Privacy Policy

The company "SALY HOTEL" S.A . undertakes to ensure that the processing of personal data carried out within the framework of its activity complies with the European Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR), as well as with the Data Protection Act.

In this privacy policy (the " Policy "), we explain how and why we use your data, what your rights are and how to exercise them.

By accepting the Policy, you agree to our processing of your data.

‍

What is personal data?

Personal data (" Personal Data " or " Data ") means any information relating to an identified or identifiable natural person:

• directly (name, first name, email address) or
• indirectly (IP address, geolocation).

‍

Who is this Privacy Policy for?

This Policy applies to all of our services (the " Services ") i.e. hotel, restaurant-bar and related services via the website https://www.lesalyhotel.com (the " Site ").

It is intended to inform the Customer who uses our Services.

‍

Who collects your Data?

The Data Controller, within the meaning of the European Data Protection Regulation, is SALY HOTEL S.A., represented by François BENAIS in his capacity as President of the company.

‍

How do we collect your Data?

SALY HOTEL S.A., collects Data online (including by e-mail), on paper or orally (during a physical appointment or by phone) and this Policy applies regardless of the mode of collection or processing.

‍

Why do we collect your Data?

Some of your Data is necessary for the processing and provision of our Services. Failure to provide this information will prevent the proper functioning of the Services

For your information, you will find below a list of categories of data collected corresponding to the purposes of our collection.

To answer your contact request:

• Categories of data collected: identity data (last name, first name, postal code, city, country), contact data (email address, phone number), free comment area.
• Category of person: website users
• Legal basis: your consent obtained when sending the contact request

To offer you a subscription to our newsletter:

You can subscribe to our newsletter by email.  

• Categories of Data collected: identity data (name, first name) and contact data (email address).
• Person category: users
• Legal basis: your consent obtained through your subscription to the newsletter.
  

You can, at any time, decide to unsubscribe from this newsletter, by clicking on the link provided for this purpose, present in each newsletter.

‍

To process your reservation request:

• Categories of Data collected: identity data (last name, first name, country), contact data (e-mail address, telephone number) and banking data (card number, cryptogram, holder, expiration date).
• Category of person: customers
• Legal basis: contractual measures taken at your request.

To process your response to a job offer or recruitment request:

• Categories of Data collected: identity data (name, surname), contact data (e-mail address, telephone number), information contained in the resume and cover letter (free comment area).
• Category of person: website users
• Legal basis: pre-contractual measures taken at your request.

To carry out statistical operations of frequentation:

• Categories of Data collected: Browsing data (IP address).
• Category of person: website users
• Legal basis: your consent when you accept the deposit of statistical cookies.

When creating an account:

• Categories of Data collected: login data (password) and contact data (e-mail address).
• Category of person: website users
• Legal basis: Your consent.

‍

Are you required to provide your Personal Data?

When you make specific requests such as registering for our newsletter, the processing of your Data is mandatory. Indeed, we cannot proceed to your registration without processing your Data (email address in particular).

Please note that when you give your consent to the processing of your Personal Data, you have the right to withdraw this consent at any time via the dedicated address rgpd@buildinvest.com

‍

How long do we keep your Data?

We keep your Data only for as long as is necessary to carry out the purposes for which it was collected, except where the law requires a different retention period.

As examples, without this list being exhaustive:

For contact forms: the data is kept for the time it takes to process the request, then the data is immediately deleted.

• To make a reservation request: the data are kept for 3 months from the last contact with the customer.
• For the recruitment request: the data is kept for 2 years in case of no answer or refusal. After recruitment, the data is kept for the duration of the employment contract and then destroyed 2 years after the last contact.
• For authentication: the data are kept for 1 year from the last connection.
• For statistics: the data are kept for 13 months, then, deletion or renewal of contact.  

You acknowledge that the Data you provide to us and that is stored in our information systems is accurate and constitutes proof of your identity.

With whom do we share your Data?

The Data collected are shared, according to their respective needs and in accordance with the purposes mentioned above, with

• the staff of SALY HÔTEL S.A. and HÔTEL CLUB LES FILAOS ‍
• commercial field service personnel, delivery reservations
• External application management services staff
• staff of external hosting services for our website
• External service personnel sending confirmation emails following product/service orders or reservation requests.

‍

Is your Data sent outside the European Union?

We may share some of your Data outside the European Union with service providers located outside the European Union. However, each transfer is governed by a mechanism that provides protection equivalent to that guaranteed by European Union law.

As the Site is accessible on the Internet, its content and therefore your publications may be accessible outside the European Union.

‍

What security measures have we taken to protect you?

We undertake to implement all the technical and organizational measures necessary to respect the protection of your Personal Data.

Our contracts with our service providers include a section dedicated to data protection, in compliance with applicable laws.

‍

What are your rights?

In accordance with the Data Protection Act and subject to compliance with the legal obligations imposed on SALY HOTEL S.A. in the context of its activity, each individual may exercise the following rights:

You can:

• Request a copy of your session content data, service requests, recruitment requests - Right of access
• Correcting inaccurate data about you - Right of rectification
• Request the deletion of certain Data concerning you, however this request is incompatible with the processing of your response to a job offer - Right of deletion
• To object to our processing of your Data; this request is incompatible with the processing of your order for products/Services and your reservation request - Right to object
• Decide at any time to withdraw your consent - Right of withdrawal
• Limiting the use of your Data while your request is being processed - Right to limit processing
• Exercise your Right to Portability - if applicable
  

When a Data breach that may pose a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.

You may formulate directives concerning the conservation, deletion and communication of your Personal Data after your death, in accordance with article 85 of the law 78-17 of January 6, 1978.

‍

How to exercise your rights?

These rights as well as these directives can be exercised and addressed to us by writing to

• by post to the address: BUILDINVEST Service Juridique 18, rue de Prony - 75017 PARIS or
• electronically: rgpd@buildinvest.com

In order to allow us to identify you quickly and to answer you, you will join to your request all elements allowing to establish your identity (notably customer number or request made directly via your account). An answer will be sent to you within 1 month following the reception of the request. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.

You may also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority in charge of enforcing regulations on the protection of personal data in France, by internet https://www.cnil.fr/fr/agir or by post at the following address Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.

‍

Changes to this Privacy Policy

We may update this Policy by posting a new version on our Site. We will not lower the level of privacy of your Data substantially without informing you and obtaining your consent.

‍

Contact

If you have a question about the Privacy Policy, contact us:

• By electronic means: rgpd@buildinvest.com
• By post: BUILDINVEST Legal Department 18, rue de Prony - 75017 PARIS