In order to properly provide its services, the ROYAL-RIVIERA hotel processes the following categories of data:

• identity: first name, last name, company name, identity card, passport, signature, address, nationality, date of birth, sex.
• contact information: e-mail address, postal address, telephone number.
• transactions for goods and services of the hotel ROYAL-RIVIERA hotel: Products and services purchased or those to which you have expressed an interest.
• stay preferences

DATA RECIPIENTS

In the unique framework of being able to give you any satisfaction in the use of our services, we may communicate your personal data to internal and external persons.

Internal recipients:
This is all the internal staff who have authority to intervene to enable you to benefit from the services of our establishments: staff of customer reception desks / receptions, support services staff, such as IT departments, marketing departments, and the legal service.
 

External recipients:
These are subcontractors, service providers, business partners or banks. The transmission of information is for the sole purpose of the perfect execution of the services you have requested and the exclusive search of your satisfaction.
Administrative and judicial authorities, local or national could also request the communication of your personal data if law required it. This type of disclosure may be required in any lawsuit, petition or inquiry, government request, legal order, enforcement of legal rights (eg, contractual terms, intellectual property rights, etc.), money laundering, security issue or other similar legal or security issue. Sharing your information in this context is not a regular event, but can occur at any time. We will seek to limit the types and volumes of information we may have to share for legal purposes to what is reasonably necessary and will ensure that any transfer outside the European Union is carried out on an appropriate legal basis.

CROSS-BORDER DATA TRANSFERS

In the case of data transfers outside the European Union and / or to countries that do not have adequate protection, these will be carried out in accordance with the procedures in force (ie in particular the standard contractual clauses of the European Commission, etc.). 

DURATION OF DATA CONSERVATION

 We store your information for a period of time proportionate with the purpose for which we are processing it, to meet legal and regulatory requirements and within the limits imposed by them. In order to define adequate storage periods, we take into account the legal deadlines imposed in tax, financial and commercial matters as well as the purpose of the corresponding processing.
 
For your perfect information, the video recordings made in our hotel are kept for a period of 15 days. The data concerning your credit card are deleted from our operational databases 7 days after the completion of the transaction, but may be kept in archiving to guard against eventual dispute of the transaction for a period of 13 months after their collection.

DATA SECURITY

The ROYAL-RIVIERA hotel has taken all the technical and organizational measures necessary to ensure the security of personal data and to prevent any alteration, loss, treatment or unauthorized access thereof, taking into account the evolution of technology, the nature of the stored data and the risks to which they are exposed, through human actions or physical or natural influences.
 
Indeed, we determine and implement enhanced security measures to ensure the security and confidentiality of your personal data, in accordance with the requirements of the CNIL and the RGPD. Thus, we have in particular:
• appointed a DPO responsible for our compliance with the legislation on the protection of personal data
• make our staff aware of the right to the protection of personal data
• calls on a specialized IT service provider to secure our networks and workstations (backups, antivirus, etc.)
• implement physical security measures such as video surveillance