Privacy policy

Name: Hôtel Montpensier
Address: 12 rue de Richelieu, Paris, 75001, FR
Telephone: +33 1 42 96 28 50

Last updated: [TO BE COMPLETED: launch date]

Hôtel Montpensier attaches great importance to the protection of your personal data. This policy explains what data we collect when you use the website www.hotelmontpensierparis.com, why we collect it and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

Hôtel Montpensier, SAS

12 rue de Richelieu, 75001 Paris, France

RCS Paris 592 016 091

Email: [email protected]

Telephone: +33 1 42 96 28 50

2. Data we collect

We only collect the data needed for the services you use:

Contact form: name, email address, subject and content of your message.

Online booking: surname, first name, contact details, dates and details of your stay, special requests and payment information. Bookings are processed by our secure booking engine: your card details are entered directly on its platform and are never stored on our website.

Browsing the website: IP address, browser and device type, pages viewed and cookie choices.

3. Purposes and legal bases

Managing your booking and your stay: performance of the contract concluded with you.
Replying to your contact requests: the hotel's legitimate interest in answering the questions sent to it.
Meeting our legal obligations (accounting, tax, hotel regulations): legal obligation.
Ensuring the security and proper functioning of the website: legitimate interest.
Measuring website traffic: your consent, obtained through the cookie banner.
Sending you offers from the hotel: your consent, which you can withdraw at any time.

4. Recipients of the data

Your data is intended for the Hôtel Montpensier staff authorised to process it. It may be passed on, strictly within the limits of their assignment, to our service providers:

D-EDGE, our online booking engine
Mixit7, for hosting and maintaining the website
Cloudflare, for website security and performance
CookieScript, for managing your cookie consent
[TO BE COMPLETED: analytics tool, for example Google Analytics]

These service providers act on our instructions and are required to guarantee the security and confidentiality of your data. Your data is never sold or transferred to third parties for commercial purposes.

5. Transfers outside the European Union

Some of our service providers may process data outside the European Union, in particular in the United States. These transfers are covered by appropriate safeguards: an adequacy decision of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses adopted by the European Commission.

6. Retention periods

Contact requests: 3 years from our last exchange.
Booking data: for as long as needed to manage your stay, then archived for the statutory limitation periods.
Accounting documents and invoices: 10 years, in accordance with the French Commercial Code.
Hotel offers: 3 years from your last contact with us, or until you unsubscribe.
Cookies: 13 months maximum; your cookie choice is kept for 6 months.

7. Cookies

A cookie is a small file placed on your device when you visit the website. We use:

Necessary cookies for the website to work (security, language choice, remembering your consent). They do not require your consent.
Analytics cookies, which help us understand how the website is used so that we can improve it. They are only placed with your consent.
Third-party service cookies (booking engine, embedded content), subject to your consent when they are not strictly necessary.

On your first visit, a banner lets you accept, refuse or customise cookies. Refusing non-essential cookies has no effect on your access to the website. You can change your choices at any time using the Manage consent link at the bottom of every page.

8. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), access restricted to authorised persons only, and service providers bound by confidentiality obligations.

9. Your rights

You have the following rights over your data:

right of access and rectification
right to erasure
right to restriction of processing
right to object, in particular to direct marketing
right to data portability
right to withdraw your consent at any time
right to set instructions regarding what happens to your data after your death

To exercise these rights, write to us at [email protected] or by post to Hôtel Montpensier, 12 rue de Richelieu, 75001 Paris. We will reply within one month. We may ask you for proof of identity if we have reasonable doubts about your identity.

If, after contacting us, you believe that your rights have not been respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr, or by post to CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

10. Changes to this policy

We may need to amend this policy, in particular to comply with changes in regulations or in our services. The date of the last update appears at the top of this page.