CASTLE HOTEL RESTAURANT

Privacy Statements

Our vision of personal data protection

Given the relationship of trust that exists between Le Château Laroche Ploquin, its clients and partners, Le Château Laroche Ploquin have decided to define a data protection policy in accordance with the requirements of the European Regulation on the protection of personal data (RGPD or GDPR).

Château Laroche Ploquin is committed to protecting the privacy of its clients and partners (the persons concerned), by ensuring the protection, confidentiality and security of the personal data collected.

Château Laroche Ploquin wishes to concentrate in a single document clear, simple and precise information concerning the processing of data that they are required to carry out so that each data subject can understand what information, personal data (hereinafter referred to as "personal data") are collected, how they are used and what their rights are.

Château Laroche Ploquin have also appointed an internal relay and an external data protection delegate (DPO). They can be contacted by any interested person at the following postal address: "Service DPO, Le Château Laroche Ploquin" or at the following e-mail address: "reservation@larocheploquin.com".

The designated external DPO is Lexing - Alain Bensoussan Avocats.

1. Definitions of the terms

- This collection may be carried out at the time of booking, during the stay(s), or during contractual relations between Château Laroche Ploquin and the persons concerned;

- : "consent" means any free, specific, specific, informed and unequivocal expression of will by which the data subject accepts, by a clear declaration or positive act, that personal data relating to him or her may be processed;

- "partners" refers, in the broadest sense, in particular service providers, subcontractors, intermediaries and service providers, working in relation with Le Château Laroche Ploquin;

- "products or services" refers to all products and services, including technological products and services (sites, applications and associated services) offered or to be offered by Le Château Laroche Ploquin;

- "prospect" refers to any person who has contacted Le Château Laroche Ploquin to obtain information on a product or service offered by Le Château Laroche Ploquin;

- "controller" means the person or body which, alone or jointly, determines the purposes and methods of processing your personal data;

- : "online services" refers to digital services offered by Le Château Laroche Ploquin such as a website, applications, or associated services;

2. The context of personal data collection

Personal data may be collected mainly for the purpose of:

- the use by the person concerned of Château Laroche Ploquin products and services, including technological services (website, application, and associated services);

- the provision of products or services to meet specific customer requests

- the relationship between Le Château Laroche Ploquin and its prospects, clients and partners;

- the execution of legal obligations or regulations specific to the activities of Château Laroche Ploquin and having an impact on the protection of personal data (police records for foreign clients, tourist taxes, tax obligations, audit obligations, or the fight against fraud, the fight against money laundering and terrorist financing, judicial requisition, etc.);

- as well as those relating to the management of the commercial relationship, in particular in the event of complaints or satisfaction surveys;...

3. The categories of data processed by Le Château Laroche Ploquin

Personal data refers to any information relating to a natural person who can be identified directly or indirectly.

Personal data may include: first and last name, telephone number, photograph, video recording, postal address, e-mail address, function, hobbies, location data, IP address of an individual's computer.

Among the data collected by Le Château Laroche Ploquin, the following main categories exist:

3.1

Declarative personal data are those provided by the persons concerned and collected by Le Château Laroche Ploquin in the context of commercial or contractual relations.

The data come mainly from the persons concerned, from persons authorized by the persons concerned to transmit them to Château Laroche Ploquin.

For example, the data subject may be required to provide personal data relating to his or her preferences (e. g. food or press), family, economic, property and financial situation, or which may potentially allow information relating to health, religious affiliation (food allergy, accessories for the practice of a religion) to be deduced.

Personal data may also be collected as part of the hosting service.

3.2 Personal data relating to the operation of Château Laroche Ploquin's products and services

Personal data may come from the use by the persons concerned of Château Laroche Ploquin products and services or may relate to operations carried out via the products and services offered by Château Laroche Ploquin in the context of its relationship with the person concerned.

For example, information is collected on the services provided during the data subject's stay in order to improve customer knowledge, the comfort of the stay or the organisation of future stays.

3.3 Personal data from third parties

The personal data processed may also come from:

- Reservation intermediaries

- from third parties (hotels, associations, police services, etc.) in the fight against fraud, unpaid bills and bad behaviour

- other products or services provided by third parties to which the persons concerned have subscribed and/or for which it has authorised sharing with Le Château Laroche Ploquin.

3.4

Château Laroche Ploquin may collect public personal data concerning the persons concerned, and use public personal data or information when authorised by legislative or regulatory texts and in compliance with the specific rules of communication and reuse specified by these texts.

3.5 Personal data calculated or inferred by Le Château Laroche Ploquin

Château Laroche Ploquin may use declarative personal data or operating data to generate or calculate new personal data in order to adapt its products and services and to personalise the offers that can be made to its clients.

3.6

As a matter of principle, personal data of a particular nature are not collected. Such personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic personal data, biometric personal data for the purpose of uniquely identifying a natural person, personal data concerning health or personal data concerning the sexual life or sexual orientation of a natural person.

These particular categories of personal data, which must be subject to particular attention, may however be processed by Le Château Laroche Ploquin, under the conditions laid down by the regulations relating to the protection of personal data.

For example, certain requests for products or services may potentially allow information relating to health, religious affiliation (food allergy, accessories for the practice of a religion) to be deduced.

4. Personal data processed by Le Château Laroche Ploquin

For customers and their companions, the following main personal data are processed by Le Château Laroche Ploquin:

- Languages

- Contact information (postal address and email, and telephone);

- Special attention points necessary for the smooth running of the stay (such as allergy risks or medical information relating to contraindications in the context of the spa).

For prospects:

- Languages

- Contact information (postal address and email, and telephone);

- Connection data (IP, Logs, tracers) ;

- Logs.

For partners:

- Civility

- Telephone (Fixed, Mobile, Professional;)

- Internal identification code

- Update date.

5. Recipients of the data collected by Le Château Laroche Ploquin

The personal data collected, as well as those that will be collected later, are intended for Château Laroche Ploquin in its capacity as controller.

Château Laroche Ploquin ensures that only authorised persons have access to the personal data of the persons concerned and when necessary for the performance of their tasks.

Some personal data may be sent to third parties to comply with legal, regulatory or contractual obligations or to legally authorised authorities (police headquarters, Paris City Hall, obligations under the Anti-Money Laundering and Terrorist Financing Act, Tracfin declaration, etc).

At the request of their customers, Château Laroche Ploquin may transmit personal data to third parties in order to subscribe to products and services from these third parties (restaurant, private car, travel or entertainment reservations). The client is informed that Château Laroche Ploquin are only responsible for their own processing and that consequently clients are invited to contact third party recipients to be informed of the terms and conditions of any processing carried out.

6. Storage of personal data

Personal data is stored in the information systems of Château Laroche Ploquin or those of its subcontractors or service providers.

As a matter of principle, Château Laroche Ploquin undertakes to choose subcontractors and service providers who meet the best quality and safety criteria and who offer sufficient guarantees, in terms of reliability, safety and resources, for the implementation of technical and organisational measures.

7. Principles applicable to personal data

The regulations relating to the protection of personal data set out several main principles that Le Château Laroche Ploquin undertakes to scrupulously respect.

7.1 Lawfulness of the processing operations

Château Laroche Ploquin and each of its employees refrain from processing data collected unlawfully.

Processing operations are lawful if at least one of the following conditions is met:

- the data subject has consented to the processing of his or her personal data for one or more specific purposes (this consent may be given by means of a written declaration, including by electronic means, or an oral declaration);

- the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject;

- the processing is necessary to comply with a legal obligation to which Château Laroche Ploquin is subject;

- the processing is necessary to safeguard the vital interests of the data subject or another natural person;

- the processing is necessary for the performance of a task in the public interest or in the exercise of public authority vested in Le Château Laroche Ploquin;

- the processing is necessary for the legitimate interests pursued by Le Château Laroche Ploquin or by a third party.

The treatments carried out by Le Château Laroche Ploquin are only carried out if at least one of the above conditions is met.

7.2 Legitimate purpose

Personal data is collected and processed continuously by Le Château Laroche Ploquin for specific, explicit and legitimate purposes.

Château Laroche Ploquin uses personal data in accordance with the conditions of this data protection policy, the general conditions of the products and services subscribed to by the client and this in a constant concern for the respect of privacy and the security of its clients' personal data.

Château Laroche Ploquin uses all or part of the personal data for the following main purposes:

- to the execution of pre-contractual measures taken at the request of the persons concerned

- the execution and realization of the services

- the management of contracts concluded with the persons concerned

- the management of its activities;

- the management of its websites

- measuring the quality and satisfaction of its customers

- the continuous improvement of the quality of its products and services;

7.3 Loyalty and transparency

Château Laroche Ploquin is committed to providing fair, clear and transparent information.

Château Laroche Ploquin has the means to provide any necessary clarification regarding its data protection policy at the request of the data subject.

7.4

The persons whose data are processed benefit from the following rights, unless otherwise legally required by Château Laroche Ploquin:

- the right of access

- the right of rectification

- the right to erase or forget;

- the right to portability

- the right to limitation of treatment

7.4.1 Procedures for exercising these rights

In the event of a question or request related to the processing of personal data by Le Château Laroche Ploquin, the persons concerned are invited to contact the internal contact at "reservation@larocheploquin.com".

7.4.2 Right to information

Through this data protection policy, the data subjects acknowledge that they are informed of the purposes, legal framework, legitimate interests pursued by Le Château Laroche Ploquin, the recipients or categories of recipients with whom their personal data are shared, and the possibility of transferring the data to a third country or international organisation.

Nevertheless, with regard to the right of information, Le Château Laroche Ploquin may not be required to act on it if the persons concerned have this information, if the recording or communication of their personal data is expressly provided for by law, or if the communication of information proves impossible or would require disproportionate efforts.

7.4.3 Right of access and rectification

The persons concerned have a right of access and rectification to Château Laroche Ploquin.

As such, data subjects may have confirmation that personal data concerning them are or are not processed and, when they are, access to the said personal data.

The persons concerned may request Château Laroche Ploquin to have their personal data rectified, completed if they are inaccurate, incomplete, ambiguous or outdated.

Any request for the right of access and rectification must be made by handwritten letter with a copy of an identity document.

7.4.4 Right to erase or forget

The persons concerned may request Château Laroche Ploquin to delete their personal data when one of the following reasons applies:

- personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

- if the person withdraws his or her consent

- if it objects to the processing of its personal data when there is no legal reason for such processing;

- if the processing of personal data does not comply with the provisions of the applicable legislation and regulations.

Nevertheless, data subjects are informed that the exercise of this right to erasure will not be possible when the storage of their personal data is necessary for the purposes of legislation or regulation and, for example, for the exercise of the right to freedom of expression and information, or for the establishment, exercise or defence of legal rights.

7.4.5 Right to portability

In view of the nature of the products and services offered by Le Château Laroche Ploquin, the exercise of this right is not applicable and insofar as the personal data collected by Le Château Laroche Ploquin are not affected by the right to portability.

7.4.6 Right of opposition

The data subject has the right to object, for reasons relating to his or her particular situation, to the processing of personal data at any time.

In the event of the exercise of such a right of objection, Le Château Laroche Ploquin will cease processing except where there are legitimate and imperative grounds for processing which prevail over the interests and rights and freedoms of the data subject or for the establishment, exercise or defence of a legal claim.

7.4.7 Right to limitation of processing

Data subjects have the possibility to request the limitation of processing in the cases provided for by the Regulation on the protection of personal data.

7.4.8 Right of recourse

The persons concerned have the right to lodge a complaint under the conditions set out in the paragraph "Right of access and rectification" above, without prejudice to any other administrative or judicial remedy.

7.5 Proportionality

For each processing operation, Le Château Laroche Ploquin undertakes to ensure that the processing operations are adequate and to collect and process only data strictly necessary for the purpose pursued.

7.6

There is no automated decision in the context of the processing carried out by Le Château Laroche Ploquin.

7.7

Château Laroche Ploquin undertakes not to keep personal data longer than is necessary for the purposes for which they are stored or longer than the duration provided for by the regulations relating to the protection of personal data.

7.8 Accuracy of data

Château Laroche Ploquin undertakes to ensure that it collects complete and up-to-date data as circumstances permit.

7.9 Supervision of transfers outside the European Union

The personal data that persons on EU territory have transmitted to Château Laroche Ploquin, in accordance with the agreed purposes, may be transferred to a country of the European Union or outside the European Union.

In the context of a transfer to a country outside the European Union, rules ensuring the protection and security of this information are put in place.

Le Château Laroche Ploquin shall in all cases take all necessary and appropriate measures to ensure the security of personal data and only for the processing for which it is responsible or co-responsible.

Such personal data may be communicated, at the request of the data subjects, to official bodies and to authorised administrative or judicial authorities or third parties. In this case, the data subjects are invited to contact the third parties concerned to ensure that they are aware of the conditions under which their data will be processed.

Château Laroche Ploquin undertakes to implement security measures adapted to the degree of sensitivity of personal data to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.

All personal data being confidential, their access is limited to duly authorised persons who need it in order to carry out their mission, thanks to technical devices implemented in the electronic system. All persons having access to the data are bound by a duty of confidentiality and are subject to disciplinary and/or other sanctions if they do not comply with these obligations.

Nevertheless, the security and confidentiality of personal data are based on everyone's best practices and data subjects are invited to be vigilant.

8. Professional secrecy

In accordance with the regulations in force, persons who process the data of the data subjects managed by Le Château Laroche Ploquin under an employment contract or a contract are required to keep confidential from third parties everything they learn during their professional activity.

9. Special treatments

As part of the implementation of security measures, Château Laroche Ploquin uses video surveillance systems in some of its premises in compliance with applicable regulations.

Data subjects are informed that these images are recorded and stored and that they may lead to the identification of filmed persons either by the systems implemented or by authorised persons having access to the images.

Signs in the filmed areas indicate to the persons concerned the existence of this type of device, the person in charge and the procedures for exercising their right of access to the visual recordings concerning them.

10. Contact and details

If you have any questions or difficulties in understanding or applying the rules set out in this policy, you may contact the internal relay at the external DPO: "reservation@larocheploquin.com".

Consent to data collection

I give my consent for Château Laroche Ploquin and its group companies to use my name, first name and e-mail address to send me a newsletter concerning their activities.

This data is kept until I withdraw my consent and is intended for the services of Château Laroche Ploquin in charge of managing customer relations.

I have been informed that I have the right to information, access, rectification, deletion, portability and processing restrictions.
I also have the right to object on legitimate grounds and to object to commercial prospecting.

These rights can be exercised through the unsubscribe link included in the newsletters or by contacting the Data Protection Officer by e-mail reservation@larocheploquin.com or by post at the following address Le Château Laroche Ploquin SA, Relais interne du DPO sis 2, place des pyramides Paris, accompanied by a copy of an identity document signed by you.

The conditions of Château Laroche Ploquin's data protection policy are available on the website: https://www.chateaularocheploquin.com/ In the event
of a dispute, you can refer the matter to the competent supervisory authority: the Cnil (www.cnil.fr)

I give my consent for Le Château Laroche Ploquin and the group companies to use my full name and e-mail address to answer requests for information. This processing is necessary for the execution of the pre-contractual measures requested.

This data is kept until I have withdrawn my consent and at the latest for a period of three years are intended for the services of Château Laroche Ploquin in charge of managing customer relations.

I have been informed that I have the rights of information, access, rectification, deletion, portability, and limitation of processing.

I also have the right to object on legitimate grounds and to object to commercial prospecting.

The conditions of Château Laroche Ploquin's data protection policy are available on the website: https://www.chateaularocheploquin.com/

In the event of a dispute, you can refer the matter to the competent supervisory authority: the CNIL (www.cnil.fr)