HOTEL DU LAC PRIVACY POLICY
Hotel du Lac needs to gather and use certain information about individuals. This data protection policy describes how this personal data is collected, handled and stored to meet the company’s data protection standards in compliance with GDPR legislation.
HOW YOUR DATA IS USED AND WHY CONSENT
We require your consent for all personal data to be collected through this website. All forms will require an opt-in field to be checked to ensure you’re happy for us to collect your data. By selecting this option and submitting a form, you’re agreeing to the policies outlined on this page.
PURPOSE
Personal details are collected in a contact form so that Hotel du Lac can make contact with a response.
The required fields on the contact form are:
First Name Surname 

Email address


The optional field on the contact form is:
Telephone


PROCESSING
This information is stored on the Hotel du Lac email server. The email account is protected by a secure password which follows best practice password protection. Two members of staff have access to this information. Form entries from the website are be deleted every 30 days.
If a client does not proceed with a holiday booking then their personal details and all email correspondence will be deleted on 30 April each year.
If a client proceeds with a holiday booking then Hotel du Lac will request details for each group member:
NameEmailTelephone
When the holiday is finished the above data is stored on two computers. The data is stored so that in the case of a repeat booking, Hotel du Lac does not need to request these details again from the client. Access to these two computers is restricted to two members of staff. Login to these computers is protected by a secure password which follows best practice password protection.
WHAT ARE MY RIGHTS?
When your personal data is collected on this website, you have the following rights:

  1. Right to be informed – individuals have the right to be informed about the collection and use of their personal data.
  2. Right of access – individuals have the right to obtain confirmation that their data is being processed and access to their personal data.
  3. Right to rectification – a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete
  4. Right to be forgotten – individuals can make a request for erasure verbally or in writing.
  5. Right to restrict processing – individuals have the right to request the restriction or suppression of their personal data.
  6. Right to data portability – the right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
  7. Right to object – an individual has the right to object to processing personal data and direct marketing.
  8. Rights related to automated decision-making including profiling – the right of subject access allows a user access to information about the reasoning behind any decisions taken by automated individual decision-making and for profiling.
    ACCESS TO THE DATA
    As covered in the ‘right to access’, individuals have the right to obtain confirmation that their data is being processed and access to their personal data.
    Access to data can be requested by email or telephone:
    info@lacdemontriond.com  –  +33644099937
  9. The user will receive the requested data within 5 working days.
    HOW CAN YOU REQUEST THAT YOUR DATA IS REMOVED
    Under the ‘right to be forgotten’ a user has the right to make a request for erasure of their personal data.
    Removal of data can be requested by email or telephone:
    info@lacdemontriond.com  –  +33644099937
  10. OUR DATA BREACH POLICY
    A data breach is a security incident in which sensitive, protected or confidential data is copied, transmitted, viewed, stolen or used by an individual unauthorized to do so.
    While we do everything in our power to prevent this, if a data breach was to occur, we would endeavour to inform the supervisory authority (ICO) within 72 hours. We would also endeavour to inform all affected users about any potential risks which may come as a result of the breach.
    If a data breach was to occur, we will document all relevant information and be completely transparent with any users who may be affected. All breaches shall be recorded, including facts relating to the breach, its effects and the remedial action taken. Following a breach, we will ensure to investigate whether the breach occurred as a result of human error or a systemic issue.