1. 1. Data Controller
The data controller is the public limited company Grand Hôtel des États-Unis, operating under the trade name Hôtel États-Unis Opéra, with its registered office located at 16 rue d’Antin, 75002 Paris, represented by Romain Lahondès, General Manager. Email : contact@hoteleuo.com
2. Data Collected
2.1 During a reservation
Title First name, last name Email address Phone number Stay-related information (dates, occupants, preferences) Payment information transmitted securely via HOTELPARTNER SA
2.2 During newsletter subscription
Form available on the website: First name Last name Email address This data is then automatically transferred to the CRM and marketing tool operated by D-EDGE.
2.3 During website navigation
Technical connection and browsing data : When consulting the site, certain technical information may be collected automatically, such as connection data, pages viewed, or interactions with the site. This information ensures the proper functioning of the site and improves its performance. Cookies : The site also uses cookies and other trackers. Their use and management are detailed in the Cookie Management Policy.
3. Purposes of Processing
3.1 Reservation management
The collected data allows for processing orders, sending confirmations, establishing billing, responding to customer requests, and pre-filling the individual police form required by regulations.
3.2 Customer relationship and service improvement
Data may also be used to manage customer requests and complaints and to conduct internal statistical analyses intended to improve the Hotel's services.
3.3 Commercial prospecting
Collected data may be used to send newsletters and commercial offers, provided that the customer has given prior consent.
3.4 Security and fraud prevention
Data may be used to verify the validity of payments and to ensure the security and protection of the Hotel's information systems.
4. Legal Basis for Processing
- 4.1 Performance of a contract : Data is processed to allow the management of reservations and stays, including confirmation, billing, and processing customer requests.
- 4.2 Legal obligations : Certain data is also processed to meet applicable legal obligations, particularly regarding accounting retention and maintaining the individual police form.
- 4.3 Consent : Data used for sending newsletters and commercial offers is only processed with the customer's prior consent.
- 4.4 Legitimate interest : Other processing operations are based on the Hotel's legitimate interest, notably to guarantee site security, prevent fraud, and perform internal statistical analyses to improve services.
5. Data Recipients
5.1 Internal Hotel services
Data may be accessible to the Hotel's internal teams, including reception staff, administrative services, management, and the sales department, within the limits of their respective missions.
5.2 Technical processors
The following service providers process data on behalf of the Hotel:
- HOTELPARTNER SA, located at Chemin de la Source 5, CH-1009 Pully, Switzerland, operates the reservation and payment platform used by the Hotel.
- D-EDGE, located at 66 rue des Archives, 75003 Paris, provides the CRM and marketing tool used for managing newsletters and commercial campaigns.
- LES APACHES, located at 15 rue de Beaune, 93100 Montreuil, handles the development and hosting of the website and, as such, has technical access to the infrastructure necessary for its operation. These providers act solely on the Hotel's instructions and in compliance with the GDPR.
6. Transfers Outside the European Union
Data transferred to HOTELPARTNER SA is sent to Switzerland. This country benefits from an adequacy decision by the European Commission.
7. Retention Periods
Reservation and billing data : 10 years Commercial prospecting data : duration of the commercial relationship, then archiving or anonymization Request-related data : duration strictly necessary for processing
8. Mandatory or Optional Nature
Certain data is essential to finalize a reservation. Other fields are optional.
9. Customer Rights
The customer has all the rights provided by data protection regulations: Right of access Right to rectification Right to erasure Right to restriction Right to object Right to portability Right to withdraw consent (newsletter)
Any request can be sent digitally to contact@hoteleuo.com or by post to Hôtel États-Unis Opéra, 16 rue d’Antin, 75002 Paris.
10. Data Security
The Hotel implements the necessary measures to guarantee the confidentiality, integrity, and protection of data.
11. Cookie Management Policy
The rules for using cookies are detailed in the Cookie Management Policy available on the site.
12. Complaints
In the event of a difficulty, the customer may contact the CNIL : www.cnil.fr