Privacy Policy
Last updated: September 17, 2025
As part of this website, Hôtel L’Orée des Roches processes personal data.
These data processing activities are carried out in accordance with applicable legislation, including Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 (General Data Protection Regulation – GDPR), and the amended French Data Protection Act No. 78-17 of January 6, 1978.
Definitions
- Personal data: Any information that can identify a natural person, directly or indirectly.
- Processing: Any operation or set of operations performed on personal data (e.g., collection, recording, organization, consultation, extraction, deletion, destruction).
- Data controller: The natural or legal person, public authority, agency, or other body that determines the purposes and means of processing.
- Data subject: The person whose personal data is being processed.
Hôtel L’Orée des Roches’ obligations for www.hotelloreedesroches.com
Identity of the data controller
The data controller is: Hôtel L’Orée des Roches, BP 20014 Rothau – F – 67137 Schirmeck Cedex.
Data Protection Officer (DPO)
The Data Protection Officer for www.hotelloreedesroches.com is Jean-Michel Frêne.
His role includes informing and advising the data controller.
Any request regarding personal data protection may be sent by post to Hôtel L’Orée des Roches, BP 20014 Rothau – F – 67137 Schirmeck Cedex, by email to support@hotelloreedesroches.com, or via the contact form.
Security Measures
Hôtel L’Orée des Roches implements technical and organizational security measures to protect processed personal data.
Any detected security breach may be reported to the Information Systems Security Officer (ISSO) via email at: support@hotelloreedesroches.com.
Information Provided to Data Subjects
At the time of data collection, Hôtel L’Orée des Roches informs you of:
- The purpose of the collection
- Whether the data is mandatory or optional
- The recipients of the data: Hôtel L’Orée des Roches and authorized internal stakeholders
- The data retention period
- Any potential data transfers outside the EU
- Your rights regarding your data and your right to file a complaint with the CNIL
Processing via the Contact Form
Hôtel L’Orée des Roches collects your information to respond to your contact request.
The data is shared only with authorized internal stakeholders.
It is retained for no longer than 12 months, unless an earlier deletion is requested.
Processing via the Appointment Booking Area
Hôtel L’Orée des Roches collects your information to respond to your appointment request.
The data is shared only with authorized internal stakeholders.
It is retained for no longer than 12 months, unless an earlier deletion is requested.
Processing via the Personal Account Area
Hôtel L’Orée des Roches collects your information to create and manage your personal account.
The data is shared only with authorized internal stakeholders.
It is retained for no longer than 12 months, unless an earlier deletion is requested.
Your Rights Regarding Personal Data
In accordance with the GDPR and the amended French Data Protection Act, you have the right to:
- Access
- Rectification
- Erasure (right to be forgotten)
- Objection
- Restriction of processing
- Data portability
- File a complaint with the CNIL
- Define instructions regarding your data after your death
Right of Access
You may request access to your personal data.
Hôtel L’Orée des Roches may refuse requests that are unfounded, excessive, or infringe on third-party rights.
Right of Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to Be Forgotten)
You may request deletion of your personal data if:
- The data is no longer necessary for the original purpose
- You withdraw your consent (where applicable)
- The data was collected when you were a minor
- The data is processed unlawfully
- The data must be deleted to comply with a legal obligation
- You object to the processing and no overriding legitimate grounds exist
Please specify which data you wish to have deleted.
Right to Object
You may object to processing for specific purposes, citing reasons related to your particular situation.
Your objection may be refused if:
- There are compelling legitimate grounds for processing
- The data is necessary for legal claims
- A legal obligation requires processing
- You previously consented – in which case you must withdraw consent rather than object
Right to Restriction of Processing
You may request temporary suspension of processing if you contest the accuracy of your data or object to its use.
This allows time for verification or review.
Right to Data Portability
You may request to receive part of your data in a machine-readable format.
This applies to:
- Data you provided
- Processing based on your consent
- Automated processing
This right must not infringe on the rights and freedoms of others.
Right to File a Complaint with the CNIL
If you believe your rights are not being respected after contacting us, you may file a complaint with the CNIL.
Right to Define Instructions After Death
Under Article 85 of the amended French Data Protection Act, you may define instructions regarding the retention, deletion, and communication of your personal data after your death.
Instructions may be:
- General: applying to all personal data, and registered with a trusted third party certified by the CNIL
- Specific: applying to certain data processing activities, registered with the relevant data controller, and requiring explicit consent
Exercising Your Rights
You may exercise your rights by:
- Emailing the Data Protection Officer at support@hotelloreedesroches.com
- Using the contact form on the website
- Sending a postal letter to Hôtel L’Orée des Roches, BP 20014 Rothau – F – 67137 Schirmeck Cedex
Hôtel L’Orée des Roches will respond within one month of receiving your request.
In complex cases or if many requests are pending, this period may be extended to three months. You will be informed within the first month if an extension is necessary.
