Privacy Policy
BUILDINVEST HÔTELS ET RÉSIDENCES (City Lofthotel Saint-Etienne), undertakes to ensure that the processing of personal data carried out within the framework of its activity complies with European Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR) and the Data Protection Act.
In this privacy policy (the " Policy "), we explain how and why we use your data, what your rights are and how to exercise them.
By accepting the Policy, you agree to our processing of your data.
What is personal data?
Personal data (" Personal Data " or " Data ") means any information relating to an identified or identifiable natural person:
- directly (name, first name, email address) or
- indirectly (IP address, geolocation).
Who is this Privacy Policy for?
This Policy applies to all of our services (the " Services "), i.e. tourist residence and related hotel services (breakfast, etc.) via the website https://www.cityloftsaintetienne.com (the " Site ").
It is intended to inform the Customer who uses our Services.
Who collects your Data?
The Data Controller, within the meaning of the European Data Protection Regulation, is BUILDINVEST HÔTELS ET RÉSIDENCES SAS (City Lofthotel Saint-Etienne), represented by its President.
How do we collect your Data?
BUILDINVEST HÔTELS ET RÉSIDENCES (City Lofthotel Saint-Etienne), collects Data online (including by e-mail), on paper or orally (during a physical appointment or by telephone) and this Policy applies regardless of the method of collection or processing.
Why do we collect your Data?
Some of your Data is necessary for the processing and provision of our Services. Failure to provide this information will prevent the proper functioning of the Services offered.
For your information, you will find below a non-exhaustive list of categories of data collected corresponding to the purposes of our collection.
To answer your contact request:
- Categories of data collected: identity data (last name, first name, postal code, city, country,), contact data (email address, phone number), free comment area.
- Category of person: website users
- Legal basis: your consent obtained when sending the contact request
To offer you a subscription to our newsletter:
You can subscribe to our newsletter by email.
- Categories of Data collected: identity data (name, first name) and contact data (email address).
- Person category: users
- Legal basis: your consent obtained through your subscription to the newsletter.
You can, at any time, decide to unsubscribe from this newsletter, by clicking on the link provided for this purpose, present in each newsletter.
To process your response to a job offer or recruitment request:
- Categories of Data collected: identity data (name, surname), contact data (e-mail address, telephone number), information contained in the resume and cover letter (free comment area).
- Category of person: website users
- Legal basis: pre-contractual measures taken at your request.
To carry out statistical operations of frequentation:
- Categories of Data collected: Browsing data (IP address).
- Category of person: website users
- Legal basis: your consent when you accept the deposit of statistical cookies.
When creating an account:
- Categories of Data collected: login data (password) and contact data (e-mail address).
- Category of person: website users
- Legal basis: Your consent.
Are you required to provide your Personal Data?
When you make specific requests such as registering for our newsletter, the processing of your Data is mandatory. Indeed, we cannot proceed to your registration without processing your Data (email address in particular).
Please note that when you give your consent to the processing of your Personal Data, you have the right to withdraw this consent at any time via the dedicated address rgpd@buildinvest.com
How long do we keep your Data?
We keep your Data only for as long as is necessary to carry out the purposes for which it was collected, except where the law requires a different retention period.
- For contact forms: the data is kept for the time it takes to process the request, then the data is immediately deleted.
- For the recruitment request: the data is kept for 2 years in case of no answer or refusal. After recruitment, the data is kept for the duration of the employment contract and then destroyed 2 years after the last contact.
- For authentication: the data are kept for 1 year from the last connection.
- For statistics: the data are kept for 13 months, then, deletion or renewal of contact.
You acknowledge that the Data you provide to us and that is stored in our information systems is accurate and constitutes proof of your identity.
With whom do we share your Data?
The Data collected are shared, according to their respective needs and in accordance with the purposes mentioned above, with
- the staff of BUILDINVEST HÔTELS ET RÉSIDENCES SAS (City Lofthotel Saint-Etienne)
- staff of external reservation and delivery services,
- External application management services staff,
- the staff of the external hosting services of our website,
- External service personnel sending confirmation emails following product orders or reservation requests.
Is your Data sent outside the European Union?
We may share some of your Data outside the European Union with service providers located outside the European Union. However, each transfer is governed by a mechanism that provides protection equivalent to that guaranteed by European Union law.
As the Site is accessible on the Internet, its content and therefore your publications may be accessible outside the European Union.
What security measures have we taken to protect you?
We undertake to implement all the technical and organizational measures necessary to respect the protection of your Personal Data.
In order to guarantee a high degree of confidentiality, our website uses the SSL (Secure Socket Layer) encryption protocol.
Our contracts with our service providers include a section dedicated to data protection, in compliance with applicable laws.
What are your rights?
In accordance with the Data Protection Act and subject to compliance with the legal obligations imposed on BUILDINVEST HÔTELS ET RÉSIDENCES (City Lofthotel Saint-Etienne) in the context of its activity, each individual may exercise the following rights:
You can:
- Requesting a copy of your Session Content Data, Service Requests, Recruitment Requests - Right of Access
- Correcting inaccurate data about you - Right of rectification
- Request the deletion of certain Data concerning you; however, this request is incompatible with the processing of your response to a job offer - Right of deletion
- To object to our processing of your Data; this request is incompatible with the processing of your product order or your reservation request - Right to object
- Decide at any time to withdraw your consent - Right of withdrawal
- Limiting the use of your Data while your request is being processed - Right to limit processing
When a Data breach that may pose a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.
You may formulate directives relating to the conservation, deletion and communication of your Personal Data after your death, in accordance with article 85 of the law 78-17 of January 6, 1978.
How to exercise your rights?
These rights as well as these directives can be exercised and addressed to us by writing to
- by post to the following address: 18, rue de Prony - 75017 PARIS;
or
- by electronic means: rgpd@buildinvest.com
In order to allow us to identify you quickly and to answer you, you will join to your request all elements allowing to establish your identity (notably customer number or request made directly via your account). An answer will be sent to you within 1 month following the reception of the request. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.
You may also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority in charge of enforcing regulations on the protection of personal data in France, by internet https://www.cnil.fr/fr/agir or by post at the following address Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.
Changes to this Privacy Policy
We may update this Policy by posting a new version on our Site. We will not lower the level of privacy of your Data substantially without informing you and obtaining your consent.
Contact
If you have a question about the Privacy Policy, contact us:
- By electronic means: rgpd@buildinvest.com
- By post : 18, rue de Prony - 75017 PARIS
