The company Chambre d'hôte chez Thomas et John, concerned about the rights of individuals, in particular with regard to automated processing and in a desire for transparency with its customers, has set up a policy covering all these treatments, the purposes pursued by the latter as well as the means of action available to individuals so that they can best exercise their rights.

For any further information on the protection of personal data, we invite you to consult the website: https://www.cnil.fr/

Article 1 – Data collection and protection

Your data is collected by our company.

A personal data refers to any information about an identified or identifiable individual (concerned); is deemed identifiable a person who can be identified, directly or indirectly, including by reference to a name, identification number or one or more specific elements, specific to his or her physical, physiological, genetic, psychic, economic, cultural or social identity.

The personal information that may be collected on the site is mainly used by the publisher for the management of relations with you; and if necessary for the processing of your orders.

The personal data collected is as follows:

• surname and first name
• Address
• Email address
• Phone number
• Financial data: as part of the payment of the products and services offered on the platform, it records financial data relating to the user's credit card.

We are at your disposal for any questions relating to the protection of your personal data.

resa@gitechezthomasetjohn.com

Article 2 – Right of access, rectification and de-referencing of your data

Under the regulations for personal data, users have the following rights:

• the right of access: they can exercise their right of access, to know the personal data concerning them, by writing to the email address mentioned below. In this case, before the implementation of this right, the platform may request proof of the user's identity in order to verify its accuracy;
• The right to rectification: if the personal data held by the Platform are inaccurate, they may request that the information be updated;
• The right to restriction of processing: users may request the platform to limit the processing of personal data in accordance with the assumptions provided for by the GDPR;
• The right to object to data processing: users may object to their data being processed in accordance with the assumptions provided for by the GDPR;
• The right to portability: they can request that the platform give them the personal data they have provided to transmit it to a new platform.

You can exercise this right by contacting us at the following address:

Bed and breakfast and cottage at Thomas and John

10 street on the big degrees

55100 Verdun.

Or by email, at:

resa@gitechezthomasetjohn.com

Any request must be accompanied by a photocopy of a valid signed ID and mention the address at which the publisher can contact the applicant. The response will be sent within one month of receiving the request. This one-month period may be extended by two months if the complexity of the application and/or the number of applications require it.

In addition, and since the law number 2016-1321 of October 7, 2016, people who wish to do so, have the possibility to organize the fate of their data after their death. For more information on the subject, you can consult the CNIL website: https://www.cnil.fr/.

Users can also lodge a complaint with the CNIL on the CNIL website:

https://www.cnil.fr.

We recommend that you contact us first before filing a claim with the CNIL, as we are at your disposal to resolve your problem.

Article 3 – Use of data

The purpose of the personal data collected from users is to provide the services of the platform, improve them and maintain a secure environment. The legal basis for the processing is the execution of the contract between the user and the platform. Specifically, the uses are:

• access and use of the platform by the user;
• Management of the operation and optimization of the platform;
• Implementation of user support;
• Verification, identification and authentication of the data transmitted by the user;
• Personalization of the services by displaying advertisements based on the user's browsing history, according to his preferences;
• Prevention and detection of fraud, malware (malicious software or malware) and management of security incidents;
• Management of any disputes with users;
• Sending commercial and advertising information according to the user's preferences;
• Organization of the conditions of use of payment services.

Article 4 – Data retention policy

The platform keeps your data for the time necessary to provide you with its services or assistance. To the extent reasonably necessary or required to meet legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also retain some of your information as necessary, even after you have closed your account or we no longer need to provide you with our services.

Article 5 – Sharing of personal data with third parties

Personal data may be shared with third party companies exclusively in the European Union in the following cases:

• When the user uses the payment services, for the implementation of these services, the platform is in contact with third-party banking and financial companies with which it has concluded contracts;
• When the user publishes, in the free comment areas of the platform, publicly available information;
• When the user authorizes the web sit of a third party to access his data;
• When the platform uses the services of service providers to provide user support, advertising and payment services. These service providers have limited access to the user's data, in the context of the performance of these services, and have the contractual obligation to use them in accordance with the provisions of the applicable regulations on the protection of personal data;
• If required by law, the platform may carry out the transmission of data to follow up on claims against the platform and comply with administrative and judicial procedures.

Article 6 – Commercial offers

You may receive commercial offers from the publisher. If you do not wish them, please let us know at the following email address: resa@gitechezthomasetjohn.com.

Your data may be used by the publisher's partners for commercial prospecting purposes, if you do not wish to do so, please let us know at the following email address: resa@gitechezthomasetjohn.com.

If, during the consultation of the site, you access personal data, you must refrain from any collection, any unauthorized use and any act that may constitute an invasion of the privacy or reputation of individuals. The publisher disclaims any responsibility in this regard.

The data is kept and used for a period of time in accordance with current legislation.

Article 7 – Cookies

What is a "cookie"?

A "cookie" or tracer is an electronic file deposited on a terminal (computer, tablet, smartphone …) and read for example when consulting a website, reading an e-mail, installing or using software or a mobile application, regardless of the type of terminal used (source: https://www.cnil.fr/fr/cookies-traceurs-que-dit-la-loi).

The site may automatically collect standard information. All information collected indirectly will only be used to track the volume, type and configuration of traffic using this site, to develop its design and layout and for other administrative and planning purposes and more generally to improve the service we offer you.

If necessary, "cookies" from the publisher of the site and / or third party companies may be deposited on your terminal, with your agreement. In this case, during the first navigation on this site, an explanatory banner on the use of cookies will appear. Before continuing browsing, the customer/or prospect must accept or refuse the use of these cookies. The consent given will be valid for a period of thirteen (13) months. The user has the possibility to disable cookies at any time.

Google Cookies:

• Google analytics
• Google tag manager
• Google Adsense
• Google Dynamic Remarketing
• Google Adwords Conversion
• DoubleClick

Facebook Cookies:

• Facebook connect
• Facebook social plugins
• Facebook custom audience

The lifespan of these cookies is thirteen months.