1. Object
The purpose of this personal data protection policy (hereinafter the “Policy”) is to inform Data Subjects of the manner in which Data is collected and processed by the Publisher, and to inform them of their rights and the means of exercising them made available by the Publisher.
Data controller
For all browsing and purchases on the Site, the Data Controller is “Capucine”.
2. Treatment
Purposes of Processing
As part of the operation of the Site, the Publisher collects and processes data in accordance with the purposes set out at the time of collection, namely :
- Statistical studies on navigation,
- The creation and smooth operation of the personal space,
- Management of orders placed through the site,
- Cookie management,
- Management of contacts made via the contact form.
Processed data
As part of the collection process, the Publisher may collect the following data:
Identity: surname, first names, e-mail address, address, cell phone number. Data that must be communicated to the Publisher's services are indicated as such.
Data is collected by filling in the appropriate fields, or via cookies that have been previously accepted.
For online payment of purchases, the Publisher does not collect or process any bank details.
It is processed exclusively and directly by the secure payment service set up by the Publisher, the conditions of which are available on its website:
www.apparthotel-capucine.com
The purpose of collecting Data is to ensure the proper operation of the Site and to monitor orders placed through it.
Only the data necessary for this purpose is collected and processed.
3. Data security
Processed data is stored securely, and access to it is strictly controlled and restricted to those who need to access it.
All data access is subject to access to a specialized, secure module, protected by strong technical measures and passwords.
4. Data recipients
In accordance with regulations, the Publisher has implemented state-of-the-art organizational and technical measures to preserve the security, integrity and confidentiality of Data, and to prevent unauthorized access.
The Recipients are the Publisher and its employees who have an interest in consulting the Data.
5. Data transferred to public authorities and/or bodies
In accordance with regulations, Data may be transmitted to the competent authorities upon reasoned request, and in particular to public bodies, exclusively in order to meet legal obligations, judicial officers, ministerial officers and bodies responsible for debt collection.
6. Shelf life
Data relating to accounts or orders are not kept for more than two years from the last connection to the Account, or from the order.
By way of exception, in application of the relevant regulations, accounting data, particularly relating to invoicing, will be kept in archive form for 10 years from the date of invoicing.
7. Rights of persons concerned
Data Subjects have the right to access, the right to rectify, the right to erasure (the right to be forgotten), the right to object, the right to limit processing and the right to portability of their Data.
These rights may be exercised, in accordance with law no. 78-17 of January 6, 1978 as amended, and the RGPD.
- by e-mail to the following address: contact@apparthotel-capucine.com
- by post to the Publisher's address
- via the contact page on the Site.
Proof of identity may be requested when processing an application.
Subject to a breach of the provisions below, the User has the right to lodge a complaint with the CNIL. (https://www.cnil.fr).
8. Data transfer
As a matter of principle, the Data collected on the site is reserved exclusively for the Publisher.
However, in the case of orders placed via the Site, the Data of the Persons concerned may be transmitted to the Publisher's logistics partners (delivery and shipping services). The legal basis for this transfer is the sales contract.
Furthermore, before any transfer of Data to third parties, the consent of the Data Subject will be obtained.
However, the Publisher reserves the right to transfer Data in order to comply with its legal obligations, and in particular if required to do so by a court order.
9. Security
The Publisher attaches particular importance to the protection of the personal data of its users and partners, but must rely on their active collaboration to enable the Data to be protected. The Publisher therefore recommends the systematic use of strong passwords. (For further information, please refer to the : https://www.ssi.gouv.fr/guide/mot-de-passe).
10. Cookies
A cookie is a small file stored by a server on a user's terminal (computer, telephone, etc.) and associated with a web domain (i.e. in most cases, with all the pages of a single website). This file is automatically sent back when the user contacts the same domain again.
Cookies have many uses: they can be used to memorize your customer ID with a merchant site, the current contents of your shopping cart, the language in which the web page is displayed, an identifier enabling your browsing to be tracked for statistical or advertising purposes, etc.
There are several types of cookies:
- Necessary” internal cookies are used to record information between two visits to the same website on the same device. They are used to save shopping baskets, connection identifiers and interface personalization elements. They do not require user consent.
- Statistical” cookies enable us to track a user's actions on a website. When the statistics are anonymous (i.e. do not allow a person to be identified), the user's consent is not required.
- Internal” or ‘first-party’ cookies are deposited by the site consulted. They may be deposited in addition to the necessary cookies, and may be used to collect personal data, track user behavior and serve advertising purposes.
Third-party” cookies are cookies placed by (or for) a site B (often an advertising agency) on a site A: this enables site B to see which pages a user has visited on site A, and to collect information about him or her.
The information stored on the terminal is theoretically limited to the domain being visited. In practice, this is not only the case for “first-party” cookies deposited by the main domain. In fact, web pages can incorporate content from other domains.
All non-essential cookies are subject to acceptance at the time of connection to the Site.
Essential cookies are destroyed at the end of browsing, and are not used to collect Data.
The length of time cookies are retained varies according to the type of cookie.
For the proper operation of the Website, BOONDOOA/Capucine may place cookies in the Visitor's browser.
For statistical purposes, BOONDOOA/Capucine et le nom de votre client may collect browsing information through the use of cookies.
Visitors are free to accept or refuse cookies by configuring their browser (deactivation of all or some cookies - see web browser manual or help function).
The deactivation of cookies may result in the unavailability of certain Site Services.
Visitors may also delete cookies, or cookies already stored on their computer, at any time by configuring the privacy options of their Internet browser.
The CNIL website also explains how to manage and delete cookies on your browser.
These explanations are available at the following address: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
Any cookies deposited will remain active for a maximum of thirteen (13) months.
The maximum retention period for Data resulting from their use is 25 months.