Privacy policy
Introduction
In the course of using its services, in particular the services available on its website, mobile site, online shop and mobile applications, SAS EA LM HIRTZENSTEIN, as data controller, may collect and process personal data concerning you.
We are committed to complying with the rules on the protection of the privacy of prospects and visitors to our sites: website, mobile site, online shop and mobile applications. All personal data processing carried out in connection with the services available complies with the applicable local regulations on personal data protection, in particular the provisions of the amended French Data Protection Act of 6 January 1978 and the General Data Protection Regulation (EU Regulation 2016/679) or “GDPR”.
1 - What are our commitments regarding personal data protection?
SAS EA LM HIRTZENSTEIN undertakes to guarantee a high level of protection for the personal data of its customers, prospects, users of its sites (website, mobile site, online shop and mobile applications) and any other person whose personal data it processes.
SAS EA LM HIRTZENSTEIN undertakes to comply with the regulations applicable to all the personal data processing it carries out:
- Your personal data is processed lawfully, fairly and transparently;
- Your personal data is collected for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes;
- Your personal data is kept in an adequate and relevant manner and is limited to what is necessary in relation to the purposes for which it is processed;
- Your personal data is accurate and kept up to date, and every reasonable step is taken to ensure that inaccurate data, having regard to the purposes for which it is processed, is erased or rectified without delay.
SAS EA LM HIRTZENSTEIN implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and data of the persons concerned from the design stage of processing operations.
In addition, SAS EA LM HIRTZENSTEIN contractually requires its subcontractors (service providers, suppliers, etc.) to provide the same level of personal data protection.
2 - What personal data do we collect?
A - Depending on the purpose of collection
The personal data we collect varies depending on the purpose of collection and the Service we provide to you.
Generally, we may collect the following categories of personal data directly:
a) personal contact details, such as your surname, first name, email address, postal address and telephone number(s);
b) the credentials used to access your online account, i.e. your username and password. We need these to create a personal user account;
c) exchanges with us, which may include details of conversations via chat or customer service;
d) demographic information, such as your age, gender and lifestyle preferences (including your favourite products and your interest in them);
e) browsing history, such as pages visited, date of visit, location during the visit or IP address;
f) payment information when a purchase or booking is made on one of our sites, online shops or applications. Generally, the invoice is issued in your name, with your billing address and payment details such as your credit card or bank account;
We may also collect personal data about you indirectly when you share content on social networks, websites, shops or applications relating to our products and services, or respond to our posts and promotional announcements on social networks.
B - Personal data concerning minors
SAS EA LM HIRTZENSTEIN does not collect or process personal data relating to children under the age of 18 without the prior consent of the parents or holders of parental responsibility for the child.
If personal data concerning children is collected via our sites (website, mobile site, online shop and mobile applications), parents or holders of parental authority may object by contacting us at the address given at the bottom of this page.
3 - How is personal data collected?
A - Means of collecting your data
In the course of our relationship, you may provide us with your personal data by various means, in particular on our sites (website, mobile site, online shop and mobile applications) when browsing the internet, making purchases or bookings, filling in the various collection forms, subscribing to the e-newsletter, creating an account, submitting a job application, posting comments on our social network pages, making any contact with our establishment, or providing us with your personal data in any other way.
B - IP address
An IP address is a series of numbers automatically assigned to your computer by your internet service provider each time you connect. With each of your requests on the website, our servers record a trace of your visit. We collect IP addresses in order to analyse trends on the website. We do not pass on any information that could identify you, which means that your session will be recorded but will remain anonymous to us. We may use your IP address in cooperation with your internet service provider to identify you if we need to enforce the terms of use to protect our services or customers, or in compliance with applicable laws.
C - Cookies
In order to continually improve the quality of the services offered on our sites (website, mobile site, online shop and mobile application) and to ensure they meet your expectations, SAS EA LM HIRTZENSTEIN may use “cookies”, text files used to identify your device when you connect to one of our services. Placing a cookie or tracker on your device (computer, tablet, smartphone, etc.) allows SAS EA LM HIRTZENSTEIN to collect information and personal data, depending on the settings you have chosen for your device.
Types of cookies used:
a) Cookies essential to the use of the website. They allow you to use the main features of the website, such as purchasing or booking services. If you disable cookies, you will no longer be able to benefit from these features. The information stored cannot be used for commercial purposes.
b) Website performance cookies. Performance cookies allow us to optimise our website and detect any technical problems you may encounter. They allow us to collect information on how you use the website, including the number of visits per page, the number of error messages displayed, the time spent on a page and the number of clicks on an area of the website. The information stored cannot be used for commercial purposes.
c) Functionality cookies. These cookies allow the website to remember the choices you have made (such as your username, chosen language or the region you are in) and to provide more precise and personalised features. These cookies may also be used to remember changes made by the user, such as text size or font. They may also be used to provide services you have requested, such as watching a video or leaving a comment on a blog. The information collected by these cookies may be anonymised and cannot track your browsing activity on other websites. By using our website, you agree to receive this type of cookie on your device.
d) Advertising and marketing cookies. These cookies collect information about your internet browsing habits in order to offer you advertisements tailored to you and matching your interests. They also make it possible to limit the number of times you see an advertisement and help us measure the effectiveness of our advertising campaigns. They are generally installed by advertising networks with the permission of the website operator. They remember visits made to a website and share this information with other companies (for example advertisers). Targeted or advertising cookies are often linked to website features provided by the partner company. The information is collected and shared with third parties to offer audience targeting and optimisation solutions for advertisers and publishers. No personal data is collected and no individual can be identified from the data collected.
e) Cookies from third-party websites and social networks. Our website contains links and/or content leading to other websites and social networks, and we do not know which cookies they use. To find out more, please consult the information provided by these third-party websites and social networks on their own cookies.
D - Respect for your privacy
We are committed to protecting your privacy and respect the following 2 principles.
- We do not associate any information that could directly and personally identify you with your cookies. Cookies can in no way reveal your address, date of birth, telephone number or any other information that could identify you.
- We do not provide any personal information to advertisers or to third-party sites that display our interest-based advertisements.
If your computer or mobile device is used by several people, or if it has several browsers, the content displayed to other users may reflect your preferences. If you wish, you can change your browser settings.
For more information on how cookies and targeted advertising work, you can visit the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
E - Links to third-party sites
Our sites (website, mobile site, online shop and mobile applications) may contain links redirecting to third-party websites.
We accept no responsibility for the collection, use, management, sharing or disclosure of data and information by these third parties.
The disclosure of information on third-party sites is governed by the privacy policy and terms of use of those sites. We recommend that you read the privacy policies of these websites before submitting any personal information.
4 - What is the data that may be collected used for?
Your data is mainly used for booking and purchasing (provision of services, specific services and products), prospecting, customer loyalty, events, commercial information, satisfaction surveys, organising competitions, new services and products designed to improve your customer experience at our establishment, statistical studies, recruitment, after-sales service and handling your requests and/or complaints. Apart from cases where your consent has been obtained (in particular to send you personalised offers), the processing of your data for the various purposes mentioned above is necessary in particular:
- To ensure the performance of the service contract;
- To comply with a legal obligation;
- For the purposes of the legitimate interests pursued by our establishment (in particular developing new services and offers, improving customer service, etc.).
More specifically, your data is used:
- To allow you to benefit from all the services available on our establishment’s website, mobile site, shop and mobile applications: creating a user account, e-newsletter, booking management, assistance and complaints, management of loyalty programmes, etc.;
- To allow you to browse our websites;
- To match our information, notifications, offers and other services as closely as possible to your interests;
- To facilitate the completion of administrative formalities relating to bookings and purchases.
5 - How long is your data kept?
SAS EA LM HIRTZENSTEIN undertakes to keep your personal data for no longer than is necessary for the purposes for which it is processed.
Retention periods are defined according to the purposes of the processing carried out by SAS EA LM HIRTZENSTEIN and take into account, in particular, the applicable legal provisions requiring a specific retention period for certain categories of data, any applicable limitation periods and the CNIL’s recommendations concerning certain categories of data processing.
6 - Who may access your personal data?
A - Recipients of your data
The data collected on our website, mobile site, online shop and mobile applications may be disclosed to our internal staff or to its ancillary service providers (subcontractors, service providers, banks) in connection with the performance of all or part of the services referred to above. We would remind you that in this context, SAS EA LM HIRTZENSTEIN requires its service providers to implement strict confidentiality and data protection measures.
B - Data transfers outside the European Union
Personal data may be processed outside the European Economic Area (EEA). If so, SAS EA LM HIRTZENSTEIN will do everything possible to ensure that this international data transfer benefits from an adequate level of security and appropriate safeguards.
7 - How can you exercise your rights?
In accordance with the applicable regulations on personal data protection, you may at any time exercise your rights of access, rectification and deletion of data concerning you, as well as your rights to restrict and object to processing and to the portability of your personal data.
In addition, you are legally entitled to set out instructions concerning what happens to your personal data after your death.
Furthermore, anyone who was a minor at the time their personal data was collected may have it erased as soon as possible.
These rights may be exercised by writing to the following address:
SAS EA LM HIRTZENSTEIN
LIEU-DIT HIRTZENSTEIN
68700, Wattwiller
France
In this context, please include with your request the information needed to identify you (surname, first name, email) and any other information needed to confirm your identity. You also have the right to lodge a complaint with the French data protection authority (Commission Nationale de l’Informatique et des Libertés – CNIL) in the event of a breach of the applicable regulations on personal data protection, in particular the GDPR.
8 - IT security / Securing transactions
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for SAS EA LM HIRTZENSTEIN. We therefore implement all appropriate technical and organisational measures, having regard to the nature, scope and context of the personal data you provide and the risks presented by its processing, to preserve the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorised access to this data.
We offer a secure online payment system using the latest technologies.
SAS EA LM HIRTZENSTEIN strives to combat identity theft on the internet. This is why, for example, we use a system to detect fraudulent bank card payments. This system is designed to protect you in the event of the loss or theft of your bank card.
The security and confidentiality of personal data depend on good practice by everyone. This is why we ask you not to disclose your passwords to third parties, to always log out of your profile and social account (particularly in the case of linked accounts) and to close your browser window at the end of your session, especially if you access the internet from a computer shared with other people. This will prevent other users from accessing your personal information.
9 - Contact us
For any further questions about this policy or about how SAS EA LM HIRTZENSTEIN processes your personal data, please contact us at the following address: [email protected]
10 - Changes to the statement
SAS EA LM HIRTZENSTEIN reserves the right to amend its personal data protection policy. When we make substantial changes to this Statement, we will publish a link to the Statement on the home page of our website.
11 - Objection to telephone canvassing
Users may register on the list of objection to telephone canvassing by visiting the following link: https://www.bloctel.gouv.fr/