1 – Personal data protection policy
Last update: [11-01-2023]
The Hoteliere and Tourist International Management Societe S G H T International, a limited liability company, whose headquarters are located in Pointe du Bout, 97229 Les Trois-Ilets, registered in the Fort-de-France Trade and Companies Register under number 444 197 800, (“Hotel Carayou”) is committed to respecting data confidentiality and compliance with privacy, and in particular compliance with the General Data Protection Regulations (EU 2016/679) or “GDPR” and “RGPD” and ” of the French law “Data Protection” of January 6, 1978 modified.
For any information on the protection of personal data, you can also consult the website of the National Commission for Data Protection www.cnil.fr.
The purpose of this personal data protection policy is to inform any person accessing and using the website accessible to the URL https://www.hotelcarayou.com/ (the “site”) belonging and operated by the hotel Carayou on the processing of your personal data carried out by the Hotel Carayou.
1/ Who is the controller of my personal data?
The Hotel Carayou intervenes as controller of personal data processed in the context of the use of the site. The identity and contact details of the controller are:
Hoteliere and tourism management company International S G H T International
Limited liability company registered in the Fort-de-France Trade and Companies Register under number 444 197 800, whose head office is located at Pointe du Bout, 97229 Les Trois-Ilets.
2/ Why are personal data concerning you collected and for what purposes?
Hotel Carayou is led to collect and process data from site visitors.
As part of the use of the Site, personal data (defined in article 3) of users, visitors, may be subject to treatments for the following purposes:
– to respond to your requests for information made through the site;
– to send you information letters if you have registered (Newsletters);
– to put you to book, pay a room and organize your stay;
– to provide better browsing and site use experience;
– To carry out statistical and performance of the site studies.
Hotel Carayou only collects adequate, relevant data and limited to what is necessary in view of the objectives for which they are dealt with.
These objectives are specific and legitimate and, in no case will your data be processed later in a way incompatible with these purposes, except to collect your agreement
prior.
3/ What data processed (data category)?
The categories of personal data from processed users are (hereinafter “personal data”):
1/ The personal data necessary for the provision of our services:
– your identity (first name* and surname*);
– your contact data (e-mail address* and telephone number*);
– Your banking data* For the needs of booking and/or payment, this data being managed by our payment provider.
*These data are compulsory for any reservation on the site.
2/ The data necessary for the use and improvement of the site:
– The way you browse the site;
– information relating to the equipment and peripherals used to access sites, including the type of device (desktop computer, laptop), the
operating system, the type of internet browser, the mobile device identifier and the mobile operating system, the IP or Mac address;
– your search requests on the site (if applicable);
– The way you browse the site;
– Order or sales history.
4/ What basis is these personal data concerning you processed (legal basis)?
The processing of your personal data is justified by different foundations (legal basis) according to the use of personal data. The different applicable legal bases
are :
– Consent: you accept the processing of your personal data through express consent (check box, click, etc.). You can withdraw this consent at any time.
– The legitimate interest: Hotel Carayou has a commercial interest in processing your data which is justified, balanced and does not come to infringe your privacy. Without exception,
You can oppose a treatment based on legitimate interest at any time by signaling it to Hotel Carayou.
– The law: the processing of your personal data is made compulsory by a law.
5/ Who are these personal data transmitted (recipients)?
Your personal data may be transmitted to subcontractors working for the Hotel Carayou as part of its activities (in particular third parties) and to ensure the proper functioning of the site. These providers are located within the European Union. If personal data were to be transmitted outside the European Union, Hotel Carayou will inform you beforehand and will take all measures so that such data transfers outside the European Union are supervised either by joining a Decision of adequacy of the European Commission, the conclusion of contractual contractual clauses of the European Commission or all other appropriate guarantees provided for in article 46 of the GDPR.
In addition, the personal data collected and processed may be transmitted:
• Persons authorized by the services concerned within the Hotel Carayou, in particular for the management of reservations;
• to our payment service provider, subcontractor, in charge of the reservation and payment process on the site;
• to administrative, judicial authorities and more generally to public bodies in the context of compliance with our legal obligations or to allow us to defend our rights and interests,
• As needed, our legal advice and lawyers,
• If we sell or assign our activity or part of it and your personal data relate to this part sold or assigned, or if we merger with another company, we will share your personal data with the new owner of the company or our merger partner.
6/ Standing duration
Personal contact data related to sending messages by email or SMS (electronic commercial prospecting) will be kept for three years from our last contact.
Personal data facilitating navigation on the site will be kept for the time necessary for the purposes for which it is collected, as it is specified in the cookie policy.
Financial transactions relating to reservations via the Site, are entrusted to a payment service provider which ensures its smooth running and security. For the purposes of the services, this payment service provider is recipient of the data from bank card numbers, which he collects and keeps on behalf of the Hotel Carayou.
These data is processed by the payment service provider exclusively for the processing/payment of reservations.
The conservation durations are as follows:
Card holder/card number: storage 10 days after the end of the stay
CVV: storage before the payment transaction to allow hotels to carry out the transaction (for security reasons, the CVV is only read once. It is
automatically erased after the 1st reading). Erasing the CVV when reading it and no later than 10 days after the end of the stay.
In any event, data relating to bank card numbers may be kept, for a purpose of evidence in the event of any dispute of the transaction, in
Intermediate archives, for the duration provided for in article L 133-24 of the Monetary and Financial Code, in this case thirteen (13) months following the date of debit.
After these deadlines, personal data is deleted.
7/ What security measures are taken?
The Hotel Carayou takes all adequate measures to ensure the security and confidentiality of the personal data processed.
The Hotel Carayou has implemented technical and organizational measures to protect personal data against accidental loss, destruction, deterioration, abuse, unauthorized or illegal damage.
Personal data being confidential, the Hotel Carayou limits their access to the company’s or service providers only as part of the execution of the execution of the
treatment.
All people with access to personal data are linked by a duty of confidentiality and are exposed to sanctions if they do not comply with these obligations.
When we use subcontractors, providers or we send personal data to partners, this communication is the subject of a contract in order to
to ensure the protection of this information.
Personal data related to payment is managed by a secure payment provider, certified with the PCI-DSS Level 1 protocol.
9/ Exercise of rights
In accordance with the regulations, you have the following rights:
• A right of access: the right to be informed about how personal data is processed and the right to obtain (i) confirmation that personal data is
Treaty by the Hotel Carayou and, if necessary (ii) to access this data and to obtain a copy;
• A right of rectification: the right to obtain the rectification of inaccurate personal data concerning and the right to supplement the incomplete data you
Regarding, by providing an additional declaration. In the event of the exercise of this right, Hotel Carayou undertakes to communicate any rectification to all
recipients of personal data;
• A right to erase: the right to obtain the erasure of his personal data.
However, this is not an absolute right and Hotel Carayou may for legal or legitimate reasons, keep user data;
• A right to limit processing: the right to obtain the limitation of processing on personal data;
• A right to portability: the right to receive personal data provided to Hotel Carayou, in a structured format, commonly used and readable by a machine, for personal use or to transmit them to a third party of his choice;
• A right of opposition to processing: the right to oppose the processing of personal data at any time for processing based on the legitimate interest of Hotel Carayou, a mission of public interest and those for commercial prospecting purposes . This is not an absolute right and Hotel Carayou may for legal or legitimate reasons refuse this request for opposition;
• The right to withdraw your consent at any time: the withdrawal of consent does not compromise the lawfulness of the treatments based on consent, carried out before this withdrawal;
• The right to submit a complaint to the CNIL: the right to contact the CNIL to formulate a complaint relating to the practices of Hotel Caeryou for the protection of personal data;
• The right to give directives relating to the fate of his data after his death:
The right to give directives to Hotel Carayou concerning the use of personal data in the event of death.
For example, you can unsubscribe from our newsletter at any time.
To exercise these rights or for any questions about the processing of your data in this device, Hotel Carayou invites you to use the following address: reservation@hotel-carayou.com.
If you consider, after contacting Hotel Carayou, that your rights “IT and freedoms” are not respected, you can send an online complaint to the CNIL on the site: www.cnil.fr.
