Privacy Policy - 248 Riverside
Article 1: Preamble
This privacy policy applies to the site: 248 Riverside
The purpose of this privacy policy is to explain to site users:
- How their personal data is collected and processed. Personal data should be considered as any data likely to identify a user. This includes, in particular, first and last name, age, postal address, email address, user location, or IP address;
- What the users' rights are regarding this data;
- Who is responsible for the processing of the personal data collected and processed;
- To whom this data is transmitted;
- If applicable, the site's policy regarding "cookies."
This privacy policy supplements the legal notices and the General Terms of Use that users can consult at the following address:
Article 2: General principles regarding data collection and processing
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site user data respect the following principles:
- Lawfulness, fairness, and transparency: data can only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that their data is being collected and for what reasons;
- Limited purposes: the collection and processing of data are carried out to meet one or more objectives defined in these general terms of use;
- Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site is collected;
- Reduced data retention over time: data is kept for a limited period, of which the user is informed. If the retention period cannot be communicated to the user;
- Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
To be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only occur if they meet at least one of the conditions listed below:
- The user has expressly consented to the processing;
- The processing is necessary for the proper performance of a contract;
- The processing fulfills a legal obligation;
- The processing is necessary to protect the vital interests of the data subject or another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
- The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.
Article 3: Personal data collected and processed during site navigation
A. Data collected and processed and method of collection
The personal data collected on the 248 Riverside site are as follows:
– Last Name, First Name,
– Email,
– Phone
This data is collected when the user performs one of the following operations on the site:
When the user fills out the contact request and reservation request form
The data controller will keep all collected data in the site's computer systems under reasonable security conditions for a period of: 3 years.
The collection and processing of data serve the following purposes:
The preceding data is recorded in order to process a contact request and to learn more about the potential client and their request.
B. Transmission of data to third parties
Personal data collected by the site is not transmitted to any third party and is only processed by the site editor.
C. Data hosting
The 248 Riverside site is hosted by: 02Switch – 4 Chemin des Pardiaux – 63000 Clermont-Ferrand
The host can be contacted at the following telephone number: 04 44 44 60 40
Data collected and processed by the site is exclusively hosted and processed in France.
Article 4: Data controller and data protection officer
A. The data controller
The person responsible for processing personal data is: Ms. Caroline Deroch. She can be contacted as follows:
By email at: deroch@free.fr
The data controller is responsible for determining the purposes and means used for the processing of personal data.
B. Obligations of the data controller
The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed, and to respect the purposes for which this data was collected.
The site has an SSL certificate to ensure that information and data transfers passing through the site are secure.
An SSL ("Secure Socket Layer") certificate is intended to secure the data exchanged between the user and the site.
Furthermore, the data controller undertakes to notify the user in the event of rectification or deletion of data, unless this entails disproportionate formalities, costs, and procedures for them.
In the event that the integrity, confidentiality, or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.
Article 5: User rights
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.
In order for the data controller to grant their request, the user is required to provide: their first and last name as well as their email address.
The data controller is required to respond to the user within a maximum of 30 (thirty) days.
A. Presentation of user rights regarding data collection and processing
a. Right of access, rectification, and right to erasure
The user can review, update, modify, or request the deletion of data concerning them, by following the procedure set out below:
The user must send an email to the personal data controller, specifying the subject of their request and using the contact email address provided above.
b. Right to data portability
The user has the right to request the portability of their personal data, held by the site, to another site, by complying with the following procedure:
The user must make a request for the portability of their personal data to the data controller by sending an email to the address provided above.
c. Right to restriction and objection to data processing
The user has the right to request the restriction of or to object to the processing of their data by the site, which the site cannot refuse, unless it demonstrates the existence of legitimate and compelling grounds that may prevail over the interests, rights, and freedoms of the user.
In order to request the restriction of the processing of their data or to formulate an objection to the processing of their data, the user must follow the following procedure:
The user must make a request for the restriction of the processing of their personal data to the data controller by sending an email to the address provided above.
d. Right not to be subject to a decision based exclusively on an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning them or significantly affects them in a similar way.
e. Right to determine the fate of data after death
The user is reminded that they can organize what should happen to their collected and processed data if they die, in accordance with Law No. 2016-1321 of October 7, 2016.
f. Right to contact the competent supervisory authority
In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe that one of the rights listed above is being infringed, they are entitled to contact the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
B. Personal data of minors
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or older can consent to the processing of their personal data.
If the user is a minor under 15 years of age, the consent of a legal representative will be required so that personal data can be collected and processed.
The site editor reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the consent of a legal representative before browsing the site.
Article 6: Use of "cookies"
The site may use "cookie" techniques.
A "cookie" is a small file (less than 4 KB), stored by the site on the user's hard drive, containing information relating to the user's browsing habits.
These files allow it to process statistics and traffic information, facilitate navigation, and improve the service for the user's comfort.
For the use of "cookie" files involving the saving and analysis of personal data, the user's consent is necessarily requested.
This user consent is considered valid for a maximum period of 13 (thirteen) months. At the end of this period, the site will again request the user's authorization to save "cookie" files on their hard drive.
a. User objection to the use of "cookie" files by the site
The user is informed that they can object to the recording of these "cookie" files by configuring their browser software.
For information, the user can find the steps to follow at the following addresses in order to configure their browser software to object to the recording of "cookie" files:
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
In the event that the user decides to deactivate "cookie" files, they may continue browsing the site. However, any malfunction of the site caused by this manipulation cannot be considered to be the fault of the site editor.
b. Description of "cookie" files used by the site
The site editor draws the user's attention to the fact that the following cookies are used during their navigation:
The cookie policy is accessible here: Cookie Policy
Article 7: Conditions for modifying the privacy policy
This privacy policy can be consulted at any time at the address indicated below:
The site editor reserves the right to modify it in order to guarantee its compliance with current law.
Consequently, the user is invited to regularly consult this privacy policy in order to stay informed of the latest changes that will be made to it.
The user is informed that the last update of this privacy policy took place on: 09/19/2023.