DATA PROTECTION CHARTER FOR ODALYS CUSTOMERS
Latest update - 31/03/22

Dear clients,

The General Data Protection Regulation, or GDPR, is applicable in the European Union from the 25th of May 2018.

The implementation of this regulation is an opportunity for the Odalys Group to confirm, via this Charter which is incorporated in the General Booking Conditions, the principles that guide the usage of your personal data.

This charter may be updated regularly, in particular to take account of any changes in the regulations or to incorporate new organizational methods within the Odalys Group.

Definition of personal data

Personal data is information in a format that identifies, directly (name, first name) or indirectly (login, telephone number, biometric data, etc.), an individual.

Examples: name, photograph, IP address, telephone number, computer login (account login / password), postal address, email.

Processing of personal data

The processing of personal data may consist of collecting, recording, organizing, storing, adapting, modifying, extracting, consulting, using or communicating personal data as defined above.

Scope of the charter

This Charter applies to all processing of personal data implemented by all companies within the Odalys Group (the tourism holding company and all of its subsidiaries) in our establishments (tourist residences, business residences, student residences, campsites, ...), on our booking websites and, in general, in the relationships between the Odalys Group and all of its customers.

Personal data collected by Odalys

This could be :

• Your details and your marital status (name, surname, date of birth, nationality, postal address, email address, phone number, car license plate).
• The names of the people who are staying with you.
  
  In the case of minors, we collect, via an accompanying adult, only their name, first name, nationality and date of birth.
• Information about your means of payment (credit card number).
• Your holiday dates.
• Your preferences during your stay (eg. orientation of the apartment, type of beds) and related activities (eg. reservation of ski equipment or ski passes).
• Certain restrictions that must be taken into account during your stay (eg. people with reduced mobility).
• Your IP address, the browser you are using and your language settings.
• The way you browse our website (pages visited, clicks).
• Some of our establishments have video surveillance installed for the protection of staff, guests and their belongings. With this in mind, you may be filmed while onsite.

When are personal data collected?

Personal data are collected:

• When booking a stay, whether this reservation is direct or that it intervenes via a third party (tour operators, works councils, travel agencies, ...), that it takes place physically, by mail, online or on the telephone and that it concerns a site managed directly by Odalys or a site managed by a accommodation provider.
• When consuming additional services in our facilities (excursions, catering, bar).
• During claims or litigations.
• When participating in satisfaction surveys.
• When participating in quizzes/competitions.
• When subscribing to newsletters.
• When connecting to our websites (IP address, cookies).
• When viewing our pages on social networks.
• When transferring some information about you to certain providers (eg. banks for payments, routers for sending catalogues or marketing providers).
• When images are captured by video surveillance systems.

For what purpose do we collect personal data?

Personal data are collected to:

• Know you better.
• Communicate with you.
• Manage our relationship (bookings, special requests, during the stay, after-stay).
• Ensure the promotion of our brands.
• Offer you at all times a quality customer service that allows you to take advantage of customized offers that best meet your expectations, as reflected in your wishes, user habits and comments.
• Carry out within this framework and with this objective, analysis and studies aimed at qualifying / enriching the customer database via a better knowledge of your interests.
• Extract, analyse and combine data.
• Establish statistics.
• Manage any possible complaints.
• Secure the payments you make.
• Ensure the accounting follow-up of your consumptions of additional services (catering, bar, excursions, ski equipment rental, purchase of ski passes...).
• Secure and improve the use and navigation on Odalys Group websites.
• Respect the legal and regulatory environment in which the Odalys Group operates (response to a request from the authorities, handling of disputes, monitoring of compliance with applicable regulations).
• Prevent fraud.
• Organize quizzes /competitions.

Odalys’ 10 Data Protection Commitments

1. To collect no information that is not strictly necessary for the conduct of our activities, for the satisfaction of our customers and for the improvement of our products and services.
2. To collect no so-called "sensitive" information relating to : the allegedly racial or ethnic origins; political, philosophical, religious opinions; union membership; sexual orientation; health conditions; genetic or biometric data; criminal offenses or conviction.
3. To limit as much as possible the number of personnel within the Odalys Group having access to personal data by providing specific authorizations in the departments concerned (sales department, facility operators, accounting, IT department, marketing department, legal department). To initiate in-house awareness campaigns on a large scale on the protection of your privacy.
4. To keep data only for a duration compatible with the purposes of the treatment or with our legal obligations: 13 months for cookies (from the last login), 5 years for other personal data (from the last transaction), 1 month for video surveillance images.
5. To transfer no data outside the European Union.
6. To guarantee at any time the right to exercise the rights held concerning your personal data:
• Right to access.
• Right of opposition.
• Right of rectification.
• Right to erasure.
• Right to limitation.
• Right to portability.

To exercise your rights, you can contact us at the following email address:

dpo@odalys-vacances.com

In this case, you will be asked to provide identification in order to exercise your rights.

The deadline for responding to a completed request is 2 months.

7. Confidentiality and security

To make every effort at all times, online, physically and organisationally, to protect your personal data against any use that has not been authorized, as a result of intrusion, accidental or voluntary, into our information systems, including our payment systems.

For example: setting up firewalls, using Secure Socket Layer technology on credit card payments, setting up passwords on all computers with access to personal data.

8. Transfers

To make sure that the providers (marketers, hosts, marketing providers,...) to which we transfer your personal data, strictly respect the regulations of the RGPD.

9. Consent

To collect your clear and unambiguous consent to the use of your data.

To offer you at any time the opportunity to refuse to receive messages from us (via an unsubscribe link).

10. Designation of a Data Protection Officer (DPO) - Responsible for the files

The Odalys Group has appointed a DPO (Delegate for Data Protection).

The company “Odalys Résidences” is the file manager.

The email address of the DPO is:

dpo@odalys-vacances.com

Délégué à la protection des données
Groupe Odalys
655, rue René Descartes,
Parc de la Duranne - BP 412
13591 AIX EN PROVENCE Cedex


11. Specific right of opposition to cold calling

We would like to inform you that you have a specific right of opposition to cold calling by registering your number on the bloctel list (https://www.bloctel.gouv.fr/).

Cookies

When you visit our website, we may, subject to your choices, place on your computer via your browser, a text file also called a cookie.

This file has a limited duration and will disappear once this duration has expired.

It will allow us, during its period of validity or registration, to identify your computer during your next visits. These cookies do not contain any viruses.

Odalys vacances uses cookies to improve your experience on our website.

Some cookies are essential for the proper functioning of the website; others help us understand what the most useful content is for our visitors, and allow us to offer you better services, better content and to promote to our users the most relevant offers through advertising or communication campaigns.

Types of cookies used by us

Security: These cookies allow us to ensure the security on our website.

Website features: We measure how visitors use our website in order to optimize web pages and the use of our site.

Analytics: We track website traffic patterns so we can identify the most popular content on the website and any potential problems.

Advertising: We use your location and previous navigation data on our website to show you relevant advertising on our website.

Our website gives information concerning the cookies used and the purposes of their use.

Your choices concerning cookies

The registration of a cookie on your computer is dependent on your will.

Thanks to the settings of your internet browser software, you can, at any time, simply and for free, choose whether or not to accept the recording of cookies on your computer.

The choices offered to you by your browser

We invite you to consult the settings of your browser.

You can select a feature that allows your computer to notify you each time a cookie has been placed on your computer or you have the option to inactivate all cookies.

Each browser is slightly different, so we invite you to read the "Help" menu of your chosen browser to understand how to modify your cookies.

You can configure your browser to your liking so that cookies are (a) accepted and saved on your computer or, conversely, (b) they are refused.

a. The acceptation of cookies

If your browser software is set to accept the recording of cookies on your computer, cookies embedded in the pages and contents you have viewed will be systematically saved on your computer.

b. The refusal of cookies

You can set your browser software to:

• offer you the choice to accept or refuse cookies, before a cookie is to be registered;
• systematically refuse the recording of cookies in your computer.

Please note: Any setting modification you undertake on your browser regarding the acceptance or refusal of cookies may change your Internet browsing experience and your access to certain services requiring the use of these cookies.

If you choose to disable cookies, some of our services will not work properly. You will not be able to book your stay online. You will need to contact our reservation centre to book your stay.

How to carry out your choices, depending on the browser you use?

If you have a different browser type or version, please refer to the "Help" menu of your browser.

Our website details how to manage cookies from major browsers (Internet Explorer, Chrome, Mozilla Firefox, Safari, Opera).