Welcome to the Hôtel du Rangen website (“we”, “our”, “Hôtel du Rangen”). The protection of your personal data is important to us. The purpose of this privacy policy is to inform you about how we collect, use, share and protect your data when you browse our site(www.hoteldurangen.com), make a reservation or communicate with us.

1. Data controller

Hôtel du Rangen
Address: 37 Rue du Général de Gaulle, 68800 Thann, France
Telephone: 03 89 37 47 33
E-mail contact: contact@hoteldurangen.com
Legal representative: M. SELTZ Didier

2. Collected data

2.1. Data you provide directly to us

• Personal details: surname, first name, postal address, e-mail address, telephone number.

• Booking information: dates of stay, room type, number of guests, specific preferences (e.g. cot, diet, etc.).

• Billing information: billing address, bank or credit card details (transmitted securely to our payment service provider).

• Communications: content of exchanges (e-mails, contact forms, telephone calls) in response to your questions or requests.

2.2. Automatically collected data

• Connection data: IP address, browser type, pages visited, date and time of access, duration of visit. This information is collected via server logs and cookies (see section 4).

• Cookies and tracers: to improve your browsing experience, analyze site traffic and offer personalized content.

3. Purpose of processing

We use your personal data for :

1. Manage your reservations and your stay: processing your reservation request, confirmation, invoicing, reception at the hotel.

2. Process your payments: secure transmission of bank details to our payment service provider to validate the transaction.

3. Communicate with you: answer your questions, send you useful information before, during and after your stay (confirmations, special offers, newsletters if you’ve subscribed).

4. Improve our services and our website: analyze traffic, detect and correct anomalies, personalize the display according to your centers of interest, produce global statistics.

5. Comply with our legal and regulatory obligations: keeping invoices (legal period), making documents available in the event of a tax audit or court order.

4. Cookies and similar technologies

4.1. What is a cookie?

A cookie is a small file stored on your terminal (computer, smartphone, tablet) when you visit a website. It is used to analyze your browsing habits, remember your choices (language, region, preferences, etc.), and adapt site content.

4.2. Cookies we use

1. Cookies required for site operation :

   • View pages, manage your booking basket, secure connection to the payment service.

   • These cookies cannot be deactivated if you wish to make full use of the site.

2. Performance and analysis cookies :

   • Google Analytics (or equivalent) to measure traffic, session duration, most visited pages, etc.

   • This data is anonymized and aggregated.

3. Functionality cookies :

   • Memorize your preferred language, currency (euros) and display preferences (mobile/desktop view).

4. Advertising cookies (optional):

   • If you browse our site via an advertising campaign (Google Ads, Facebook Ads), third-party cookies may be placed to track the effectiveness of our campaigns. These cookies are managed by external service providers.

4.3. Cookie management

• On your first visit, an information banner allows you to accept or refuse non-essential cookies.

• You can change your preferences at any time via the “Set cookies” link at the bottom of the page.

• You can also set your browser to refuse or delete cookies:

  • Chrome: Settings > Privacy and security > Cookies and other site data.

  • Firefox: Options > Privacy and security > Cookies and site data.

  • Safari (macOS): Preferences > Privacy > Manage website data.

  • Edge: Settings > Privacy, search and services > Cookies and site data.

5. Legal basis and retention period

5.1. Legal basis for processing

• Contract performance (article 6.1.b RGPD): processing of booking data and invoicing.

• Consent (article 6.1.a RGPD): non-essential cookies, newsletter registration.

• Legitimate interest (article 6.1.f RGPD): analysis of site traffic, improvement of our services.

• Legal obligation (article 6.1.c RGPD): retention of invoices (10 years for accounting purposes), tax and accounting obligations.

5.2. Shelf life

• Booking and invoicing data: stored for the statutory period of 10 years (articles L123-22 and L102 B of the French Commercial Code).

• Guest data: reception register kept in accordance with prefectural requirements (1 year for ID card data).

• Analytical cookies: stored for a maximum of 13 months, then anonymized.

• Contact data (newsletter): retained as long as you do not exercise your right of deletion or opposition.

6. Recipients of data

Your personal data may be communicated to the following categories of recipients:

1. Hôtel du Rangen staff: reception, sales, accounting, IT (in-house or technical service providers).

2. External service providers :

   • Reservation management service provider (hotel reservation software): access to information needed to validate, modify or cancel a reservation.

   • Payment service provider (bank, secure platform): secure access to banking data (API or tokenization mode).

   • IT service provider (site host, technical maintenance, security): may access connection data and logs to ensure site availability and security.

   • Chartered accountants / Statutory auditors: access to invoices and financial documents, for auditing purposes or to prepare annual financial statements.

   • Postal or courier service: if you order additional services (takeaway breakfast baskets, promotional documents by post).

3. Competent authorities: in the event of judicial requisition or administrative proceedings, in strict compliance with legal requirements.

We undertake that all our service providers are contractually bound to respect confidentiality and will only use your data for the purposes specified above.

7. Data security

We implement appropriate technical and organizational measures to protect your data against destruction, loss, alteration, unauthorized disclosure or access. These measures include:

• Data hosted on secure servers in the European Union, with regular backups.

• Use of HTTPS protocol (SSL certificate) to encrypt exchanges between your browser and our site.

• Access to data restricted to authorized personnel at our premises or at our subcontractors.

• Regular software updates (CMS, plugins, application firewall) to correct any vulnerabilities.

• Staff training in data protection and good security practices (password management, vigilance against phishing attempts).

8. Your rights

In accordance with the applicable regulations (RGPD n° 2016-679 and Loi Informatique et Libertés n° 78-17 modifiée), you have the following rights concerning your personal data:

1. Right of access: you can obtain confirmation as to whether or not we are processing your data, and access information about you.

2. Right of rectification: you can request the correction of inaccurate or incomplete data.

3. Right to erasure (right to be forgotten): you can ask for your data to be deleted if it is no longer required for the purposes for which it was collected, or if you withdraw your consent.

4. Right to restrict processing: you can ask us to restrict the use of your data, for example if you dispute its accuracy.

5. Right to object: you may object to your data being processed for purposes related to our legitimate interests or for prospecting (direct marketing).

6. Right to portability: when you have provided your data by consent or as part of the performance of a contract, you may request to receive your data in a structured and commonly used format (e.g. CSV file).

7. Right to define what happens to your data after your death: you can, if you wish, specify who to contact and how your data will be stored, deleted or communicated after your death.

To exercise your rights, you can send us a request by :

• Postal mail: Hôtel du Rangen, Service Protection des données, 37 Rue du Général de Gaulle, 68800 Thann, France.

• Email: contact@hoteldurange.com (subject: “Droit RGPD”).

We promise to respond within one month of receiving your request. If your request is complex, or if you have several requests, this deadline may be extended to two months, provided we inform you within one month of receiving your request.

If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) :

• Website: www.cnil.fr

• Claims portal: https: //www.cnil.fr/fr/plaintes

9. Transfer outside the European Union

Hôtel du Rangen does not systematically transfer your data outside the European Union. If, exceptionally, a service provider should store or process your data outside the EU, we will ensure that :

• The country concerned has been granted an adequacy decision by the European Commission, or

• Appropriate safeguards (standard contractual clauses, binding company rules) are implemented to ensure a level of protection that complies with European regulations.

We will inform you of any data transfers outside the EU and of the safeguards in place.

10. Links to other sites

Our site may contain links to other sites (online booking platforms, tourism partnerships, social networks, etc.). This privacy policy does not apply to third-party sites. We invite you to consult the privacy policy of each site before providing them with your personal information.

11. Minors

Our site is not intended for minors under the age of 16. We do not knowingly collect any personal data from minors under the age of 16. If you are yourself a minor over the age of 16, you must obtain prior authorization from a parent or guardian to provide us with your personal data.

12. Privacy policy update

We reserve the right to modify this privacy policy at any time, in particular to adapt it to legislative, regulatory or technological developments. Any new version will be immediately published on our site at www.hoteldurangen.com and will be identified by the “last updated” date at the top of the page. We invite you to consult this page regularly for any changes.

13. Contact

If you have any questions about this privacy policy or the exercise of your rights :

• Postal address: Hôtel du Rangen – Service Protection des données, 37 Rue du Général de Gaulle, 68800 Thann, France

• E-mail: contact@hoteldurangen.com

• Telephone: 03 89 37 47 33

We are committed to handling all requests with diligence and transparency. Thank you for your trust and your interest in protecting your personal data.

The Hôtel du Rangen team.