Privacy Policy
Last revision date: September 27, 2024
Preamble
The website “https://thalasso.intercontinental.com/” (hereinafter the “Website”) is operated by InterContinental Bora Bora Resort & Thalasso Spa (hereinafter “we” or “us”), whose registered office is located at Hôtel InterContinental Bora Bora Resort & Thalasso Spa – BP 156 – 98730 Bora Bora – French Polynesia.
This policy (hereinafter the “Policy”) sets out how we process the information we collect about you (hereinafter your “Data”) when you visit our website.
We attach the greatest importance to respecting the privacy and personal data of our users.
In order to maintain maximum protection of your personal data, our Website, under the supervision of our Data Protection Officer (DPO), as well as the actors administering it (host, IT service providers) comply with the applicable legislation on the protection of personal data.
Our data privacy policy has been drafted in compliance with EU and French Law, notably Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”). If you are a California resident, additional terms apply to you. Please refer to the section “For California Residents” of this Privacy Policy.
Status of the Links
The processing described in this Policy only concerns the Website “https://thalasso.intercontinental.com/” and on our social media pages as listed here:
https://www.instagram.com/ic_boraborathalasso/
https://www.facebook.com/InterContinentalBoraBoraResortThalassoSpa
External links from other entities or third parties may be present on our Website, for partnership purposes. You may refer to the privacy policies of these entities or third parties when visiting their website. Please note that we are not responsible for the privacy policies and content of other sites.
Purpose and Categories of Data Processed
The website “https://thalasso.intercontinental.com/” is the website of the InterContinental Bora Bora Resort & Thalasso Spa. It allows Internet users to learn more about our hotel, its activities, products and services. The Website also allows us to redirect you to a reservation site by pre-filling in the dates and the number of people concerned by the stay. This site does not allow reservations, nor is it a commercial site, and there are no general terms of sale or mentions concerning the security of payment methods.
We collect and process Data when:
– You browse the Website: in which case we collect technical and browsing information such as your IP address, the pages of the Website that you accessed via your device and the time you accessed them. For more information, please refer to our Cookie Policy;
– You contact us to ask questions or make comments or suggestions via our “Contact Us”, “Information Request” forms, our social media pages, or directly by e-mail: in which case, we collect your identity and contact data (mandatory data to enable us to respond to your request) and any information that you voluntarily provide to us and which is relevant to the processing of your request.
– You subscribe to our newsletter in order to be informed of news and exclusivities concerning our hotel. You have the right to unsubscribe from the newsletter via an unsubscribe button in all our emails.
Legal Bases
The processing of your Data for the purpose of responding to your requests sent via our contact forms, our social media pages, or directly by e-mail is based on your prior consent.
The processing of your Data implemented for the purpose of analyzing the navigation on the Website and optimizing the Website is based on your consent. The processing of your Data for the purposes of the operation and security of Website are based on our legitimate interest in ensuring its security and functionality.
The processing of your Data for the purpose of subscribing to our newsletter is based on your consent.
Retention Time
When your Data is collected in the context of requests sent via our contact form, it is kept for the time strictly necessary to process those requests, and for a maximum of 2 years.
When cookies or other tracers are stored in your terminal, they are kept for the duration indicated in the Cookie Policy.
When your Data is collected as part of your subscription to our Newsletter, it is kept during your subscription and is deleted immediately after you unsubscribe.
At the end of the retention periods indicated above, we will delete your Data.
Recipients
In order to provide our services, your Data may be shared with
– Our service in charge of the management of the Website and the analysis of its traffic;
– Our IT department, for technical assistance, management and maintenance of the Website;
– Our service providers in charge of analyzing the Website’s traffic and providing security and functionality cookies;
– Our service provider in charge of hosting of the Website;
– Our service provider in charge of unifying interactions through our social media.
InterContinental Bora Bora Resort & Thalasso Spa may disclose your Data to third parties where such disclosure is permitted and required by law or court order, or where such disclosure is necessary to protect and defend its rights.
Apart from these cases, your Data will not be transferred or made accessible to any third party without your prior consent.
Transfer outside the EU
The Website is hosted by our provider, OVH, based in France. We also use the services of Google Analytics and WordPress in order to measure the audience and the performance of the Website. Our interaction through social media require using Napoleoncat services. In these cases, your Data will be transferred to the United States.
Subcontracting agreements including the European Commission’s Standard Contractual Clauses have been signed with our service providers to ensure compliance with the applicable legal framework.
Security
Our concern is to preserve the quality and integrity of your personal data. The technologies and security policies applied by us and our technical service providers protect your data against unauthorized access, alteration, malicious or accidental destruction and inadvertent loss of data. We continually improve our security procedures as technology evolves to maintain the highest level of protection. Our staff and those of our subcontractors who have access to personal data are contractually bound to confidentiality.
Your Rights
You have the right to access your personal data or to request their deletion. You also have a right to object on legitimate grounds, a right to withdraw your consent, a right to rectification, portability, a right to limit the processing of your data and a right to define directives concerning the fate of your Data after your death.
To exercise these rights or if you have any questions about the processing of your data, you can contact our Data Protection Officer (DPO): by email at dpo@pbsc.pf, or by post at DPO, Pacific Beachcomber SC, BP 6014, Faa’a, Tahiti – French Polynesia.
In the event that we fail to respond to your requests in a manner that satisfies you, you may also file a complaint with the supervisory authority (in France the CNIL).
For California Residents
If you are a California resident, the below terms are incorporated into this Privacy Policy. In the event of any inconsistency between the terms of this section and any other terms in this Privacy Policy, the terms of this section shall control to the extent necessary to resolve such inconsistency.
A) Information on the Processing of your Data
If you are a California resident you have the right to ask that we grant you access to your Data, and that we delete your Data. Please address written requests and questions about your rights to dpo@pbsc.pf
B) Categories of Data that we Collect
We collect the following personal data:
- Identifiers – such as first and last name, email address or other similar identifiers
- Browsing activity data– internet or other electronic network activity information, such as browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.
We do not “sell” your personal information. The list of third parties that receive your Data are described in the “Recipients” section above.
