Privacy Policy

THE CLOS ST ANDRE

PRIVACY POLICY

Updated on August 28, 2026

1. INTRODUCTION AND DATA PROTECTION OFFICER

Welcome to the LE CLOS ST ANDRE website, available at the following address: www.chambres-dhotes-finistere29-bretagne.com. This privacy policy aims to inform you about how we collect, use, and protect your personal data when you use our e-commerce site.

As a self-employed individual, LE CLOS ST ANDRE commits to respecting the applicable legislation regarding the protection of personal data, including the General Data Protection Regulation (GDPR) and the Computer and Freedom Act.

We invite you to read this privacy policy carefully to understand how your personal data is processed and protected. By using our site, you accept the terms of this policy. If you have any questions or concerns, do not hesitate to contact us at the coordinates provided above.

2. DEFINITIONS

In the context of the present Privacy Policy, the following terms are defined as follows:

2.1. PERSONAL DATA

"Personal Data" refers to any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2.2. TREATMENT

"Processing" refers to any operation or set of operations, whether or not automated, applied to Personal Data or sets of Personal Data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other means of making available, alignment or combination, limitation, erasure or destruction.

2.3. DATA PROTECTION RESPONSIBLE

The “Data Controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data. For the website LE CLOS ST ANDRE, the Data Controller is Capitaine Pierrette.

SUBCONTRACTOR

The "Subprocessor" is the natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller.

2.5. ADDRESSEE/Addressee

The "Recipient" is the natural or legal person, public authority, agency, or other body that receives personal data, whether or not the recipient is a third party. However, public authorities that may receive personal data in the context of a specific investigation mission are not considered Recipients.

2.6. CONSENT

The "Consent" of the concerned individual refers to any expression of will, free, specific, informed, and unequivocal, by which the individual concerned accepts, through a statement or a clear affirmative action, that Personal Data concerning them be subject to Processing.

2.7. BREACH OF PERSONAL DATA

A "Personal Data Breach" is a security breach that, accidentally or illicitly, results in the destruction, loss, alteration, unauthorized disclosure of personal data transmitted, stored, or otherwise processed, or unauthorized access to such data.

3. COLLECTED DATA

In the context of operating our e-commerce site LE CLOS ST ANDRE, we collect various types of personal data in order to provide our services effectively and securely. This section details the categories of data we collect, the methods of collection, as well as the associated purposes.

3.1. PERSONAL IDENTIFIERS

We collect personal identifiers such as your first name, last name, and user ID. This information is essential for creating and managing your customer account, as well as for identification during your interactions with our customer service.

3.2. CONTACT INFORMATION

Contact information includes your email address, phone number, and postal address. This information is used to communicate with you regarding your orders, deliveries, and to send important notifications related to your account or our privacy policy.

3.3. PAYMENT DATA

To process your purchases, we collect payment information such as your credit card details or other payment methods. This data is processed securely and is used only to complete your transactions. We do not store your payment information beyond what is necessary for the transaction.

3.4. LOGIN DETAILS

We collect connection data, including your IP address, browser type, and session information. This data is used to improve the security of our site, analyze usage trends, and personalize your user experience.

We are committed to respecting your privacy and protecting your personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR). For any questions or requests regarding your personal data, please contact us at Contact DPO.

4. PURPOSE OF DATA COLLECTION

At LE CLOS ST ANDRE, we are committed to respecting our users' privacy and handling their personal data transparently and securely. The collection of personal data on our website www.chambres-dhotes-finistere29-bretagne.com/ is carried out for the following purposes:

Order management and transactions: Personal data is collected to enable the processing and management of orders placed on our site. This includes verifying payment information, delivering products, and managing returns and refunds.
Customer service: We use your information to respond to your requests, questions, or complaints, and to provide you with effective customer assistance.
Improving the user experience : The data collected helps us understand your preferences and personalize our product and service offerings to better meet your expectations.
Marketing and communication: Subject to your explicit consent, we may use your data to send you information about our products, special offers, and events that may interest you.
Analysis and statistics: We use analysis tools to evaluate the use of our site, understand trends, and improve our services. These analyses help us optimize our site and provide a better user experience.
Legal Compliance : We may be required to process your data to comply with our legal obligations, such as maintaining financial records or responding to legal requests from authorities.

Each data processing is carried out in accordance with the appropriate legal bases, such as consent, contract performance, compliance with a legal obligation, or the legitimate interest of LE CLOS ST ANDRE. We ensure that your rights are respected and that your data are protected throughout their processing.

5. LEGAL BASIS FOR PROCESSING

In accordance with the General Data Protection Regulation (GDPR), each processing of personal data carried out by LE CLOS ST ANDRE is based on a specific legal basis. Here are the legal bases on which we rely to process your data :

5.1. Consent

In some cases, we process your personal data based on your explicit consent. This includes, for example, the use of non-essential cookies or the sending of marketing communications by email. You have the right to withdraw your consent at any time by contacting us at le-clos-st-andre@orange.fr.

5.2. Performance of a contract

The processing of your personal data may be necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. For example, we process your payment and delivery information to fulfill your orders on our e-commerce site.

5.3. Legal Obligation

We may be required to process your personal data to comply with legal obligations to which we are subject. This includes, for example, retaining certain information for tax or accounting purposes.

5.4. Legitimate Interests

In certain cases, the processing of your personal data is necessary for the legitimate interests pursued by LE CLOS ST ANDRE, unless your interests or your fundamental rights and freedoms prevail. These legitimate interests may include preventing fraud, improving our services, or managing our customer relationship.

We ensure that all processing of personal data is carried out in a legal, fair, and transparent manner, in accordance with the requirements of the GDPR and the Data Protection Act.

6. DATA RECipients

In the context of operating our e-commerce site LE CLOS ST ANDRE, we commit to not sharing your personal data with third parties, except in cases explicitly provided for by law or with your explicit consent. We understand the importance of the confidentiality of your information and we commit to respecting applicable regulations, including the General Data Protection Regulation (GDPR).

The personal data collected is exclusively for internal use by LE CLOS ST ANDRE and will in no case be sold, rented, or exchanged with third parties for commercial purposes. We may however be required to disclose your personal information if so required by law, a court order, or any other legal procedure, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety or that of others, to investigate fraud, or to respond to a government request.

Furthermore, we may share your data with third-party service providers who assist us in our business operations, such as hosting our website, data analysis, payment processing, product delivery, email communication, or customer service. These service providers are required by contract to protect your personal information and use it only within the scope of the services they provide us.

We ensure that all recipients of your data adhere to strict standards of confidentiality and security in accordance with applicable legal requirements. We have implemented appropriate contractual measures to ensure that your personal data is processed in accordance with this privacy policy and applicable data protection laws.

7. DATA RETENTION PERIOD

In accordance with applicable legal and regulatory requirements, LE CLOS ST ANDRE commits to retaining personal data collected only for the duration necessary for the purposes for which they were collected, as stipulated in the Privacy Policy. Generally, personal data is retained for a maximum period of three years from the end of the commercial relationship or the last contact initiated by the concerned individual.

More precisely:

Personal identification and contact data: This data is retained for a period of three years after the user's last interaction, whether through a product purchase, account creation, or any other form of communication.
Payment data: Information related to financial transactions is retained for the duration necessary to complete the transaction and to meet legal obligations, including tax and accounting requirements. These data may be kept for a period of up to ten years in accordance with French legal requirements.
Login data: Connection logs and other technical data are retained for a maximum of six months, except where legal necessity or security justifies a longer retention period.

At the end of these periods, personal data is securely deleted or anonymized, unless a longer retention period is required or allowed by law, such as for managing complaints or potential litigation.

LE CLOS ST ANDRE commits to respecting the principles of data minimization and limitation of retention, ensuring that personal data is not kept longer than necessary for the purposes for which it was collected.

8. RIGHTS OF THE DATA SUBJECT

In accordance with the General Data Protection Regulation (GDPR) and the Computer and Freedom Act, users of our site LE CLOS ST ANDRE have several rights regarding their personal data. These rights may be exercised at any time by contacting our data protection officer via the form available on the CNIL website: Contact DPO.

8.1. Right of access

Users have the right to obtain confirmation that their personal data is being processed and, if applicable, to access this data as well as additional information about the processing.

8.2. Right to Rectification

Users can request the correction of inaccurate personal data concerning them. They also have the right to have incomplete data completed, including by providing supplementary information.

Right to be forgotten

In certain circumstances, users may request the deletion of their personal data, especially if the data is no longer necessary for the purposes for which it was collected or processed.

8.4. Right to restrict processing

Users have the right to request the restriction of the processing of their personal data in certain cases, for example when the accuracy of the data is contested, during a period allowing the data controller to verify the accuracy of the data.

Right to data portability

Users have the right to receive their personal data, which they have provided to LE CLOS ST ANDRE, in a structured, commonly used, and machine-readable format, and have the right to transmit these data to another controller without LE CLOS ST ANDRE hindering this process.

Right to object

Users may object, for reasons related to their particular situation, at any time, to the processing of their personal data, when such processing is based on the legitimate interest of LE CLOS ST ANDRE. In case of objection, LE CLOS ST ANDRE will cease to process the personal data, unless compelling legitimate grounds for the processing prevail over the interests, rights and freedoms of the users, or for the establishment, exercise or defense of legal claims.

8.7. Right to withdraw consent

When the processing of personal data is based on users' consent, they have the right to withdraw their consent at any time, without affecting the lawfulness of the processing based on consent that was carried out before the withdrawal.

To exercise these rights, users may contact LE CLOS ST ANDRE at the following email address: contact@le-clos-st-andre.com or by phone at +33(0)298594216. A response will be provided as soon as possible and no later than one month from the date of receipt of the request.

9. DATA SECURITY

At LE CLOS ST ANDRE, the security of your personal data is an absolute priority. We implement appropriate technical and organizational measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures are designed to ensure a level of security appropriate to the risk presented by the processing of personal data.

9.1 Technical Measures

We use advanced security technologies, such as data encryption, to protect your personal information during transmission on our site. Our servers are secured by firewalls and intrusion detection systems to prevent any unauthorized access.

9.2 Organizational Measures

Our employees are trained in best practices for data protection and are required to adhere to strict confidentiality policies. Access to personal data is restricted to employees who need it to perform their professional duties.

9.3 Risk Assessment

We regularly conduct risk assessments to identify and mitigate potential data security threats. These evaluations allow us to adapt our security measures in response to the evolution of technologies and threats.

9.4 Notification of Violations

In the event of a data breach, we commit to notifying the National Commission on Informatics and Liberties (CNIL) within the legally required timeframes. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you as soon as possible.

We encourage you to take measures to protect your own data, including by choosing strong passwords and not sharing them. For any questions regarding the security of your personal data, please contact us at le-clos-st-andre@orange.fr.

10. INTERNATIONAL TRANSFERS

LE CLOS ST ANDRE is committed to respecting the provisions of the General Data Protection Regulation (GDPR) regarding the transfer of personal data outside the European Economic Area (EEA). We ensure that all personal data transferred benefits from an adequate level of protection, in accordance with applicable legal requirements.

10.1 Transfers Within the European Union

Personal data collected by LE CLOS ST ANDRE is primarily processed within the European Union. We ensure that all processing activities comply with the data protection standards established by the GDPR and applicable French legislation, including the Computer and Freedom Act.

10.2 Transfers Outside the European Union

In the event that data transfers outside the EEA are necessary, LE CLOS ST ANDRE ensures that these transfers are carried out in accordance with Articles 44 to 50 of the GDPR. This includes implementing appropriate safeguards such as:

The signing of standard contract clauses approved by the European Commission.
Apply binding corporate rules (BCR) when relevant.
The verification of the existence of a European Commission adequacy decision for the destination country.

10.3 Additional Protective Measures

LE CLOS ST ANDRE implements additional technical and organizational measures to ensure the security and confidentiality of personal data during their transfer. These measures include data encryption, anonymization where possible, and regular audits of our data processing practices.

10.4 Rights of the Data Subjects

People concerned by international data transfers have specific rights, including the right to obtain information about the safeguards in place to protect their data. For any questions or requests regarding international transfers, individuals may contact our data protection officer via the form available at the following address: Contact DPO.

11. COOKIES AND SIMILAR TECHNOLOGIES

The LE CLOS ST ANDRE website uses cookies and similar technologies to improve user experience, analyze traffic, and personalize content. This section explains how we use these technologies and how you can manage your preferences.

11.1 Definition of cookies

Cookies are small text files stored on your device when you visit a website. They allow the site to recognize your device and remember certain information about your preferences or past actions.

11.2 Types of cookies used

Essential cookies : These cookies are necessary for the website to function and cannot be disabled in our systems. They are generally set in response to actions you take, such as setting your privacy preferences, logging in, or filling out forms.
Performance cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.
Functional cookies : These cookies allow the site to provide enhanced features and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
Targeting cookies: These cookies may be set on our site by our advertising partners. They may be used by these companies to establish a profile of your interests and show you relevant ads on other sites.

11.3 Consent and Cookie Management

In accordance with the ePrivacy directive and the GDPR, we ask for your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time via our cookie management tool available on the site. You can also configure your browser to block or alert you to these cookies, but some parts of the site may not function properly without them.

11.4 Similar Technologies

In addition to cookies, we use similar technologies such as web beacons and tracking pixels to collect information about your use of the site. These technologies help us analyze trends, administer the site, track users' movements on the site, and gather demographic information about our user base as a whole.

11.5 Analysis Tools

We use third-party analysis tools to help us understand how visitors interact with our site. These tools may use cookies to collect anonymous information and generate reports on website usage statistics without personally identifying individual visitors.

For any questions regarding our use of cookies and similar technologies, please contact us at the following address: le-clos-st-andre@orange.fr.

12. POLICY UPDATES

This Privacy Policy was established on August 28, 2025, and may be modified to reflect legislative, regulatory changes, or due to changes in our practices for handling personal data. We commit to informing users of our website, LE CLOS ST ANDRE, of any substantial modifications to this policy.

Updates will be posted on this page, and we encourage you to regularly review our Privacy Policy to stay informed about the protection of your personal data. In case of significant changes, we will notify you by email or display a prominent notice on our website before the changes take effect.

Changes to this Privacy Policy will take effect immediately upon publication on this page, unless otherwise indicated. By continuing to use our site after the publication of the changes, you agree to the terms of the updated Privacy Policy.

If you have questions regarding updates to this policy, please contact us at contact@le-clos-st-andre.com.

13. CONTACT AND COMPLAINTS

For any question, concern, or complaint regarding this Privacy Policy or the processing of your personal data by LE CLOS ST ANDRE, we invite you to contact us via the following methods:

Mailing address: 3 Bis Rue Laënnec, 29390 SCAËR, France
Email: contact@le-clos-st-andre.com
Phone: +33(0)298594216

We commit to responding to your requests as soon as possible and providing you with all the necessary assistance to resolve your concerns.

If you consider that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with the competent supervisory authority. In France, the supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL). You can contact the CNIL via their website at the following address: https://www.cnil.fr/fr/webform/contactez-le-delegue-la-protection-des-donnees-dpo.

We thank you for your trust and commit to handling your personal data with the utmost care and in accordance with applicable laws.