully and require them to :

- A level of personal data protection equivalent to our own,
- The use of personal data or information solely to ensure the management of the services they are required to provide,
- Strict compliance with applicable legislation and regulations on confidentiality, banking secrecy and personal data,
- The implementation of all appropriate measures to ensure the protection of personal data they may be required to process,
- The definition of the technical and organizational measures necessary to ensure security.

We undertake to enter into contracts with our subcontractors, in accordance with legal requirements, which precisely define the terms and conditions of personal data processing.

11. International transfers

Your personal data may be transferred to countries outside the European Economic Area. When we store or transfer your personal data outside the European Economic Area, we take the necessary precautions to ensure that it is properly protected (standard contractual clauses).

12. Changes to this Privacy Policy

We may modify, update and/or replace this Privacy Policy, particularly in the event of changes in regulations concerning the protection of personal data. We recommend that you consult this Privacy Policy regularly to ensure that you are aware of the latest version.

13. How to contact us

If you have any questions or requests concerning our handling of your personal data, please contact us by e-mail at reception@lavillahaussmann.fr or by post at 132 boulevard Haussmann, 75008 PARIS.

©2019 LaVillaHaussmann LLC. All rights reserved.