GDPR

PROCESSING POLICY
OF PERSONAL DATA

The policy set out below applies to the processing of personal data by Iskö Chalets et Hötel, a limited company with capital of €1,000, whose registered office is located at 2 rue Pierre Gilles de Gennes 64140 LONS, registered in the Pau Trade and Companies Register under number 900 107 822, hereinafter referred to as the data controller.

The following provisions concern all processing of personal data carried out by the data controller for the operation of its website and the management of its commercial relations.

Legal framework - compliance with the RGPD and French law

The data controller declares that it carries out personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the RGPD) and with French Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms (as amended).

Personal data collected

The information we collect is all information relevant to the operation of the website and our commercial relationship.

Data controller

Iskö Chalets et Hötel
2 rue Pierre Gilles de Gennes 64140 LONS
Tel. 05 59 05 10 40 | contact@isko.fr

Notions

Personal data: data that can be used to identify individuals, either directly or indirectly (by grouping together information) (notably surnames, first names, identifiers, telephone numbers, etc.).
File: any structured set of personal data, whatever the medium (paper/digital).
Processing: any operation or set of operations relating to such data, regardless of the process used, and in particular collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, communication by transmission or dissemination, alignment, blocking, erasure or destruction.

When your data is collected

Your personal data is collected :

When you browse the website, by means of tracers or cookies,
When you create a customer account,
When placing an order,
When sending messages to the data controller via the web page,
when registering for the newsletter.

Legal basis for data processing

Your personal data is collected and/or processed on the following legal grounds:

For purposes of legitimate interest (measuring the operation of the website, the page in order to enable you to benefit from its features, responding to messages sent from contact forms on the website, Facebook or Instagram messaging),
On the basis of your consent, which you may withdraw at any time (to measure the site's audience and draw up statistics, to ensure the site's interactivity with social networks),
To meet our legal and regulatory obligations.

The personal data collected is intended, within the limits of their attributions, for our internal services and our possible subcontractors.
The data controller declares that it has no intention of transferring personal data to a third country or to an international organization.
The data controller may also use the data where justified by a legitimate interest: to evaluate, improve existing services or create new ones, as well as to carry out canvassing and promotional operations, etc.

Data retention period

Personal data is kept for the time necessary to achieve the purposes described above, and in accordance with the relevant French and European laws and regulations.

Rights of the person whose data is collected

The person whose personal data has been collected has the right to:

Request access to, rectification or deletion of personal data, or a restriction on the processing of data relating to the person concerned,
object to the processing,
request portability of data,
lodge a complaint with a supervisory authority,
To withdraw consent at any time, without prejudice to the lawfulness of the processing based on consent carried out prior to the withdrawal thereof; this right existing exclusively when the processing is based on Article 6 paragraph 1 a) or on Article 9 paragraph 2 a) of the GDPR i.e. on the consent of the data subject given to the processing of his/her personal data for one or more specific purposes.

You can make any request to exercise your rights relating to your personal data by contacting us by email at the following address: contact@isko.fr

Security and anti-fraud measures

The data controller takes all necessary precautions to protect the security and confidentiality of data, in particular to prevent it from being distorted, damaged, disclosed or accessed by unauthorized third parties.

Cookie management

A cookie is a small file stored on your computer's hard drive at the request of the website's server. It contains information about your browsing of the site's pages. The purpose of the cookies deposited during a visit to the site is to ensure that it functions optimally, by retaining the user's information for the duration of the session, to enable us to compile audience measurement statistics and to send out advertising tailored to your centers of interest, and to improve the site's interactivity via social networks. Your computer's browser (Internet Explorer, Firefox, Chrome, Safari, etc.) manages cookies and receives instructions from the server to save them. You can prevent cookies from being saved (but this will prevent or restrict access to many sites, or at least the use of their functions). Browsers allow you to find, list and even delete cookies. Even if you don't delete them, they will disappear, as they have an expiration date of several months or the “end of session”, i.e. the moment when you leave the site you were visiting.
Several cookies are used on the website:

Strictly necessary cookies: these are essential to the proper operation of the website and cannot be deactivated from our systems. They are generally only activated in response to actions you perform that correspond to a service request, such as configuring your privacy preferences, logging in or filling in forms. You can configure your browser to block or alert you to the use of these cookies. However, if this category of cookies - which do not store any personal data - is blocked, some parts of the site may not function.
Performance cookies: these are used to determine the number of visits and sources of traffic to the website, in order to measure and improve its performance. All information collected by these cookies is aggregated and therefore anonymized. If you do not accept this category of cookies, your visits will not be included in our traffic statistics, but you will be able to use the site normally.
Functionality cookies: these are used to improve the functionality and personalization of our site. They may be set by us or by third-party partners whose services we have added to our pages. If you do not accept these cookies, some or all of these services may not function properly.
Cookies for targeted advertising: these cookies may be activated on our website by our advertising partners. They may be used by these companies to build up profiles of your interests, and to offer you targeted advertising on other sites. They work only by identifying your browser and device. If you do not accept this category of cookies, you will be offered less targeted advertising based on your interests when browsing other websites.

In particular, the Site uses cookies from the Google group. For information on how Google uses the data collected via these cookies, please refer to Google's privacy policy and terms of use, which can be accessed here.

Updates

The data controller may modify this Policy from time to time. You are therefore invited to contact the data controller to check that you have the latest update of this policy.