This privacy policy aims to inform users of the website https://golf-hotel-mont-griffon.fr/ about how their personal data is collected, used, and protected, in accordance with Regulation (EU) 2016/679 on data protection (GDPR) and the French Data Protection Act.

1. Data Controller

The data controller is:

GREENBLAZE LIMITED
Foreign company (United Kingdom), with a secondary establishment in France
Registered with the Pontoise Trade and Companies Register under number 432 092 575

Registered office:
10th Floor, 240 Blackfriars Road
SE1 8NW London
United Kingdom

Contact email: [email protected]

The data controller determines the purposes and means of processing personal data.

2. Data Collected

The data that may be collected on the website includes:

• identification data: surname, first name
• contact details: email address, telephone number, postal address
• booking data: information related to stays, activities, or services
• payment data: information necessary for processing payments (via secure service providers)
• browsing data: IP address, pages viewed, visit duration, cookies

3. Processing Purposes

Personal data is collected for the following purposes:

• managing contact requests
• managing bookings (hotel, golf, restaurant, events)
• managing online orders
• customer relationship management
• sending commercial information (with consent)
• improving the website and services
• compliance with legal and regulatory obligations

4. Legal Bases

Processing is based on the following legal grounds:

• performance of a contract (booking, order)
• legal obligation (invoicing, accounting)
• legitimate interest (service improvement, fraud prevention)
• consent (commercial prospecting, non-essential cookies)

5. Data Recipients

Personal data is shared with:

• internal departments of GREENBLAZE LIMITED
• technical service providers (hosting, maintenance, e-commerce solution)
• secure payment service providers

The website is hosted by IONOS.

The website uses the e-commerce solution WooCommerce.

Data is not sold or transferred to third parties.

6. Transfers Outside the European Union

Given the company’s structure (United Kingdom), certain data may be transferred outside the European Union.

These transfers are governed in accordance with applicable regulations, particularly through mechanisms recognized by the European Commission ensuring an adequate level of protection.

7. Retention Period

Data is retained for the following periods:

• customer data: for the duration of the business relationship
• invoicing data: 10 years (legal obligation)
• prospecting data: 3 years from last contact
• cookies: maximum 13 months

8. Data Security

GREENBLAZE LIMITED implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data.

Payments are processed via secure service providers complying with applicable standards.

9. User Rights

In accordance with GDPR, you have the following rights:

• right of access to your data
• right of rectification
• right of erasure
• right to object
• right to restriction of processing
• right to data portability

You may exercise these rights by contacting:
[email protected]

You also have the right to lodge a complaint with CNIL.

10. Cookies

The website uses cookies to ensure proper functioning, measure audience, and provide tailored content.

Cookies are classified into categories:

• strictly necessary cookies
• audience measurement cookies
• marketing cookies

Consent is obtained via a banner during the first visit.

Users may modify their preferences or withdraw consent at any time.

11. Commercial Prospecting

Data may be used for sending commercial communications only if the user has consented.

Users may unsubscribe at any time via an unsubscribe link or by contacting [email protected].

12. Policy Updates

This privacy policy may be modified at any time to reflect legal or technical developments.

The applicable version is the one published on the website at the date of consultation.