Privacy policy
SCEA DU CHATEAU DE LESTANG (whose registered office is located at Château de Lestang – 18300 SANCERRE) generally ensures that it only collects personal data that is adequate, relevant and necessary with regards to the purposes of the processing (principle of minimisation), and that it takes appropriate measures in terms of security and confidentiality to ensure their protection, including data protection issues at their conception and by default.
SCEA DU CHATEAU DE LESTANG undertakes to comply with the provisions of the applicable regulations, in particular those of European Regulation 2016/679 on the protection of personal data, which came into force on 25 May 2018 (hereinafter, the “RGPD”), as well as those of the Data Protection Act of 6 January 1978 and any law or regulation that may supplement or replace them.
The purpose of this privacy policy is to provide you with clear and transparent information about the personal data we process and how we process it.
1. Identity and contact details of the Data Controller
Mr Pierre ULLOA, Manager, SCEA DU CHATEAU DE LESTANG – Château de Lestang – 18300 SANCERRE – email : contact@lestang1573.com.
2. Data collected and collection methods
As part of its activities and the operation of its website, SCEA DU CHATEAU DE LESTANG is likely to collect a certain amount of your personal data (in particular your first name, your surname, your telephone number or your e-mail address, or information collected automatically such as your connection data), directly from you (in particular when you register for newsletters and events, or when you use the contact functions) and/or indirectly from third parties and in particular from our partners and social networks.
3. Legal basis and purpose of processing
The SCEA DU CHATEAU DE LESTANG ensures :
To process your data only in the cases provided for by the applicable regulations, and in particular on the basis of your free, specific, informed and unambiguous consent for one or more specific purposes (article 6.1.a. of the RGPD), and in particular:
• Use a certain number of cookies. For more information about cookies, please consult our Cookie Policy;
• Where appropriate, send you information about our offers, news and events (newsletters, invitations and other publications);
• Use information about your use of the site and your connection to optimise your experience of our site on your device.
And/or where applicable to comply with the legal obligations to which the data controller is subject (article 6.1.c. of the RGPD) and in particular to:
• Handle all complaints,
• To defend our legitimate interests in the event of a dispute or legal action.
And/or where necessary for the purposes of the legitimate interest pursued by the controller or by the third party or parties to whom the data is disclosed, provided that the interests or fundamental rights and freedoms of the data subject do not prevail (Article 6.1.f. of the RGPD), and in particular:
• Ensure the security of the website and its users;
• To answer your questions sent via the “Contact” form or other similar forms;
• Detecting and preventing fraud.
4. Recipient of personal data
In accordance with current regulations, SCEA DU CHATEAU DE LESTANG may share your personal data with:
• Our accommodation providers;
• Our support and marketing service providers (e-mailing tools, customer service, statistical analysis service, etc.);
• Social networks;
• All authorities, courts or any other authorised third party, when the communication of personal data is required by law, a regulatory provision or a court decision, or if this communication is necessary to ensure the defence of the rights of SCEA DU CHATEAU DE LESTANG;
This site may contain links to other websites for referencing purposes only. Consequently, SCEA DU CHATEAU DE LESTANG cannot be held responsible for the content, processing of personal data or practices of third-party websites.
5. Transfer of personal data
SCEA DU CHATEAU DE LESTANG may transfer personal data to countries outside the European Economic Area (“EEA”), including countries that have different data protection standards to those that apply in the EEA.
In this respect, SCEA DU CHATEAU DE LESTANG undertakes to take all necessary precautions to ensure the security of your personal information, and to transfer your personal data with appropriate guarantees in accordance with applicable regulations on the protection of personal data.
A copy of the applicable guarantees may be obtained by sending a request electronically to the e-mail address contact@lestang1573.com or to the postal address of SCEA DU CHATEAU DE LESTANG – Gestion des données personnelles – Château de Lestang – 18300 SANCERRE.
6. Data retention period
Your personal data will only be kept for as long as is strictly necessary to fulfil the purposes for which it was collected, and subject to its legal obligations to retain certain data or the legal possibilities of archiving and anonymisation.
| Data processing | Shelf life |
| Respond to questions sent via the “Contact us” form | Duration of treatment then three (3) years after treatment |
| Complaints management and compliance | Duration of the claim plus five (5) years from its resolution In the event of legal action: duration of the proceedings until the decision or settlement agreement has been fully implemented. |
| Sending information about offers, news or events | Unless deregistered, three (3) years from the last contact with SCEA DU CHATEAU DE LESTANG. |
| Website security and integrity | Three (3) to six (6) months depending on the security and integrity operations carried out |
| Fraud prevention and detection | Three (3) to six (6) months depending on the investigations carried out and the duration of legal proceedings (if any) |
For more information on how long your personal data is kept for a specific purpose, please contact us at the following e-mail address: contact@lestang1573.com.
7. Changes to the Privacy Policy
SCEA DU CHATEAU DE LESTANG may occasionally modify its confidentiality policy.
We therefore encourage you to check this page regularly to ensure that you agree to any changes.
You will be informed of any changes by a special notice on our site (in particular by our updating the date at the top of this charter).
8. Your rights and how to exercise them
You have the right to obtain from the controller confirmation as to whether or not personal data relating to you are being processed and, where they are, access to such personal data and to the information referred to in Article 15 of the GDPR (right of access).
You may withdraw your consent to the processing of your personal data at any time, it being specified that such withdrawal will not call into question the lawfulness of the processing carried out prior to the withdrawal.
You also have the right to request the deletion of your data, to object to their processing and to obtain their limitation or portability within the limits provided for by law, subject to overriding legitimate reasons which SCEA DU CHATEAU DE LESTANG may be able to justify.
You may exercise your rights and send any request for information concerning your personal data electronically to the following e-mail address contact@lestang1573.com or by post to SCEA DU CHATEAU DE LESTANG – Gestion des données personnelles – Château de Lestang – 18300 SANCERRE.
This correspondence must be accompanied by a copy of an identity document and any necessary supporting documents.
SCEA DU CHATEAU DE LESTANG will reply to your request as soon as possible, and in any event, within one (1) month of receipt of your request. This period may be extended by two (2) months depending on the complexity of your request and the number of requests sent to SCEA DU CHATEAU DE LESTANG.
In this case, SCEA DU CHATEAU DE LESTANG will inform you of this extension before the initial period of one (1) month has elapsed.
SCEA DU CHATEAU DE LESTANG will also inform you of the reasons for its refusal or inaction in the event that no action is taken on your request.
You also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL), located at 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, about the way in which we collect and process your data.