In the course of our activities and in order to provide you with the best possible service, we may collect and process some of your personal data. thank you
Grape Hospitality France, in its capacity as data controller, hereby undertakes to collect and process your personal data with respect for your privacy and in compliance with the General Data Protection Regulation and the French Data Protection Act.
You will find below information about the processing of your personal data and how to exercise your rights.
- Data controller
Grape Hospitality France, whose registered office is at 17 quai du Président Paul Doumer, 92400 Courbevoie, France, and registered under number 815 278 288 in the Nanterre Trade and Companies Register, is acting as data controller.
- Collection, processing and storage of your personal data
Personal data is any information relating to an identified or identifiable natural person, directly or indirectly.
In the course of our activities, we may collect the following information: surname, first name, gender, date of birth, nationality, address, telephone numbers, e-mail address, credit card number.
This information may be communicated to any natural or legal person in our Group.
The processing of this data is motivated by :
– the conclusion and performance of the contract binding us to the Customer,
– the need to comply with legal obligations,
– the pursuit of our legitimate interest consisting in managing our activities and providing our customers with the services requested,
– the management of Customer relations,
– commercial prospecting,
– the management of complaints.
We ensure that the length of time we keep your personal data is proportionate to the purposes set out above.
In any event, your personal data will not be kept beyond three years following the last interaction with our company.
- Security of your data and transfer outside France
Your personal data is precious and we ensure that all necessary measures are taken to prevent unauthorized access, alteration or loss.
For the purposes mentioned in article 2, your personal data may be transferred outside France.
Technical, organizational and procedural measures have been implemented to guarantee the confidentiality of your personal data.
- Your rights
4.1 Right to information
Thepurpose of this privacy policy is to bring to your attention all the information relating to the collection of your data and in particular: the identity and contact details of the data controller and data protection officer; the purposes of the processing, the data retention period, the existence of the rights set out below.
4.2 Right of access
You have the right to access your personal data, in particular to ensure that it is used in accordance with regulations.
4.3 Right of rectification and deletion
You may ask the Data Controller to rectify any inaccuracies in your personal data and, if it is incomplete, to complete it.
You may obtain the deletion of your personal data in the following cases:
– Personal data is no longer necessary for the purposes for which it was collected,
– Unlawful processing of your personal data,
– Exercising the right to object
The right to erasure is not general and is subject to several exceptions.
4.4 Right to limit processing
The restriction of processing consists of suspending the use of your personal data without implying its deletion.
It can be obtained by the person concerned in particular:
When the data subject contests the accuracy of the data, for a period of time allowing the Data Controller to verify the accuracy of the data,
– When the data is no longer required by the Data Controller but is required by the data subject for the exercise or defense of legal claims,
– When the processing is unlawful and the data subject objects to the deletion of the data,
– When the data subject exercises his/her right to object, for a period of time allowing it to be determined whether the legitimate reasons pursued prevail over those of the data subject.
4.5 Right to object
This right enables you to object at any time to the processing of your personal data for reasons relating to your particular situation or when your data is processed for commercial prospecting purposes.
4.6 Right to complain
You may lodge a complaint with the CNIL at any time concerning the collection and processing of your personal data.
4.7 Right to withdraw consent
You may withdraw your consent at any time. Withdrawal of consent does not compromise the lawfulness of the processing carried out previously.
4.8 Right to data portability
You can request your personal data in a structured, commonly used and machine-readable format.
If you have any questions or complaints about your personal data, or if you wish to exercise your rights, please send your request to the following e-mail address: dpo@grape-hospitality.com
