Privacy Policy - L'Hacienda Occitane

This Privacy Policy is intended for users of the L’Hacienda Occitane website accessible at the following address: https://hacienda-occitane.com (hereinafter “the Site”) and aims to inform them about the manner in which their personal information may be collected and processed.

Respect for privacy and personal data is a priority for L’Hacienda Occitane, which is why we undertake to process them in strict compliance with the Data Protection Act of 6 January 1978, amended by the law of 20 June 2018 on the protection of personal data, establishing rules on the collection and use of data on French territory and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter “GDPR”).

Article 1 – Preamble

Hacienda Occitane will have the status of data controller for processing relating to:

management and monitoring of accounts and contracts
the provision and management of services
payment management
management of requests for information
management of rights requests
the proper functioning and continuous improvement of the Site

Legal reminder:

The data controller is, within the meaning of the Data Protection Act and the GDPR, the person who determines the means and purposes of the processing. When two or more data controllers jointly determine the purposes and means of the processing, they are joint controllers (or co-controllers).

Article 2 – Definitions

“Data”: means the personal data subject to Processing under this Privacy Policy.
“Personal Data”: means personal data as defined in Article 4(1) of the GDPR.
“General Data Protection Regulation” or “GDPR”: means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.
“User”: means any person browsing the website https://hacienda-occitane.com, whether they are a private customer, professional customer or simple Internet user.
“Processing”: means any of the operations referred to in Article 4 (2) of the GDPR, carried out on Personal Data in the context of the execution of this Privacy Policy.
“Processor”: means the natural or legal person, public authority, service or other body which Processes Personal Data on behalf of and according to the instructions of L’hacienda Occitane in accordance with Article 4 (8) of the GDPR.

Article 3 – Purposes of processing and legal bases

L’Hacienda Occitane only collects the Data necessary for the explicit and determined purposes below:

MANAGEMENT OF INFORMATION REQUESTS: Monitoring and response to contact requests;
MANAGEMENT OF RESERVATION REQUESTS: Monitoring and response to reservation requests;
RESERVATION MANAGEMENT: Tracking and responding to reservations;
MANAGEMENT OF REQUESTS FOR RIGHTS RESULTING FROM THE GDPR AND THE AMENDED DATA PROTECTION ACT: This processing covers all operations necessary for monitoring requests for rights addressed to L’Hacienda Occitane (qualification of the request, investigations, carrying out specific technical operations, etc.). It only concerns cases where L’Hacienda Occitane acts as data controller;
THE PROPER OPERATION AND CONTINUOUS IMPROVEMENT OF THE SITE AND ITS FUNCTIONALITIES: Ensure the proper functioning and continuous improvement of the Site and its functionalities. Our legitimate interest in guaranteeing the best level of operation and quality of the Site, in particular through visitor statistics. The User’s Consent when required.

Article 4 – Principles relating to the collection and processing of personal data

In accordance with Article 5 of European Regulation 2016/679, personal data are:

Processed lawfully, fairly and transparently with regard to the data subject;
Collected for specified, explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
Kept in a form which permits identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed;
Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing shall be lawful only if and to the extent that at least one of the following conditions is met:

The data subject has consented to the processing of his or her personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
The processing is necessary for compliance with a legal obligation to which the controller is subject;
The processing is necessary to protect the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Article 5 – Data Collected

The mandatory or optional nature of the personal data collected and the possible consequences of a failure to respond are indicated during the various contacts with the persons concerned.

You can view the details of the personal data that we may have about you below.

Details of the data processed
NB: the details of the information provided below are not intended to be exhaustive and are primarily intended to inform Users about the categories of data that L’Hacienda Occitane is likely to process.

For the management of requests for information

Name
E-mail address
Phone number

For the management of booking requests

Name
E-mail address
Phone number

For booking management

Name
Mailing address
E-mail address
Phone number
Secure credit card payment via STRIPE bank

For the management of rights requests

Name, first name, email address
If applicable, copy of proof of identity.

For the proper functioning and continuous improvement of the Site

User logs and connection data and hardware identification data
Data collected via cookies and other tracers present on our Site; for more details, consult our cookie management charter (see COOKIE POLICY)

Article 6 – Personal data collected automatically

When you browse the Site https://hacienda-occitane.com, L’Hacienda Occitane automatically records information relating to your browsing.

When you use our services, connection data may be automatically recorded in our server logs such as your IP address, your unique identifier, your operating system and its location, the type of browser you use, the pages you have visited.

Article 7 – Recipient of the data

Only the authorized and specific persons mentioned below will be able to access User data.

Authorized staff of L’Hacienda Occitane
The service providers responsible for the management and hosting of the Site and the IT system of L’Hacienda Occitane
Where applicable, the authorized personnel of our subcontractors
Where applicable, the relevant courts, mediators, accountants, auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or judicial requisition
Third parties that may place cookies on your devices when you consent to them

Your data is not communicated, exchanged, sold or rented to any person other than those mentioned above.

Article 8 – Data retention period

L’Hacienda Occitane undertakes to ensure that the data collected is kept in a form that allows your identification for a period that does not exceed the period necessary for the purposes for which this data is collected and processed.

For the management of requests for information
The data is kept for the time necessary to process the request and then for three (3) years from the last contact with L’Hacienda Occitane.

For the management of reservation requests AND bookings
The data is kept for the time necessary to process the request and then for three (3) years from the last contact with L’Hacienda Occitane.

For the management of requests for rights
Data relating to the management of requests for rights are kept for the entire duration necessary to process the request. They are then archived for the period of the applicable criminal limitation period in intermediate archiving.
In the event of communication of a copy of an identity document, it is kept for one (1) year or three (3) years when this communication is made within the framework of the exercise of a right of opposition.

For the proper functioning and continuous improvement of the Site
Cookies and other commercial trackers may be placed on the User’s terminal for a maximum period of thirteen (13) months. Beyond this period, the raw traffic data associated with an identifier are either deleted or anonymized.
The information collected via cookies and trackers is kept for a period of twenty-five (25) months. Beyond this period, this data is deleted or anonymized.

Article 9 – User rights regarding data collection and processing

In accordance with the Data Protection Act and the GDPR, you have the following rights:

Right of access (article 15 GDPR), rectification (article 16 GDPR) and updating;
Right to erasure of your personal data (article 17 GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or conservation is prohibited;
Right to withdraw your consent at any time (article 13-2c GDPR);
Right to limit the processing of your data (article 18 GDPR);
Right to object to the processing of your data (article 21 GDPR);
Right to portability of the data you have provided to us, when your data is subject to automated processing based on your consent or on a contract (article 20 GDPR);
Right to lodge a complaint with the CNIL (article 77 GDPR);
Right to define the fate of your data after your death and to choose whether or not we communicate your data to a third party that you have previously designated. In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless their retention proves necessary for evidentiary purposes or to meet a legal obligation.

These rights can be exercised by simple request, by email to the address contact@mapetitetoscane.com.

To learn more about your rights, you can also consult the website of the National Commission for Information Technology and Civil Liberties, accessible at the following address: http://cnil.fr.

Article 10 – Security

L’Hacienda Occitane and its potential subcontractors undertake to implement all technical and organizational measures to ensure the security of the processing of personal data and the confidentiality of your data, according to current technical means and in application of the amended Data Protection Act and the European General Data Protection Regulation (GDPR).

L’Hacienda Occitane takes the necessary precautions, given the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties (physical protection of the premises, authentication process for our customers with personal and secure access via confidential identifiers and passwords, connection logging, etc.).

Article 11 – Updating our privacy policy

This Privacy Policy may be modified, in particular following various legislative and regulatory developments. For this purpose, the User may consult the update directly on the Site.

Updated September 9, 2024