Privacy Policy

This privacy and data security policy sets out how Le Jiva Hill Resort collects, stores and processes your personal data (i.e. any personal data that can be used to identify you as an individual).

This privacy policy is intended to enable you to make informed decisions about providing your personal data when purchasing our products and using our services. If you have any comments or questions, please contact us as indicated in section 6 "Contact us".

Please note that our website and the provision of our services are not intended for children and minors and that we do not knowingly solicit or collect personal data from persons under the age of 18, with the exception of a parent or legal tutor who has given consent. As a parent or legal tutor, please do not allow your children to submit personal data without your permission.

By providing us with your personal data, you consent to the processing described in this privacy policy. If additional uses of your personal data are relevant, we will provide you with the necessary information and consult you about these additional uses in accordance with applicable law.

This Privacy Policy contains general and technical information about the steps we take to respect your privacy concerns. We have organized the privacy policy by main procedures and areas so that you can view the information that is most relevant to you.

Personal data we collect

How we use personal information

How we share personal information

How we transmit, protect and safeguard personal data

Your rights

How to contact us

Cookies

Changes to our privacy policy

We may collect and process the following personal data about you:

Personal information about you ► the personal data you entrust to us, i.e. name, telephone number, e-mail and postal address (home and/or delivery address)

Your payment details ► payment information such as credit card details (card number, security code and expiry date) and bank account details.

Our correspondence ► if you contact us (by e-mail, telephone or any other means of communication) in connection with any request, we will keep a record of this correspondence.

Social network account information ► depending on your interactions with the various social media platforms that are linked to us or with which we engage, we may process data such as your profile names, photos or public postings

CCTV images and recordings ► to ensure the security of our property, we may install remote surveillance devices and make visual and/or sound recordings where appropriate and relevant, and we may keep the recordings in accordance with applicable legislation

Your use of our website ► data about your visits to our website and information collected through cookies and other tracking technologies, including, but not limited to, your IP address and domain name, browser version and operating system, traffic data, geolocation data, Internet access data and other communication data and the resources you access

Your travel data and preferences ► we may collect information such as your travel details (including flight number, dates and times of arrival and departure, country of origin and destination), your frequent flyer details, your travel companion details, your preferences regarding room, food, drink, care, service requests, information relating to your dietary, mobility or care needs. We may also collect information required by local legislation, such as passport numbers.

We may also collect your personal data in a number of ways: we may collect your personal data directly from you, for example when you make a direct booking on our website; and we may also collect personal data from third parties, including online agencies and service providers who make hotel, spa or restaurant bookings on your behalf, facilitate online payments or gift purchases or who are otherwise involved in the booking process or the provision of our services. Finally, we may also collect your personal data in connection with your activity on social networking platforms that link to us, such as Facebook & Instagram pages or when you share content, photos or follow us.

If you provide us with personal data about other people (for example, family members or travelling companions), whether or not you are travelling together, you must inform them that you have provided their contact details and tell them where they can find a copy of this privacy policy.

Special categories of personal data

"Special categories of personal data" are a subgroup of personal data that includes personal data relating to your health, political opinions, religious beliefs, ethnicity and race, sex life, trade union membership and, in some cases, criminal activities.

As a general rule, we are not interested in special categories of personal data. However, we may process medical/health data in order to manage medical incidents and/or complaints. When we process special categories, in the context of medical incidents, we do so in order to protect your vital interests, or those of another person. When we process special categories to handle complaints, we do so to establish, exercise or defend ourselves in the event of legal claims, or when the courts exercise their judicial jurisdiction.

We may process special categories of personal data in limited circumstances where you have provided us with such special categories of personal data, including medical data (e.g. allergies, disabilities, dietary requirements) so that we can provide you with our services (e.g. spa treatments and meals) safely.

When we process special categories of personal data, we do so only if you have given us your explicit consent to do so. When you provide us with special categories of personal data concerning a travel companion, you agree that you have obtained his/her consent to the collection, processing and disclosure of his/her special categories of personal data.

We may use your personal data in the following ways:

To manage the administrative part of your reservations ► your booking requests, which may be made via our website, our reception or via the website of a third-party service provider, and to confirm your booking. We may send you a booking confirmation by e-mail, SMS or other means, and in the case of room bookings, a message prior to your arrival summarizing your confirmation details and preferences. In the case of hotel-related services, such a pre-arrival message will contain further information, in particular about the hotel, the region and the weather.

Reason for use: performance of contract, legitimate interests (to enable us to fulfill our obligations and provide you with services).

Providing you with our services ► to provide and invoice hotel services, including, but not limited to, accommodations, meals, beverages, spa treatments, and to facilitate any special requests or assistance you have requested, and non-hotel services, including residential club services, rentals and transportation.

Reason for use: performance of contract, legitimate interests (to enable us to fulfil our obligations and provide you with services).

Executing the sale ► to fulfill your orders when you purchase a Jiva Hill Resort gift card.

Reason for use: performance of contract, legitimate interests (to enable us to fulfill our obligations and provide services to you)

To target the services and products we offer you ► To ensure your future comfort and attention to your personal needs, we collect and store specific information about you, such as your food and beverage preferences and other special requests. For example, if you are a regular customer of our establishment (hotel and/or restaurants) or have filled in our food and beverage questionnaire, we may save your personal data in our system to serve you better next time.

Reason for use: legitimate interests (to enable us to target the services and products we offer you)

To send you marketing offers ► to provide you with updates, offers and subscriptions when you have chosen to receive them, or when you are connected with us via social networking platforms. With your consent, we may send you information about Le Jiva Hill Resort, restaurants including news, offers and promotions about the hotel, catering, spa, products and special events that we organize through various channels: postal mail, e-mail, telephone or SMS. These offers, promotions and information are also available on the social networking platforms you use to connect with us. Please note that this use is subject to the terms and conditions of the social networking platform used. However, we wish to limit our communications to those you wish to receive. When you agree to receive promotional material or when you become a customer of our restaurants or register on our websites and provide us with your data specifically and expressly in order to receive the marketing communications specified above, we will periodically contact you via the channel(s) of your choice. We give you the opportunity to unsubscribe from all marketing communications. Each time you receive an e-mail, you will have the opportunity to unsubscribe from the e-mail list by following the instructions provided in the e-mail. You may also choose not to receive promotional material by contacting us as indicated in section 6 below.

Reason for use: consent (which may be withdrawn at any time)

To conform to our legal obligations and defend our legitimate rights ► to comply with our legal obligations such as financial reporting requirements imposed by our auditors and government authorities, to safeguard our legitimate rights, including (without limitation) with respect to the defense of any claims, and to cooperate with law enforcement agencies, government authorities and/or the courts in connection with proceedings or investigations anywhere in the world where we are required to do so.

Justification for use: legal obligations, legal requests, legitimate interests (cooperating with law enforcement agencies and regulatory authorities)

Manage incidents and deal with complaints we receive ► to manage accidents and incidents such as liaising with emergency services, and to deal with customer complaints including personal injury claims. Please note that this may also require the processing of special categories of personal data.

Justification for use: vital interests (in relation to special categories of personal data), legal requests, legitimate interests (to ensure that incidents and accidents are dealt with appropriately and to enable us to assist our customers).

We may share your personal data in the following ways.

Third party service providers who process personal data on our behalf to help us undertake our activities ► We may allow certain third parties such as service providers, agencies, contractors to use your personal data for the purposes set out in section 2, including direct mail companies we engage to send and distribute promotional material, data center providers who host our servers and third-party direct mail and gift card purchasing agencies on our behalf. These parties are contractually prohibited from using personal data for purposes other than those specified in their respective contracts, and will be subject to the obligation to process personal data in accordance with appropriate safeguards. We do not authorize the sale of personal data to outside entities for any purpose whatsoever.

Reason for use: performance of contract, legitimate interests (to enable us to provide services to you efficiently and to operate and manage our business)

Law enforcement agencies, government authorities, regulators and courts to comply with our legal obligations or to manage incidents/investigations ►We may disclose your personal data where required to do so by law or court order, or at the request of other government authorities or law enforcement agencies to facilitate proceedings or investigations. Where permitted, we will address such a request to you or inform you before responding, unless doing so would prejudice the prevention or detection of an actual or suspected crime. This also applies where we have reason to believe that disclosure of personal data is necessary to obtain legal advice, identify, investigate, protect, contact or bring legal action against someone who may be causing embarrassment to our guests, visitors, associates, rights or premises, or to others, whether intentionally or unintentionally, or where someone else may be harmed by such activities.

Reason for use: legal obligations, legal requests, legitimate interests (cooperating with law enforcement agencies and regulatory authorities)

This privacy policy does not apply to the sharing of personal information by third-party suppliers (e.g. airlines, online travel agencies, car rental companies, table booking sites) who may collect personal information from you and share it with us. In these situations, we strongly advise you to consult the privacy policy of the third-party supplier in question before disclosing your personal information.

Communication security

It is important to note that no security system or system for transmitting information over the Internet is guaranteed to be secure. There is an inherent risk in submitting information online and in sending e-mails and faxes. Please be aware of this when requesting information or sending forms online or by e-mail or fax, for example, in the "Contact us" section. We recommend that you do not include sensitive information, such as credit card details, when submitting information online, by e-mail or fax, or when using a public computer or public Wi-Fi access.

Security controls

We maintain commercially reasonable administrative, technical and physical safeguards designed to protect the personal data we hold against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Despite these efforts, please note that no company can completely eliminate risks or guarantee the security of personal data. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of your information. While we strive to implement appropriate contractual protections, we are unable to guarantee the security of personal data hosted in databases managed by third parties, and we disclaim any responsibility for the use or disclosure of personal information or other data in connection with the theft of such information or other malicious actions.

We store certain customer information and reservation data in our customer information system and reservation system on the secure servers of our subcontractors. Our server is protected by firewalls to safeguard the personal data collected from you against unauthorized or accidental access.

Your personal data will be stored for the period of time required or permitted by law. Our retention periods are based on business needs and your personal data that is no longer required is either rendered irreversibly anonymous or securely destroyed.

Opting out of marketing

At any time, you have the right to ask us not to process your personal data for marketing purposes. You can exercise your right by checking certain boxes online or on data collection forms, by speaking to us in person, or by contacting us as set out in section 6 below.

Other rights

Subject to various exceptions and applicable data protection laws, you may have the following rights:

Access: you can ask us to provide you with more details about how we use your personal data, and a copy of the personal data we hold about you.

Correction: you can ask us to correct any inaccuracies in the personal data we hold about you.

Complaint: if you are not satisfied with our use of your personal data or our response to your exercise of these rights, you have the right to lodge a complaint with the data protection authority.

Deletion: you can ask us to delete your personal data if we no longer have a legitimate reason for using it.

Withdrawal of consent: where processing is based on consent (for example, marketing, or certain uses of special categories of personal data), you may withdraw your consent to the processing and we will stop that particular processing

Restrictions: you may restrict how we use your personal data for any ongoing investigation, for example, while we are verifying the accuracy of your personal data or when we are verifying the purposes for which we are using your personal data.

Updating data

We will do everything reasonably possible to ensure that your personal data is accurate. To assist us in this task, you must inform us of any changes to your personal data that you have provided to us, by contacting us as indicated in section 6.

If you have any questions about this privacy policy or the processing of your personal data, please contact us at the following address :

Jiva Hill Resort

Route d’Harée, 01170 Crozet, France

Tél : +33 (0)4 50 28 48 48

Email : welcome@jivahill.com

Our website uses cookies to differentiate you from other users. This helps us to provide you with a good experience when you browse our site.

In the future, we may need to make changes to this Privacy Policy. Any changes will be included in the last Privacy Policy posted on this website, so that you always understand our current practices regarding the information we collect, how we may use that information, and the disclosure of that information to third parties. To find out when this privacy policy was last updated, look at the date at the bottom of the privacy policy. Any changes to our Privacy Policy will be effective upon posting of the revised Privacy Policy. We will seek your express consent to any changes in the way we use or disclose your personal data if required by law, but your use of this website or our services following any such changes constitutes your acceptance of the then current Privacy Policy.