Contents
Article 1. What is the purpose of the Personal Data Management Policy?
I. PERSONAL DATA
Article 2. What is personal data?
Article 3. What personal data does Maisons & Hôtels Sibuet collect, and for what purposes?
Article 4. Who has access to the User’s personal data?
Article 5. What are Users’ rights regarding the personal data collected?
Article 6. How long is personal data retained?
Article 7. What measures are in place to protect Users’ personal data?
II. COOKIES
Article 10. What is a cookie?
Article 11. What tracking systems does Maisons & Hôtels Sibuet use, and for what purposes?
Article 12. How can cookies be enabled or disabled?
III. CHANGES TO THE PRIVACY POLICY
Personal Data Management
Article 1. What is the purpose of the Personal Data Management Policy?
The purpose of this Personal Data Management Policy is to inform Users about how Maisons & Hôtels Sibuet manages the personal data of users of its websites, whether or not they are customers (hereinafter “Users”).
I. PERSONAL DATA
Article 2. What Is Personal Data?
Under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, personal data means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.”
Article 3. What personal data does Maisons & Hôtels Sibuet collect, and for what purposes?
Maisons & Hôtels Sibuet collects personal data on the following websites (hereinafter “the Sites”):
Hotels, vacation homes, restaurants, spas, delicatessens, online booking sites, and online stores:
- https://www.fermesdemarie.com/
- https://www.hotelmontblanc.com/
- https://www.chaletsdesfermes.com/
https://www.epiceriedesfermes.com/
- https://www.labastidedemarie.com
- https://saint-tropez.villamarie.fr
- https://saint-barth.villamarie.fr
- https://booking.groupe-sibuet.com
- https://shop.experience-sibuet.com
Wine estate and online store:
- https://www.domainedemarie.com
- http://boutique.domainedemarie.com
Skincare and online store:
- https://www.pure-altitude.com
- https://boutique.pure-altitude.com
Recruitment site:
- http://www.recrutement-sibuet.com
PERSONAL DATA COLLECTED THROUGH THE WEBSITES OF THE MAISONS & HÔTELS SIBUET BRAND
Purpose: To allow users to receive exclusive offers from each of our hotels.
• Data collected: email address
• Legal basis: performance of a contract. Necessary for our legitimate interests (to enable the user to receive our best offers on the site).
Purpose: to allow the user to be contacted by our reservations, concierge, marketing, or press departments, or by the sales department of Domaine de Marie or Pure Altitude (depending on the nature of the request).
• Data collected: last name, first name, email address, phone number (optional)
• Legal basis: performance of a contract. Necessary for our legitimate interests (to answer our customers’ questions, tailor our offers to their expectations, and grow our business)
Purpose: to allow users to make a reservation and pay for it online
• Data collected: last name, first name, email address, mailing address, phone number, credit card information, expiration date, CVV code
• Legal basis: performance of a contract. Necessary for our legitimate interests (to book services, promote our products and services, develop them, and grow our business)
Purpose: To enable our hotels and departments to communicate with guests at various points during their stay.
- Personalizing the stay, preparing for arrival
- Sending a satisfaction survey at the end of the stay
- Promotional and administrative communications, specifically:
• Sending important information about our facilities
• Information about changes to our terms and conditions and our privacy policy
• Sending administrative information about travel reservations, such as reservation confirmations and communications prior to arrival at a Maisons & Hôtels Sibuet hotel
• Measuring the effectiveness of our marketing and sales activities
• Developing our products and services by gaining a better understanding of our customers’ expectations
• Data collected: last name, first name, email address, mailing address, phone number
• Legal basis: performance of a contract. Necessary for our legitimate interests (to book services, promote our products and services, develop them, and grow our business)
PERSONAL DATA COLLECTED THROUGH THE ONLINE STORES OF THE MAISONS & HÔTELS SIBUET BRAND
- https://shop.experience-sibuet.com
- http://boutique.domainedemarie.com
- https://boutique.pure-altitude.com
Purpose: To allow users to create an account and log in to our online stores in order to:
- Manage shopping carts, gift certificates, etc.
- Track orders, returns, alerts, etc.
- Be contacted
- Manage personal information
- Subscribe to newsletters published by Maisons & Hôtels Sibuet
• Data collected: title, last name, first name, email address, date of birth (optional), password
• Legal basis: performance of a contract. Necessary for our legitimate interests (to purchase products or book services, promote our products and services, develop them, and grow our business)
On each data collection form, fields marked with an asterisk are required. Otherwise, the User will not be able to access the services offered on our websites.
PERSONAL DATA COLLECTED THROUGH THE WEBSITE WWW.RECRUTEMENT-SIBUET.COM
Purposes: to allow the User to submit an unsolicited application for a position at Maisons & Hôtels Sibuet, and to allow Maisons & Hôtels Sibuet to contact the User if their application is shortlisted.
• Data collected: resume, cover letter, title, last name, first name, email address, cell phone number
• Legal basis: necessary for our legitimate interests (to contact a person whose profile matches a position within the company)
Purpose: To allow users to apply for a specific job posting on the website http://www.recrutement-sibuet.com/
• Data collected: resume, cover letter, title, last name, first name, email address, cell phone number
• Legal basis: necessary for our legitimate interests (to contact a person whose profile matches a position within the company)
Fields marked with an asterisk are required. Otherwise, the user will not be able to submit applications on the website www.recrutement-sibuet.com.
Article 4. Who has access to the User’s personal data?
The only recipients of Users’ personal data are:
- the relevant departments and employees of Maisons & Hôtels Sibuet (in particular IT, sales/marketing, and operations);
- the companies that assist Maisons & Hôtels Sibuet in operating the sites, particularly the departments and employees of the company hosting the sites. These companies are:
- Amazon Web Services, Inc. P.O. Box 81226 Seattle, WA 98108-1226, http://aws.amazon.com
- Opwan, 150, Rue Pierre et Marie Curie 34430 Saint Jean de Vedas, www.opwan.com
- Our hotels' subcontractors, for example:
• Ski schools
• Activity organizers (dog sledding, paragliding, yoga classes, etc.)
• Partner Restaurants
• Partner shuttles and taxis
- • …
These organizations receive only the personal information strictly necessary to process reservations and, where applicable, contact customers.
Article 5. What are users’ rights regarding the personal data collected?
The User has the rights set forth in Chapter III of the GDPR, including the following:
- The right to access their personal data collected on the Website and through the Application,
- The right to modify or correct it,
- Right to erasure (“right to be forgotten”), unless there is a legal reason requiring us to retain the data,
- Right to restriction of processing, i.e., the right to ask us, in certain cases, to suspend the processing of personal data,
- Right to data portability, i.e., the right to request a copy of their personal data in a common format (for example, a .csv file),
- Right to object to the processing of personal data,
- Rights related to individual decision-making and profiling, i.e., the right to ask us to be transparent about any profiling we conduct or any automated decision-making,
All of these rights may be exercised:
- for all Maisons & Hôtels websites that request personal information (registration forms, contact requests, booking confirmations, etc.), by sending an email to privacy@mhsibuet.com.
- for the website http://www.recrutement-sibuet.com/: by sending an email to privacy@mhsibuet.com.
Users are reminded that they can:
- access and modify their contact information and login credentials on the websites:
- https://www.experience-sibuet.com
- https://booking.groupe-sibuet.com
- https://shop.experience-sibuet.com
- http://boutique.domainedemarie.com
- https://boutique.pure-altitude.com
through the “My Profile” and “My Personal Information” sections;
The User also has the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority for data protection matters in France (www.cnil.fr). However, Maisons & Hôtels Sibuet would appreciate the opportunity to address your concerns before you contact the CNIL, so please contact us first.
Article 6. How long is personal data retained?
- Stay and purchase history: The personal data of customers who have not booked, stayed, or made a purchase at one of our establishments is deleted after 3 years. Purchase data and stay history are anonymized and used solely for statistical purposes.
- Bank details: Credit card numbers are automatically deleted one day after the customer's departure.
- Information about other guests during the stay: The personal data of guests who have not booked, stayed, or made a purchase at one of our properties is deleted after 3 years.
- Billing data: Invoices are archived for 5 years.
- Satisfaction survey responses: These are retained in their original, identifiable form for 3 years and then used anonymously for statistical purposes.
- Recruitment data: Resumes of unsuccessful candidates are retained for 3 years.
Article 7. How is personal data protected?
Maisons & Hôtels Sibuet takes the security of personal data very seriously and takes all reasonable precautions to prevent any unauthorized access to, or disclosure, alteration, or destruction of, personal data.
The personal data collected is stored by Maisons & Hôtels Sibuet or its service providers and is protected by physical and electronic access controls, firewall technologies, and other reasonable security measures.
However, such measures cannot prevent all risks of loss, unauthorized access, misuse, or alteration of the personal information collected. Where required by law, Maisons & Hôtels Sibuet will notify the User of any loss, unauthorized access, misuse, or alteration of their personal data so that they can take the appropriate steps to exercise their rights. Maisons & Hôtels Sibuet will notify the User electronically, by mail, or by telephone, where permitted by law.
Users are advised not to send payment information or sensitive information via email or in sections not intended for that purpose (for example, sending a credit card number via email).
You can choose which personal data you wish to provide to us.
However, your decision not to provide certain information may affect your experience with our services. For example, we cannot make anonymous reservations, and if we are not authorized to disclose your personal information to the hotels in our group, we may be unable to provide certain reservation or other services.
Similarly, if you do not authorize us to disclose your personal data to third parties, such as our hotels’ subcontractors (ski schools, car rental companies, etc.), we may not be able to provide the full range of available services, or the provision of these services may be delayed. We will make every effort to respond to your request as quickly as possible.
II. COOKIES
Article 10. What is a cookie?
According to the Commission Nationale de l'Informatique et des Libertés, a cookie is a piece of information placed on the user’s device by the server of the website or application they are visiting.
A cookie contains several pieces of data:
- the name of the server that posted it,
- an identifier in the form of a unique number,
- possibly an expiration date.
This information is sometimes stored on a device in a plain text file, which a server accesses to read and record information.
Article 11. What tracking systems does Maisons & Hôtels Sibuet use, and for what purposes?
The User is informed that Maisons & Hôtels Sibuet uses the following tracking tools:
Maisons & Hôtels Sibuet websites, online services, interactive applications, email messages, and advertisements may use “cookies” and other technologies such as pixel tags and web beacons.
These technologies help us better understand user behavior, show us which parts of our websites have been visited, and facilitate and measure the effectiveness of advertising and web searches.
We treat information collected by cookies and other technologies as non-personal information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information under local law, we also treat these identifiers as personal information.
Similarly, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this privacy policy.
Maisons & Hôtels Sibuet also uses cookies and other technologies to remember personal information when you use our website, online services, and applications.
Our goal in these cases is to make your experience more convenient and personalized. For example, knowing your country and language helps us provide a personalized and more useful marketing experience.
We use this information to understand and analyze trends, administer the site, understand user behavior on the site, improve our products and services, and gather demographic information about our user base as a whole. Maisons & Hôtels Sibuet may use this information in its marketing and advertising activities.
Pixel tags allow us to deliver targeted advertising messages in a format that customers can read. We may use the information collected to reduce or eliminate the messages sent to customers.
The User is informed that they have the right to access their personal data related to cookies at any time, as well as the right to object, allowing them to choose at any time whether or not to accept cookies.
However, if the User does not accept cookies, the Services (and in particular browsing the Sites) may not function properly.
For "Facebook" cookies, Maisons & Hôtels Sibuet obtains the user's prior consent.
Article 12. How can cookies be enabled or disabled?
Users can manage, disable, and enable cookies at any time by configuring their web browser. For example:
- On an Apple smartphone or tablet: Go to Settings, then select the browser in question / Accept cookies / Never / or From visited sites / or Always.
- On an Android smartphone: After opening the browser, press the menu button (at the bottom left of the mobile device) / More / Settings / Choose whether to accept cookies or not.
- on a computer:
• Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
• Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
• Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
• Opera: http://help.opera.com/Windows/10.20/fr/cookies.html
For more information on managing and disabling cookies, users can refer to their browser's help section.
If the User has any difficulty exercising their right of access or objection regarding cookies, they may contact Maisons & Hôtels Sibuet at: privacy@mhsibuet.com
The maximum lifespan of a cookie is thirteen months.
III. CHANGES TO THE PRIVACY POLICY
Maisons & Hôtels Sibuet reserves the right to change, modify, or revise this policy at any time.
This document was last updated on February 12, 2019.
In the event of a significant change to this policy, we will post a notice on the Sites indicating that our privacy policy has been updated.
If we make material changes to the way we use your personal data, we will notify you by email at the address listed in your account (where applicable) or by posting a notice on the home page of our Sites, and we will give you the option to opt out of this new use.
Any changes to this privacy policy will take effect when they are posted on the Sites.
Your continued use of our Sites after these changes take effect constitutes your acceptance of this privacy policy under the newly published terms.
.png)
.png)
.png)
-Simon-Garnier_150114_001.jpg)
.png)
.png)
