Personal data protection clause (RGPD)

In the course of its business, Hôtel du Commerce, located at 8 place du Mandarous, processes personal data in accordance with the regulations in force, in particular the Regulation (EU) 2016/679 of the European Parliament of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data the Loi Informatique et Libertés n°78-17 of January 6, 1978 as amended.

1. Data controller

The data controller is :
SARL JS INVEST - Hôtel du Commerce
Address : 8 place du Mandarous, 12100 MILLAU
Contact e-mail: hotelducommerce.millau@orange.fr
Data Protection Officer (DPO): Julie Sellier

2. Data collected

The hotel collects processes the following personal data:

  • Identity (surname, first name)

  • Contact details (address, telephone, e-mail)

  • Booking stay details

  • Payment information (via secure service providers)

  • Customer preferences (language, special requirements, food allergies, etc.)

3. Data processing purposes

Data is collected for the following purposes:

  • Management of reservations stays

  • Invoicing payment

  • Improvement of service quality

  • Sending commercial offers with consent

  • Legal obligations (billing, security, etc.)

4. Legal basis for processing

Processing is based on :

  • Performance of a contract (reservation, hotel service)

  • Compliance with legal obligations

  • Customer consent (particularly for commercial communications)

  • The hotel's legitimate interests (service improvement, security).

5. Retention period

Data is kept :

  • For the duration of the stay 3 years from the last commercial contact for data used for prospecting purposes.

  • 10 years for invoicing data (accounting obligation)

  • Less if deletion is requested by the data subject, unless otherwise required by law.

6. Recipients of data

Data may be transmitted to the following service providers, strictly within the scope of the defined purposes:

  • Booking service providers (e.g. Channel Manager, PMS, OTA)

  • Online payment services

  • IT subcontractors (hosting companies, IT service providers)

  • Competent authorities in the event of legal obligation

All subcontractors are bound by a contractual obligation to comply with the RGPD.

7. Rights of data subjects

In accordance with the regulations, you have the following rights:

  • Right of access, rectification, deletion

  • Right to limit object to processing

  • Right to data portability

  • Right to withdraw your consent at any time

  • Right to lodge a complaint with the CNIL (www.cnil.fr)

You can exercise your rights by sending a request to :
hotelducommerce.millau@orange.fr by post to the establishment's address.

8. Security

The Hotel implements all appropriate technical organizational measures to guarantee the security confidentiality of personal data.