1. OUR COMMITMENT

Our ambition: to set the hotel industry in motion in order to grow together. Our goal is to set our offer in motion by breaking down the barriers between experiences serving the desires and aspirations of traveler customers, looking for your satisfaction. As part of our commitment, we present our policy related to the protection of your personal data. This policy describes our use of these sensitive information and the procedures and measures implemented by our Group to guarantee that your rights are respected.

2. THE SCOPE

In this policy, the terms "INDEVHO", "Group" or "Company" mean:

The purpose of this Data Protection Policy is to provide you with simple, clear and complete information on how INDEVHO processes the personal information that you transmit to us.

INDEVHO: hotels in motion!

INDEVHO is a player at the service of investment and hotel development. As such, we inform you that the hotel in which you book is not the property of the company INDEVHO. Most hotels are in fact operated under a management mandate concluded between the hotel owner and INDEVHO. This is why, when you stay in one of these hotels, your personal data is processed both by INDEVHO and by the hotel.

To summarize :

3. OUR PRINCIPLES IN THE PROTECTION OF YOUR PERSONAL DATA

In accordance with the regulations in force, in particular the General Data Protection Regulations adopted in Europe, we have established the following principles for the processing of your data within our Group:

4. WHAT PERSONAL DATA IS COLLECTED?

At various times, we are required to collect information about you or the people accompanying you, including:

5. FOR WHAT PURPOSES IS YOUR DATA COLLECTED AND FOR WHAT TIME ARE THEY SAVED?

Objective(s) Basis for processing The duration of the conversation
Managing room and accommodation reservations Processing necessary for the performance of the contract binding us 3 years from the date you were last active with us in any way.
Completing the police form if you are a foreigner Legal obligation 6 months
Completing the check-in form upon arrival at the hotel Execution of the contract 3 years from the date you were last active with us in any way.
Management of the various services offered during your stay (reservation at the spa, sale of ski pass, etc.) Execution of the contract Consent Duration of your stay
Sending of satisfaction questionnaire or to collect your expectations on your stay and your comments following it Consent 3 years from the date you were last active with us in any way.
Sending you newsletters, promotions and tourist, hotel or service offers and / or contact you by phone Consent 3 years from the date you were last active with us in any way.
Personalizing customer reception at the hotel, improve the quality of your service and your experience Processing necessary for the execution of the contract binding us 3 years from the date you were last active with us in any way.
Managing complaints Legal obligation 6 years from the closing date of your file in the context of a complaint or complaint.
Securing and improve your use of INDEVHO websites, in particular: improvement of navigation, assistance and maintenance and implementation of security and fraud prevention measures. Processing necessary for the pursuit of our legitimate interest consisting in managing our activities, providing IT, administration and network security services in order to prevent fraud. 13 months from the collection of information.
Securing goods and people and fighting unpaid videos Processing necessary for the pursuit of our legitimate interest consisting in managing our activities, securing goods and people and combating arrears. 30 days
Using the services necessary to find the identity of people present in the Group's hotels, particularly in the event of serious events affecting the establishment concerned (natural disasters, attacks, etc.). Treatment necessary to protect the vital interests of customers. For the duration of the event.
Complying with all applicable laws, including: Management of unsubscribe requests to newsletters, promotions, tourist offers and satisfaction surveys Management of requests from data subjects for the protection of their personal data. Retention of accounting documents Processing necessary to comply with a legal obligation. For the entire duration fixed in the applicable legislation.

6. CONDITIONS OF ACCESS BY THIRD PARTIES TO YOUR PERSONAL DATA

We must share your personal data with internal and external recipients, under the following conditions:

Local authorities: we may also be required to transmit your information to local authorities, if required by law or within the framework of an investigation and in accordance with local regulations.

7. PROTECTION OF YOUR PERSONAL DATA DURING INTERNATIONAL TRANSFERS

For the purposes indicated in article 6, INDEVHO endeavors to keep your personal data in France, or at least within the European Economic Area (EEA). When we transfer your personal data to recipients located outside the EEA, we guarantee that the transfer is carried out:

8. DATA SECURITY

INDEVHO takes the appropriate technical and organizational measures, in accordance with the applicable legal provisions (in particular article 32 of the GDPR), to protect your personal data against destruction, loss or alteration, misuse and unauthorized access. authorized, modification or disclosure, whether these actions are unlawful or accidental. To this end, we have implemented technical measures (such as firewalls) and organizational measures (such as an identifier / password system, means of physical protection, etc.) in order to '' ensure constant confidentiality, integrity, availability and resilience of processing systems and services. When you transmit your credit card information during your reservation, SSL (Secure Socket Layer) encryption technology helps secure your transactions. Organizational measures ensure the security of processing.

9. COOKIES AND OTHER TRACKERS

What is a cookie ?

A cookie is a small text file placed in the directories of the browser on your computer, tablet or mobile phone. Cookies can be placed on your device when you visit a website and can have several objectives such as ensuring the proper functioning of websites and obtaining information on the habits of visitors. When browsing the INDEVHO and hotels websites, you can decide whether or not to allow the deposit of cookies on your computer.

How to configure cookies ?

The setting of cookies is done directly via your Internet browser and, depending on the type of browser used, allows you to choose the systematic refusal of cookies during browsing or their authorization on a case-by-case basis. To find out about the configuration to follow, see the dedicated page on the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

10. YOUR RIGHTS

You have the right to obtain information and access your personal data collected by INDEVHO, subject to the applicable legal provisions. You also have the right to have your data corrected, to have it erased or to limit its processing. In addition, you have the right to the portability of your data and the right to define instructions for the processing of your data on your death. You can also object to the processing of your data, in particular to object to the fact that data concerning you relating to your stays, your preferences and your satisfaction are shared between the Group's establishments. If you wish to exercise these rights, contact the department responsible for personal data directly by email at contact.dpo@indevho.com or by writing to the following address:

INDEVHO SAS
A l’attention du Délégué à la Protection des Données
Domaine de la vallée verte
Rue de la Vallée verte Bâtiment Bourbon 1
13011 MARSEILLE

In the interests of confidentiality and the protection of your personal data, we will have to identify you in order to respond to your request. For this, in case of reasonable doubts about your identity, you may be asked to enclose with the support of your request, a copy of an official identity document (CNI, permit, passport) You can also exercise your rights with regard to your personal data stored and processed by a hotel in its capacity as data controller. To do this, you must contact this hotel directly. For any assistance in your efforts, please write to the Personal Data Protection Department at contact.dpo@indevho.com or at the postal address above. If you believe that your rights have not been respected or that an answer provided by INDEVHO is not satisfactory, you can lodge a complaint with the CNIL.

11. UPDATES

We can modify this policy and invite you to consult it regularly, in particular when you make a reservation in one of our hotels.

12. QUESTIONS AND CONTACTS

For any questions concerning the personal data policy within the Group, please contact the Personal Data Protection Department (see article 10 "Your rights").

Latest version: December 5, 2019