Privacy Policy

https://villa-roland-en-bourgogne.fr

José et Christelle ACEITUNO

Type of site: rental of 4-star furnished tourist accommodation

The purpose of this privacy policy

The purpose of this Privacy Policy is to inform users of our site about the personal data we collect, as well as the following information, where applicable:

• The personal data we collect,
• How the data we collect is used,
• Who has access to the data we collect,
• The rights of website users,
• The website’s cookie policy.

This Privacy Policy operates alongside our Site Terms of Use.

Applicable law

In accordance with the General Data Protection Regulation (GDPR), this Privacy Policy complies with the following regulation.

Personal data must be:

• Processed lawfully, fairly, and in a transparent manner, with respect to the data subject (lawfulness, fairness, transparency).
• Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes is not considered incompatible with the initial purposes (purpose limitation) pursuant to Article 89(1).
• Adequate, relevant, and limited to what is necessary for the purposes for which they are processed (data minimization).
• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that is inaccurate, in relation to the purposes for which it is processed, is erased or rectified without delay (accuracy).
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed. Personal data may be stored for longer periods if they are processed exclusively for archiving purposes in the public interest, for scientific or historical research purposes, for statistical purposes, in accordance with Article 89(1), provided that appropriate technical and organisational measures required by the Regulation are implemented to safeguard the rights and freedoms of the data subject (retention limitation).
• Processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality).

Processing shall be lawful only if and to the extent that at least one of the following applies:

• The data subject has consented to the processing of their personal data for one or more specific purposes.
• The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject’s request prior to entering into a contract.
• The processing is necessary for compliance with a legal obligation to which the controller is subject.

• The processing is necessary to protect the vital interests of the data subject or of another natural person.
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Consent

Users agree that by using our site, they consent to:

• Under the conditions set forth in this privacy policy.
• To the collection, use, and retention of data listed in this policy.

Personal data collected

We do not collect any data automatically on our site except when you perform certain functions on our site via our contact or online reservation form:

• First name and surname
• E-mail,
• Phone number
• Home address

Please note that we only collect data that helps us achieve the purpose stated in this privacy policy. We do not collect additional data without first informing you.

How we use personal data

Personal data collected on our website will only be used for the purposes specified in the previous policy or as indicated on the relevant pages of our website. We will not use your data beyond what we disclose.

The data we collect when the user performs certain functions on the website may be used to communicate or complete an online registration.

Who we share personal data with

We may disclose to any member of our organization the user data they reasonably need to achieve the purposes set out in this policy.

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.

We undertake not to sell or share your data with third parties, except in the following cases:

• If required by law,
• If required for any legal proceedings,
• To prove or protect our legal rights,

If you follow hyperlinks on our site to another site, please note that we are not responsible for, and have no control over, their privacy policies and practices.

How long we store personal data

We do not retain user data beyond what is necessary to achieve the purposes for which it is collected.

How we protect your personal data

All data stored in our system is secure and accessible only to our employees. Our employees are bound by strict confidentiality agreements, and any breach of this agreement would result in immediate termination of our collaboration.

While we take all reasonable precautions to ensure that our user data is secure and users are protected, there always remains a risk of harm. The internet as a whole can, at times, be insecure and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

International data transfers

User data may be used, accessed, processed or collected only from France.

Youngs

The GDPR specifies that individuals under the age of 18 are considered minors for the purposes of data collection. Minors must have the consent of a legal adult for their data to be collected, processed, and used.

Your rights as a user

Under the GDPR, users have the following rights as a data subject:

• Right of access,
• Right of rectification,
• Right to erasure,
• Right to restrict processing,
• Right to data portability,
• Right to object.

Further information on these rights can be found in Chapter 3 (Article 12–23) of the GDPR.

How to modify, delete or contest the data collected

If you would like your information to be deleted or modified in any way, please contact Christian Buisson using the following email address:

contact@villa-roland-en-bourgogne.fr