Privacy policy

Pursuant to Article 6 of French Act No. 2004-575 of 21 June 2004 on Confidence in the Digital Economy (LCEN), it is specified that our website is published by Hôtel Du Dragon.
INTRODUCTION
In connection with the use of its services, and in particular the services available on its website, mobile site, online shop and mobile applications, Hôtel Du Dragon, acting as data controller, may collect and process personal data concerning you.
We are committed to respecting the privacy of prospective customers and visitors to our sites: website, mobile site, online shop and mobile applications. All personal data processing carried out in connection with the available services complies with the applicable local personal data protection legislation, and in particular with the provisions of the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation (EU Regulation 2016/679), or "GDPR".
1 - WHAT ARE OUR COMMITMENTS REGARDING THE PROTECTION OF PERSONAL DATA?
Hôtel Du Dragon undertakes to guarantee a high level of protection for the personal data of its customers, prospective customers, users of its sites — website, mobile site, online shop and mobile applications — and of any other person whose personal data it processes.
Hôtel Du Dragon undertakes to comply with the regulations applicable to all the personal data processing it carries out:
Your personal data are processed lawfully, fairly and transparently;
Your personal data are collected for specified, explicit and legitimate purposes, and are not further processed in a manner incompatible with those purposes;
Your personal data are kept in an adequate and relevant manner and are limited to what is necessary in relation to the purposes for which they are processed;
Your personal data are accurate, kept up to date, and every reasonable step is taken to ensure that data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
Hôtel Du Dragon implements appropriate technical and organisational measures in order to guarantee a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and the data of the persons concerned from the design stage of those processing operations.
Furthermore, Hôtel Du Dragon contractually imposes the same level of personal data protection on its processors (service providers, suppliers, etc.).
2 - WHAT PERSONAL DATA DO WE COLLECT?
A - According to the purpose of the collection
The personal data we collect vary according to the purpose of the collection and the Service we provide to you.
Generally speaking, we may collect the following categories of personal data directly:
a) personal contact details, such as your surname, first name, e-mail address, postal address and telephone number(s);
b) the credentials used to access your online account, that is to say the username and password. These are necessary for us to create a personal user account;
c) exchanges with us, which may include the details of conversations through chat or customer service;
d) demographic information, such as your age, your gender and your lifestyle preferences (including your favourite products and the interest you show in them);
e) browsing histories, such as the pages visited, the date of the visit, the location at the time of the visit, or the IP address;
f) payment-related information when a purchase or a booking is made on one of our sites, online shops or applications. The invoice is generally issued in your name, with your billing address and payment data such as your credit card or your bank account;
We may also collect personal data concerning you indirectly when you share content on social networks, websites, shops or applications relating to our products and services, or when you respond to our posts and promotional announcements on social networks.
B - Personal data concerning minors
Hôtel Du Dragon neither collects nor processes personal data relating to children under 18 without the prior consent of the parents or holders of parental responsibility for the child.
If personal data concerning children are collected via our sites — website, mobile site, online shop and mobile applications — the parents or holders of parental authority may object by contacting us at the address given at the bottom of this page.
3 - HOW ARE PERSONAL DATA COLLECTED?
A - Means of collecting your data
In the course of our relationship, you may provide us with your personal data by various means, and in particular on our sites — website, mobile site, online shop and mobile applications — while browsing the internet, making purchases or bookings, filling in the various collection forms, subscribing to the e-newsletter, creating an account, submitting an application, posting comments on our social network pages, making any contact with our establishment, or transmitting your personal data to us in any other way.
B - IP address
The IP address is a series of digits automatically assigned to your computer by your internet service provider each time you connect. With each of your requests on the site, our servers record the trace of your visit. We collect IP addresses in order to analyse trends on the site. We do not pass on any information allowing you to be identified, which means that your session will be recorded but will remain anonymous to us. We may use your IP address in cooperation with your internet service provider to identify you should we need to enforce the terms of use in order to protect our services or our customers, or in compliance with the applicable laws.
C - Cookies
In order to constantly improve the quality of the services offered on our sites — website, mobile site, online shop and mobile application — and their suitability to your expectations, Hôtel Du Dragon may use "cookies", text files used to identify your device when you connect to one of our services. Placing a cookie or tracker on your device (computer, tablet, smartphone, etc.) enables Hôtel Du Dragon to collect information and personal data, depending on how you have configured your device.
Types of cookies used:
a) Cookies essential to the use of the site. They allow you to use the site's main features, such as purchasing or booking services. If you disable the use of cookies, you will no longer be able to benefit from these features. The information retained may not be used for commercial purposes.
b) Site performance cookies. Performance cookies allow us to optimise our website and to detect any technical problems you may encounter. They enable us to gather information on how you use the site, in particular the number of visits per page, the number of error messages displayed, the time spent on a page, or the number of clicks on an area of the site. The information retained may not be used for commercial purposes.
c) Functionality cookies. These cookies allow the site to remember the choices you have made (such as your username, the language selected or the region you are in) and to provide more precise and personal features. These cookies may also be used to remember changes made by the user, such as text size or font. They may also serve to provide services you have requested, such as watching a video or leaving a comment on a blog. The information collected by these cookies may be anonymised and cannot track your browsing activity on other sites. By using our website, you agree to receive this type of cookie on your device.
d) Advertising marketing cookies. These cookies collect information about your internet browsing habits in order to offer you advertising suited to you and matching your interests. They also make it possible to limit the number of times you see an advertisement and help us assess the effectiveness of our advertising campaigns. They are generally installed by advertising networks with the authorisation of the website operator. They record the visits made to a site and share this information with other companies (advertisers, for example). Targeted or advertising cookies are often linked to site features provided by the partner company. The information is collected and shared with third parties in order to offer audience targeting and optimisation solutions to advertisers and publishers. No personal data are gathered and no individual can be identified from the data collected.
e) Cookies from third-party websites and social networks. Our website contains links and/or content pointing to other sites and social networks, and we do not know which cookies they use. To find out more, please consult the information provided by those third-party sites and social networks about their own cookies.
D - Respect for your privacy
We are committed to protecting your privacy and observe the following 2 principles.
- We do not associate any information allowing you to be directly and personally identified with your cookies. Cookies in no way make it possible to know your address, your date of birth, your telephone number or any other information enabling you to be identified.
- We do not provide any personal information to advertisers or to third-party sites which display our interest-based advertisements.
If your computer or mobile is used by several people, or if it has several browsers installed, the content displayed to other users may correspond to your preferences. If you wish, you can change your browser settings.
For more information on how cookies and targeted advertising work, you can consult the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
E - Links to third-party sites
Our sites — website, mobile site, online shop and mobile applications — may contain links redirecting to third-party websites.
We decline all responsibility for the collection, use, management, sharing or disclosure of data and information by those third parties.
The communication of information on third-party sites is governed by the privacy policy and terms of use of those sites. We recommend that you read the privacy policies of those websites before submitting any personal information.
4 - WHAT ARE THE DATA LIKELY TO BE COLLECTED USED FOR?
Your data are mainly used for booking and purchasing purposes (provision of services, specific services and products), prospecting, customer loyalty, events, commercial information, satisfaction surveys, organisation of prize draws, new services and products intended to improve your customer experience within our establishment, statistical studies, recruitment, after-sales service, and the handling of your requests and/or complaints. Apart from the cases where your consent has been obtained (in particular to send you personalised offers), the processing of your data for the various purposes referred to above is necessary in particular:
To ensure performance of the service contract;
To comply with a legal obligation;
For the purposes of the legitimate interests pursued by our establishment (in particular developing new services and offers, improving customer service, etc.).
More specifically, your data are used:
To enable you to benefit from all the services or offerings available on our establishment's website, mobile site, shop and mobile applications: creation of a user account, e-newsletter, booking management, assistance and complaints, loyalty programme management, etc.;
To enable you to browse our websites;
To match our information, notifications, offers and other forms of service as closely as possible to your interests;
To facilitate the completion of the administrative formalities relating to booking and purchasing.
5 - HOW LONG ARE YOUR DATA KEPT?
Hôtel Du Dragon undertakes to keep your personal data for no longer than is necessary for the purposes for which they are processed.
Retention periods are defined according to the processing purposes implemented by Hôtel Du Dragon and take into account, in particular, the applicable legal provisions imposing a specific retention period for certain categories of data, any applicable limitation periods, and the CNIL's recommendations concerning certain categories of data processing.
6 - WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?
A - Recipients of your data
The data collected on our website, mobile site, online shop and mobile applications may be communicated to our internal staff, or to its ancillary service providers (processors, service providers, banks), in connection with the performance of all or part of the services referred to above. We remind you that, in this context, Hôtel Du Dragon requires its service providers to put in place strict confidentiality and protection measures for these data.
B - Data transfers outside the European Union
Personal data may be processed outside the European Economic Area (EEA). Should this be the case, Hôtel Du Dragon will do everything possible to ensure that this international data transfer benefits from an adequate level of security and adequate safeguards.
7 - HOW TO EXERCISE YOUR RIGHTS?
In accordance with the applicable personal data protection regulations, you may at any time exercise your rights of access, rectification and erasure of the data concerning you, as well as your rights to restriction of and objection to processing and to the portability of your personal data.
In addition, you are legally entitled to lay down directives concerning the fate of your personal data after your death.
Furthermore, any person who was a minor at the time their personal data were collected may obtain their erasure as soon as possible.
These rights may be exercised by post at the following address:
Hôtel Du Dragon
12 rue du Dragon
67000 Strasbourg
FR
In this respect, we ask you to accompany your request with the information needed to identify you (surname, first name, e-mail) as well as any other information necessary to confirm your identity. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL) in the event of a breach of the applicable personal data protection regulations, and in particular of the GDPR.
8 - IT SECURITY / SECURING TRANSACTIONS
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for Hôtel Du Dragon. We therefore implement all appropriate technical and organisational measures, having regard to the nature, scope and context of the personal data you provide us with and to the risks presented by their processing, in order to preserve the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorised access to these data.
We offer you a secure online payment system based on the latest technologies in force.
Hôtel Du Dragon strives to combat identity theft practices on the internet. That is why we use, for example, a system for detecting fraudulent payments made by bank card. This system is designed to protect you should your bank card be lost or stolen.
The security and confidentiality of personal data rest on everyone's good practice. That is why we invite you not to disclose your passwords to third parties, to log out of your profile and your social account systematically (in particular in the case of linked accounts) and to close your browser window at the end of your session, especially if you are accessing the internet from a computer shared with other people. You will thus prevent other users from accessing your personal information.
9 - CONTACT US
For any further questions regarding this policy or the way in which Hôtel Du Dragon processes your personal data, we invite you to contact us at the following address: [email protected]
10 - AMENDMENTS TO THE STATEMENT
Hôtel Du Dragon reserves the right to adapt its personal data protection policy. When we make substantial changes to this Statement, we publish a link to the Statement on the home page of our site.
11 - OBJECTION TO TELEPHONE CANVASSING
Users may register on the list of objection to telephone canvassing by visiting the following link: https://www.bloctel.gouv.fr/









