DATA PRIVACY POLICY
ERGHOT AND ITS GROUP
Personal data security and confidentiality policy for the management of reservations within the ERGHOT Group establishments
Version 09 July 2024
In France, personal data is protected in particular by Law No. 78-87 of 6 January 1978 as amended, Law No. 2004-801 of 6 August 2004, Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR) of 27 April 2016.
ERGHOT and its group attach great importance to the preservation of the personal data collected by it as data controller.
In the same spirit, particular attention is paid to the security and confidentiality policy of its service providers.
The Personal Data Confidentiality Security Policy implemented by ERGHOT and its group concerning the management of reservations within hotels is described below.
- Scope of application
This policy applies only to the extent that ERGHOT or the subsidiaries of its group process or subcontract on behalf of their customers personal data that originates from the European Union, or that is subject to European data protection legislation.
- Data controller
The identity and contact details of the data controller are as follows:
ERGHOT Company, a simplified joint stock company, with capital of 2,334,924 euros, registered with the Marseille Trade and Companies Register under number 338 534 464, located at 75 Boulevard Charles Livon 13007 Marseille, represented by its legal representative in office domiciled in his capacity at the said headquarters
SAS ERGHOT is the data controller for the data collected through:
- commercial exchanges with its customers and those of the group’s establishments;
- site new-hotel.com;
- stays in the establishments;
- Contact details of the person in charge of the personal data department at ERGHOT:
The contact details of the person in charge of questions relating to personal data and the rights of individuals at ERGHOT are as follows:
NEW HOTEL
Email: webmaster.nh@new-hotel.com
Tel: +33(0)4 91 59 94 23
Postal address
ERGHOT 75 Boulevard Charles Livon 13007 Marseille
- Purposes
The processing implemented by ERGHOT and its group establishments is intended to carry out all the operations necessary for the management and monitoring of the following services:
- management of reservations;
- management of hotel stays;
- management of prospective customers including requests for information;
- management of the newsletter and direct marketing campaigns.
- Data collected and collection methods
When they are data controllers, ERGHOT and the establishments in its group collect and process the following data in particular:
- reservation management: surname, first name, address, telephone number, email address, date of birth, nationality, preferences and interests;
- hotel stay management: surname, first name, address, telephone number, email address, date of birth, nationality, preferences and interests, banking data, national identity card or passport;
- prospect customer file management: surname, first name, email address;
- newsletter and direct marketing campaign management: email;
- wifi access: email address, room number, surname, first name;
The data collection technologies are as follows: website, email exchanges, telephone exchanges, exchanges within the establishments.
Data collection is carried out directly from the persons concerned and/or is necessary for the management of reservations for stays within the group’s establishments.
- Retention period
- reservation management: duration of the legal prescription;
- management of stays within the hotel: duration of the legal prescription;
- management of prospective customers: duration of the legal prescription;
- management of the newsletter: duration of the legal prescription.
- Authorized personnel
Only authorized persons and subcontractors of ERGHOT and the group’s establishments have access to the data processed and any subcontractors necessary for the performance of the services as well as the authorized administrative and judicial authorities, where applicable.
- Possible transfers
As part of the performance of its services, ERGHOT and the establishments of its group do not use service providers located outside the European Union.
- Security measures: organizational, ITimplements and will maintain appropriate technical and organizational security measures to protect the personal data processed against any breach of security and to preserve the confidentiality of this data. This is an obligation of means.
- Exercising the rights of individuals
At any time, requests relating to the rights of individuals (right of access, rectification, erasure, limitation, etc.) may be sent to ERGHOT:
Email: webmaster.nh@new-hotel.com
Tel: +33(0)4 91 59 94 23
Postal address
ERGHOT 75 Boulevard Charles Livon 13007 Marseille
The request must contain the following information:
- surname, first name of the person concerned;
- indicate the right that he/she intends to exercise: right of access, rectification, deletion, opposition, portability, erasure, limitation of processing, withdrawal of consent which will come into effect upon receipt;
- copy of the identity document in order to ensure the identity of the person initiating the request.
NEW HOTEL will respond as soon as possible.
Any incomplete file cannot be processed.
- Notification of security breaches
Any security breach noted must be sent to ERGHOT within a maximum of 48 hours by email to the address webmaster.nh@new-hotel.com
In the event of a breach of notification, the following information will be requested:
- the nature of the personal data breach including, if possible, the categories and approximate number of persons concerned by the breach and the categories and approximate number of personal data records concerned;
- the name and contact details of the Data Protection Officer (DPO), or any contact from whom additional information can be obtained;
- the likely consequences of the personal data breach;
- the measures taken or that the controller proposes to take to remedy the personal data breach, including, where appropriate, measures to mitigate any negative consequences.
ERGHOT and the establishments of its group will make their best efforts to collaborate in the event of a security breach in order to remedy it as soon as possible.
- CNIL submission
CNIL submissions can be made at the following address https://www.cnil.fr/fr/notifier-une-violation-de-donnees-personnelles
- Processing register
In accordance with the regulations in force, the processing of personal data implemented by ERGHOT and the establishments of its group are recorded in a processing register kept in the company and updated each year.
