1. Purpose
This personal data protection policy (hereinafter the "Policy") aims to inform Data Subjects about how Data is collected and processed by the Publisher, and to inform them of their rights and the means of exercising them made available by the Publisher.
Data Controller
For any browsing or purchases on the Website, the Data Controller is SAS La Bergerie.
2. Processing
Purposes of Processing
As part of operating the Website, the Publisher collects and processes Data in accordance with the purposes provided at the time of collection, namely:
- Conducting statistical studies on website navigation,
- Creating and ensuring the proper operation of personal accounts,
- Managing orders placed via the Website,
- Managing cookies,
- Handling inquiries submitted through the designated contact form.
Data Collected
During data collection, the Publisher may collect the following Data:
Identity: name, first name, email address, postal address, mobile phone number. Data required by the Publisher’s services are clearly indicated.
Collection methods include filling in designated fields or collection via cookies that have been previously accepted.
For online payment of purchases, banking data transmitted is not collected by the Publisher and is not processed by it.
Such data is exclusively and securely processed directly by the secure payment service implemented by the Publisher, with conditions available on its website:
https://www.hotel-bergerie.com/
The purpose of collecting this Data is to ensure proper operation of the Website and the tracking of orders placed through it.
Only the data necessary for this purpose is collected and processed.
3. Data Security
Processed data is securely stored and access is strictly controlled, restricted to authorized personnel only.
All access to data is via a secure specialized module, protected by technical measures and strong passwords.
4. Recipients of Data
In accordance with regulations, the Publisher has implemented state-of-the-art organizational and technical measures to preserve the security, integrity, and confidentiality of Data, and to prevent unauthorized access.
Recipients are the Publisher and its employees who have a legitimate need to access the Data.
5. Data Transferred to Authorities and/or Public Bodies
In accordance with regulations, Data may be transferred to competent authorities upon justified request, including public bodies, exclusively to fulfill legal obligations, justice auxiliaries, court officers, and agencies responsible for debt collection.
6. Retention Periods
Data related to accounts or orders is not retained beyond two years from the last account login or order.
Exceptionally, in accordance with applicable regulations, accounting data, including invoicing, will be archived for 10 years from the invoice date.
7. Rights of Data Subjects
Data Subjects have rights of access, rectification, erasure (right to be forgotten), objection, restriction of processing, and data portability.
These rights can be exercised in accordance with Law No. 78-17 of 6 January 1978 as amended, and the GDPR.
- By simple request via email to: info@hotel-bergerie.com
- By postal mail to the Publisher’s address
- Via the contact page on the Website.
When processing a request, proof of identity may be required.
Subject to non-compliance with the provisions below, the User has the right to file a complaint with the CNIL (https://www.cnil.fr).
8. Data Transfer
As a general rule, Data collected on the website is reserved exclusively for the Publisher.
However, in the case of an order placed through the Website, Data of Data Subjects may be transferred to the Publisher’s logistical partners (delivery and shipping services). The legal basis for this transfer is the sales contract.
Furthermore, before any transfer of Data to third parties, the consent of the Data Subject will be obtained.
Nonetheless, the Publisher reserves the right to transfer Data to comply with legal obligations, including if required by judicial order.
9. Security
The Publisher attaches particular importance to protecting the personal data of its users and partners but relies on their active cooperation to ensure Data protection. The Publisher therefore recommends, in particular, the systematic use of strong passwords. (For more information, see the guide: https://www.ssi.gouv.fr/guide/mot-de-passe).
10. Cookies
A cookie is a small file stored by a server on a user’s device (computer, phone, etc.) and associated with a web domain (usually all pages of the same website). This file is automatically sent back during subsequent interactions with the same domain.
Cookies have multiple uses: they can store your client ID on an e-commerce site, the current contents of your shopping cart, the language of the web page, an identifier for tracking your navigation for statistical or advertising purposes, etc.
There are several types of cookies:
- “Necessary” cookies, internal, allow storing information between two visits on the same device. They can store a shopping cart, login credentials, or interface personalization elements. No consent is required from the user.
- “Statistical” cookies track actions of a user on a website. When statistics are anonymous (i.e., cannot identify an individual), user consent is not required.
- “Internal” or “first-party” cookies are set by the site being visited. They may be set in addition to necessary cookies and can be used to collect personal data, track user behavior, or serve advertising purposes.
“Third-party” cookies are set by (or for) a site B (often an ad network) on site A: this allows site B to see which pages were visited on site A and collect information about the user.
The information stored on the device is theoretically limited to the current domain. In practice, this is not only the case for first-party cookies set by the main domain, as web pages may include content from other domains.
All non-essential cookies require consent before being set on the Website.
Essential cookies are deleted at the end of the session and are not used for Data collection.
Cookie retention duration varies by type.
For proper operation of the Website, BOONDOOA/SAS La Bergerie may set cookies in the Visitor’s browser.
For statistical purposes, BOONDOOA/SAS La Bergerie and your client’s name may collect browsing information via cookies.
Visitors are free to accept or refuse cookies by configuring their browser (disable all or part of cookies – see browser manual or help function).
Disabling cookies may render some Website Services unavailable.
Visitors can also delete stored cookies at any time using their browser’s privacy settings.
The CNIL website also provides instructions on managing and deleting cookies.
These explanations are available at: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
Cookies, if set, have a maximum lifespan of thirteen (13) months.
The maximum retention period for Data resulting from their use is 25 months.
11. Telephone Solicitation
La Bergerie does not engage in telephone solicitation. However, we inform you of your right to register on the opt-out list for telephone solicitation and suggest registering on Bloctel. Bloctel is the opposition list for telephone solicitation, on which any consumer can register for free to no longer be solicited by a professional with whom they have no ongoing contractual relationship, in accordance with Law No. 2014-344 of 17 March 2014 on consumer protection. The law specifies that it is prohibited for any professional, directly or through a third party acting on their behalf, to solicit a consumer registered on this list, except in cases enumerated by law.
For more information: http://www.bloctel.gouv.fr/
To register: https://conso.bloctel.fr/