1. Identity and contact details of the Data Controller
2. Data collected and collection methods
3. Legal basis and purpose of processing
The SCEA DU CHATEAU DE LESTANG ensures :
To process your data only in the cases provided for by the applicable regulations, and in particular on the basis of your free, specific, informed and unambiguous consent for one or more specific purposes (article 6.1.a. of the RGPD), and in particular:
• Where appropriate, send you information about our offers, news and events (newsletters, invitations and other publications);
• Use information about your use of the site and your connection to optimise your experience of our site on your device.
And/or where applicable to comply with the legal obligations to which the data controller is subject (article 6.1.c. of the RGPD) and in particular to:
• Handle all complaints,
• To defend our legitimate interests in the event of a dispute or legal action.
And/or where necessary for the purposes of the legitimate interest pursued by the controller or by the third party or parties to whom the data is disclosed, provided that the interests or fundamental rights and freedoms of the data subject do not prevail (Article 6.1.f. of the RGPD), and in particular:
• Ensure the security of the website and its users;
• To answer your questions sent via the “Contact” form or other similar forms;
• Detecting and preventing fraud.
4. Recipient of personal data
In accordance with current regulations, SCEA DU CHATEAU DE LESTANG may share your personal data with:
• Our accommodation providers;
• Our support and marketing service providers (e-mailing tools, customer service, statistical analysis service, etc.);
• Social networks;
• All authorities, courts or any other authorised third party, when the communication of personal data is required by law, a regulatory provision or a court decision, or if this communication is necessary to ensure the defence of the rights of SCEA DU CHATEAU DE LESTANG;
This site may contain links to other websites for referencing purposes only. Consequently, SCEA DU CHATEAU DE LESTANG cannot be held responsible for the content, processing of personal data or practices of third-party websites.
5. Transfer of personal data
SCEA DU CHATEAU DE LESTANG may transfer personal data to countries outside the European Economic Area (“EEA”), including countries that have different data protection standards to those that apply in the EEA.
In this respect, SCEA DU CHATEAU DE LESTANG undertakes to take all necessary precautions to ensure the security of your personal information, and to transfer your personal data with appropriate guarantees in accordance with applicable regulations on the protection of personal data.
A copy of the applicable guarantees may be obtained by sending a request electronically to the e-mail address email@example.com or to the postal address of SCEA DU CHATEAU DE LESTANG – Gestion des données personnelles – Château de Lestang – 18300 SANCERRE.
6. Data retention period
|Respond to questions sent via the “Contact us” form
|Duration of treatment then three (3) years after treatment
|Complaints management and compliance
|Duration of the claim plus five (5) years from its resolution In the event of legal action: duration of the proceedings until the decision or settlement agreement has been fully implemented.
|Sending information about offers, news or events
|Unless deregistered, three (3) years from the last contact with SCEA DU CHATEAU DE LESTANG.
|Website security and integrity
|Three (3) to six (6) months depending on the security and integrity operations carried out
|Fraud prevention and detection
|Three (3) to six (6) months depending on the investigations carried out and the duration of legal proceedings (if any)
For more information on how long your personal data is kept for a specific purpose, please contact us at the following e-mail address: firstname.lastname@example.org.
8. Your rights and how to exercise them
You have the right to obtain from the controller confirmation as to whether or not personal data relating to you are being processed and, where they are, access to such personal data and to the information referred to in Article 15 of the GDPR (right of access).
You may withdraw your consent to the processing of your personal data at any time, it being specified that such withdrawal will not call into question the lawfulness of the processing carried out prior to the withdrawal.
You also have the right to request the deletion of your data, to object to their processing and to obtain their limitation or portability within the limits provided for by law, subject to overriding legitimate reasons which SCEA DU CHATEAU DE LESTANG may be able to justify.
You may exercise your rights and send any request for information concerning your personal data electronically to the following e-mail address email@example.com or by post to SCEA DU CHATEAU DE LESTANG – Gestion des données personnelles – Château de Lestang – 18300 SANCERRE.
This correspondence must be accompanied by a copy of an identity document and any necessary supporting documents.
SCEA DU CHATEAU DE LESTANG will reply to your request as soon as possible, and in any event, within one (1) month of receipt of your request. This period may be extended by two (2) months depending on the complexity of your request and the number of requests sent to SCEA DU CHATEAU DE LESTANG.
In this case, SCEA DU CHATEAU DE LESTANG will inform you of this extension before the initial period of one (1) month has elapsed.
SCEA DU CHATEAU DE LESTANG will also inform you of the reasons for its refusal or inaction in the event that no action is taken on your request.
You also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL), located at 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, about the way in which we collect and process your data.