Privacy and data protection policy

Data controller

Personal data is collected by:
The SASU 9Hotel Collection with a capital of €59,500,000, headquartered at 8 Rue Bayen (75017 Paris), registered with the Paris Trade and Companies Register under number 521 770 438. 

We attach great importance to the confidentiality and protection of the personal data we process.
Indeed, as the legal entity responsible for processing your personal data, we do our utmost to protect your privacy and the information you provide us with, particularly when you visit our website, book a room or subscribe to our newsletter.
In this respect, our privacy and personal data protection policy is part of this approach.
By reading this document, you will know specifically how we collect your personal data, what type of information is collected and for what purpose it is used, with whom we share this data and what measures are taken to protect it.
By using this website and/or our products and services, you consent to the processing of your personal data as described in this privacy policy.
We may change our Privacy and Data Protection Policy from time to time. Any changes will be effective immediately upon posting on our website. Consequently, we invite you to refer to it each time you visit our website in order to read the latest available version.
 

We collect and process the following data:
● Your identity (title, surname, first names, postal address, telephone numbers, e-mail address, date of birth, IP address, company, a copy of an identity document may be kept for the purpose of proof of the exercise of a right of access, rectification or opposition or to meet a legal obligation) ;
● Your browsing data
● Data relating to your means of payment (bank details, cheque number, bank card number, expiry date of the bank card, visual cryptogram)
● The data relating to the booking you made
● Data relating to the transaction carried out
● The data relating to the follow-up of the commercial relationship, those necessary for the realization of the actions of development of customer loyalty, prospecting, study, survey and promotion.
● Data relating to the organization and processing of contests, lotteries and any promotional operation
● Geo-location data
 

Why do we collect personal data?

We collect and use your personal data in order to improve and develop our products and services, to provide you with quality customer service, to provide you with a personalized experience during your stay at the Hotel and the use of our services and to facilitate your navigation on our website.
We collect your personal data for legitimate reasons and/or with your consent.
 

We use your personal data for the following purposes:

1. In connection with the conclusion of a contract or the fulfilment of contractual obligations
We may collect your personal data in order to identify you, to provide you with a service or to make and manage your bookings.
The gathering of your personal data allows us to provide you with information about your booking, billing and manage customer relation. This data may be used prior to your stay to send you information about your stay at the Hotel. After your departure from the Hotel, we may also send you, in addition to information about your stay, satisfaction surveys in order to collect feedback on your experience at the Hotel.
2. Because of our legitimate interest in collecting your personal data, we may also be required to send you information about your stay.
We have a legitimate interest in collecting your personal data in order to communicate with you and answer your questions.
In addition, we use personal data to monitor the activity of our users' accounts and to ensure the security of our customers, including monitoring for possible fraud and analyzing any suspicious, potentially illegal activity or activity that is not in accordance with our terms and conditions of sale and/or use. Such processing is justified by our legitimate interest in ensuring the security of our products and services.
3. In your quality of Customer
In your quality as a Customer, we may use your personal data, and mainly information relating to your stay, in order to individualize your booking experience on our website, to personalize our offers for similar services and to provide you with recommendations regarding our services offered by third party websites and applications that may be of interest to you.
We use personal data to facilitate our advertising and marketing campaigns for similar services and to provide you with information about any services we think may be of interest to you.
As a result, we may send you promotional messages, marketing offers, advertisements and other information for similar services that may be relevant to you based on your travel preferences. This includes possible contests and other promotional activities. 
You will always have the opportunity to ask us not to send you promotional materials or information.
4. In order to comply with legal obligations
We process your personal data in order to fulfil our legal obligations.
We store your billing information and other information collected about you for as long as is necessary for accounting purposes or to comply with other legal obligations we are bound by.
We may process your personal data for purposes other than those mentioned here, but only if they are compatible with the original purpose for which the data were collected. In doing so, we will ensure that:
the link between the purposes, the context and the nature of the personal data are appropriate for further processing;
further processing does not harm your interests and;
that there is an appropriate safeguard for the processing carried out.
What type of data do we collect and how do we collect it?
The term "data" refers to any personal information that identifies you as an individual and that you provide within the framework of your interactions with us.

On various occasions, we may collect information about you, as follows:

1. The data you provide us with
We collect socio-professional data about you that you may provide us with, such as your name, email address, home and work addresses, telephone number, nationality, date of birth, preferences during your stays, which you provide us with when you book a room through our reservation system or directly at the hotel, purchase and/or use one of our products or services, or during your stay at the Hotel, when you connect to the WI-FI service provided by the Hotel or during the numerous interactions that you may have with our services, including when you register on our website, when you contact us, when you sign up for our newsletters, online surveys or promotions, or when you use our online help section or any other feature of our website.
In addition, on the occasion of any booking, we (or our financial service providers) collect personal data relating to that booking as it is necessary to process your request. The collected information includes payment details, including your credit/debit card number.
 

2. The data we automatically collect 

When you browse our website, we collect data relating to the follow-up of the business relationship: type of stay booked, type of room booked, special requests made to the Hotel in anticipation of your stay, products and/or services purchased in addition to the booking, service or subscription taken out, quantity, amount, frequency, as well as any other relevant information about your stay at the Hotel, the history of your bookings and the services you have requested, correspondence and/or telephone exchanges with our teams, etc.
We may also collect data relating to the type of device you use when you browse our site or, during your stay at the Hotel, when you use the Hotel's Wi-Fi connection (your unique device ID, the IP address of your device, your operating system, the browser you use, your usage, diagnostic and location data from or about your computers, the type of device from which you access our products and services). When such data is available, we may use your GPS coordinates, IP address and other technologies to determine the approximate location of your device, with the purpose of improving our products and services and providing you with a better experience as a user of our services. This also includes modifications automatically stored by cookies and other similar tools that we use or that are used by our third-party service providers.
 

3. Public information
We may collect information about you from you which is publicly available.
How long do we collect the data?
We only retain your personal data for as long as it is necessary for the purposes set out in this Privacy Policy or as required by applicable law. How long we keep your personal data depends on the nature of the data and the purposes for which we collect it.
Your personal data concerning information relating to your browsing on the website and the promotional announcements that are disseminated to you are kept, on an active basis, for a period of three (3) years from your last activity on the website or on an electronic communication medium (in particular e-mail). At the end of this period, your profile is considered "inactive" and is automatically disabled.
Your personal data in relation to a reservation on the site (surname, first name, product or service, billing address, preferences relating to your stay at the Hotel, etc.) are kept for a period of ten (10) years from the date of your reservation.
However, at the end of the aforementioned periods, your personal data may be subject to intermediary archiving in order to meet our legal, accounting and tax obligations and/or any limitation periods attached to our relationship.
Where are your personal data stored?
We may use the services of various third-party service providers to assist us in providing services related to our website. Our service providers may be located in or outside the European Economic Area ("EEA"). If necessary, transfers of your personal data will be carried out in accordance with the applicable laws. 
Our service providers have limited access to your personal data in order to perform the tasks they perform on our behalf and are contractually obliged to protect and use your personal data only for the purposes for which it was provided and in accordance with this Privacy Policy. Before we share your personal data with third parties, we have put in place the necessary measures to ensure that there is an adequate level of data protection in place at such third parties.
 

With whom do we share personal data?

If you book a room on our website, we may share your personal data with the Hotel where you have chosen to stay in order to finalize your reservation. Please note that if your personal data is transferred to a country outside the European Union, we will ensure that we take the necessary steps to maintain the highest level of protection for the confidentiality of your personal data. 
On the other hand, we undertake not to sell your details to third parties for their own commercial activities.
We may also be required to temporarily and securely transfer to third parties certain personal data that is necessary for the operation, animation, maintenance of our website, to ensure in particular the sending of e-mails that you have chosen to receive, and/or the performance of tasks necessary for the execution of services, your reservation, to ensure the realization of services.
If you do not want us to share your personal information with these companies, please contact our "customer services" at the following address "9Hotel Collection: 251 Boulevard Pereire - 75017 Paris, FRANCE".
We may also be under a legal obligation to disclose personal information when disclosure is required in connection with a legal proceeding, a court order, subpoena, summons or legal process, or when required by law to protect human life; to maintain the safety of our products; and to protect our rights and our customers, as well as in the context of a binding investigation or in the event of the sale of one of the properties of the 9Hotel Collection Group and within the strict limits of what is required in accordance with the applicable regulations.
 

How do we protect your personal data?

We use appropriate technical and organizational measures, in accordance with applicable legal requirements, to protect your personal data against unlawful or accidental destruction, loss or alteration or unauthorized disclosure or access. 
We are constantly adapting our security measures to keep pace with technological advances and developments. In order to make card payments as secured as possible, all data is transmitted in encrypted form. This means that your data is transmitted via a secured connection so that external parties cannot read your personal data. For bookings and purchases by card, we work with payment service providers who comply with the PCP protocol and who assist us in verifying directly with your bank that the card allows you to make purchases. Our payment service providers process your card data in accordance with the international PCI DSS security standards developed by the credit card companies VISA, MasterCard, Diners, American Express, JCB and other payment methods. This means that your card data is processed with a very high level of security. When you pay by card, we reserve the right to carry out an identity check. 
You can also help secure your data by taking the following security measures:
Change your password regularly using a combination of letters and numbers;
Ensuring you use a secured internet browser.
 

What about Cookies and other technologies?

A "cookie" is a connection indicator that designates a text file that can be saved, subject to your choices, in a dedicated space on your terminal's hard disk when you consult the website. A cookie file enables its issuer to identify the terminal in which it is stored during the period of validity or registration of the cookie and must therefore be considered as personal data.
We (and third-party service providers acting on our behalf) use cookies and similar technologies to process your personal data when you visit our website.
This enables us to log you in, provide you with advertising that focuses on your travel preferences and interests, combat fraud, analyze the performance of our products and services and for other legitimate purposes, such as to find out which pages of our site are visited most frequently and what activity and time internet users spend on our website. These technological tools also allow us to evaluate the effectiveness of our marketing and thus the attractiveness of our products and services to our customers.
As with most websites of the same nature, certain information is automatically recorded over a protocol. This information includes protocol addresses (IP addresses), the type of browser used, the internet service provider, reference and end pages, operating system, date, time and Clickstream data.

Cookies do not record information provided by users during an online booking or when registering a customer account. Cookies identify your browser (rather than you) and cannot by themselves reveal your identity.
You can set your browser to block these cookies, however, this may affect your ability to perform certain operations, use certain features and access certain content on our website. If you have consented to the use of cookies on our website, these cookies have a life span of thirteen (13) months.

In addition to the cookies used to identify, in particular, the browsing history and to feed statistical tools, our partners' technologies are subject to their own personal data protection policies. We inform you of the purpose of the Cookies of which we are aware and the means you have to make choices with regard to these Cookies.
 

What are your rights and more specifically, your rights of recourse?

Right to information: This allows you to know whether your personal data is being processed; what data is being collected, where it comes from, why and by whom it is being processed.
Right of access: You have the right to access the collected data concerning you. This includes your right to request and obtain a copy of your personal data collected.
Right of rectification: You have the right to request the rectification or deletion of your personal data that is incorrect or incomplete.
Right of deletion: Under certain circumstances, you may request that your personal data be deleted from our archives.
Right to restrict processing: You have the right to restrict the processing of your personal data.
Right to object to processing: In certain cases, you have the right to object to the processing of your personal data, for example in the case of direct marketing.
Right to object to automated processing: You have the right to object to automated processing, including profiling. You may exercise this right when the use of profiling produces legal effects that significantly affect you. 
Right to data portability: You have the right to obtain your personal data in machine-readable form or, if feasible, by direct transfer from one processor to another.
Right to withdraw your consent: You have the right to withdraw any consent given for the processing of your personal data.
Right to give instructions as to the fate of your personal data after death: You have the right, at any time, to give us instructions as to how you wish the personal data we process about you to be handled after your death.
Right to lodge a complaint with the supervisory authority

In the event of a request for the deletion or suppression of your data, we inform you that we may, if necessary, archive your data for the period of time permitted by the applicable legal provisions in order to meet our legal obligations or if we consider it is necessary to do so in order to prevent possible fraud or any other type of abuse, as well as for legitimate purposes such as the analysis of non-personal data, the recovery or the respect of our/your rights in the event of a complaint or appeal.

You may also object to the collection of your personal information for targeted advertising. Please contact us via the contact details below:
SASU 9Hotel Collection - 8 Rue Bayen - 75017 Paris France // Tel: +33 (0) +33.1.58.36.07.50 // e-mail: info@le9hotel.com

In accordance with article L.223-1 of the French Consumer Code, Customer who does not wish to be the subject of commercial prospecting by telephone can register free of charge on a telephone prospecting opposition list. This list is accessible via the following site: www.bloctel.gouv.fr.

What about third-party websites and services?

Our websites, products and services may contain links to or provide you with the ability to access third party websites, products and services. We are not responsible for the privacy practices employed by these third parties or for the information or content of their products and services. This privacy statement applies exclusively to data collected by us through browsing and operations relating to our products and services.

What about information about Minors?

Our products and services are exclusively intended for capable adults. The collection of information on minors will only concern their surname, first name, nationality and date of birth and can only be transmitted by a legally capable adult. Consequently, it is your responsibility to ensure that your children do not transmit any personal data to us without your authorization. If you become aware that a minor under the age of 16 has provided us with personal data, please inform us immediately.