Privacy policy

The purpose of this privacy policy is to inform users of the L'Hôtel-Restaurant Ar Iniz website about how their personal data is collected and processed by :

 

SAS Les Acacias
19 A rue de Châtillon - 35000 Rennes
RCS Rennes 491 799 383
SIRET 491 799 383 00022
Share capital: €366,100
Telephone: 02 99 56 01 19

(hereinafter «the Company»), as data controller, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (RGPD) and applicable French legislation.

 

1. Personal data collected

In connection with the operation of the site and the business of L'Hôtel-Restaurant Ar Iniz, the Company may collect :

  • First and last name

  • Email address

  • Phone number

  • Postal address

  • Information required for reservation and stay

  • Billing data

  • Data transmitted via contact form

  • Browsing data (IP address, browser, pages viewed)

  • Cookie data

Mandatory information is indicated at the time of collection. Failure to do so will prevent your request from being processed.

 

2. Purposes of processing

Data is collected for :

  • Managing contact requests ;

  • Management of accommodation and catering reservations and services; ;

  • Administrative and accounting management ;

  • Improving the site and the user experience; ;

  • Sending commercial information, subject to prior consent; ;

  • Audience measurement.

 

3. Legal basis for processing

Treatments are based on :

  • on the performance of a contract or pre-contractual measures ;

  • on a legal obligation; ;

  • the Company's legitimate interest; ;

  • on the user's consent when required (notably for non-essential cookies and commercial communications).

 

4. Cookie management and consent (Axeptio)

The site uses a cookie consent management solution provided by Axeptio.

This solution enables :

  • to obtain the prior consent of users; ;

  • accept or reject cookies by category; ;

  • ensure traceability of choices made; ;

  • block non-essential cookies until consent has been given.

Cookies that are strictly necessary for the operation of the site are deposited without consent.

Analytical, advertising and social networking cookies are only activated with the user's explicit consent.

Users can modify their preferences at any time via the cookie management module accessible on the site.

 

5. Recipients of data

Personal data is intended for use by the Company's authorized internal departments.

It may be transmitted to technical service providers involved in site management (hosting, maintenance, reservation solution, Axeptio consent management solution, analytical tools).

These service providers act as subcontractors and are contractually bound to ensure data confidentiality and security.

 

6. Transfers outside the European Union

If certain service providers are located outside the European Union, the Company ensures that appropriate safeguards are put in place in accordance with Articles 44 et seq. of the RGPD (standard contractual clauses, adequacy decisions or equivalent mechanisms).

 

7. Shelf life

Data is kept for a period proportionate to the purposes for which it is to be used:

  • Prospect data: 3 years from last contact; ;

  • Customer data: duration of the contractual relationship plus legal deadlines; ;

  • Accounting data: 10 years ;

  • Cookies: 13 months maximum.

 

8. Data security

The Company implements appropriate technical and organizational measures to guarantee the security, integrity and confidentiality of personal data.

 

9. User rights

In accordance with the RGPD, you have:

  • a right of access ;

  • a right of rectification ;

  • a right to erasure; ;

  • a right of objection ;

  • the right to limit processing; ;

  • a right to portability ;

  • the right to withdraw your consent at any time.

 

These rights may be exercised by sending a written request to the following address:
contact@ariniz.com

Proof of identity may be requested if necessary.

You also have the right to lodge a complaint with the CNIL.