Last revision date: May 9, 2022
The website “https://thalasso.intercontinental.com/” (hereinafter the “Website”) is operated by InterContinental Bora Bora Resort & Thalasso Spa (hereinafter “we” or “us”), whose registered office is located at Hôtel InterContinental Bora Bora Resort & Thalasso Spa – BP 156 – 98730 Bora Bora – French Polynesia.
This policy (hereinafter the “Policy”) sets out how we process the information we collect about you (hereinafter your “Data”) when you visit our website.
We attach the greatest importance to respecting the privacy and personal data of our users.
In order to maintain maximum protection of your personal data, our Website, under the supervision of our Data Protection Officer (DPO), as well as the actors administering it (host, IT service providers) comply with the applicable legislation on the protection of personal data.
Status of the Links
The processing described in this Policy only concerns the Website “https://thalasso.intercontinental.com/”. External links from other entities or third parties may be present on our Website, for partnership purposes. You may refer to the privacy policies of these entities or third parties when visiting their website. Please note that we are not responsible for the privacy policies and content of other sites.
Purpose and Categories of Data Processed
The website “https://thalasso.intercontinental.com/” is the website of the InterContinental Bora Bora Resort & Thalasso Spa. It allows Internet users to learn more about our hotel, its activities, products and services. The Website also allows us to redirect you to a reservation site by pre-filling in the dates and the number of people concerned by the stay. This site does not allow reservations, nor is it a commercial site, and there are no general terms of sale or mentions concerning the security of payment methods.
We collect and process Data when:
– You contact us to ask questions or make comments or suggestions via our “Contact Us”, “Information Request” forms, or directly by e-mail: in which case, we collect your identity and contact data (mandatory data to enable us to respond to your request) and any information that you voluntarily provide to us and which is relevant to the processing of your request.
– You subscribe to our newsletter in order to be informed of news and exclusivities concerning our hotel. You have the right to unsubscribe from the newsletter via an unsubscribe button in all our emails.
The processing of your Data for the purpose of responding to your requests sent via our contact forms is based on your prior consent.
The processing of your Data implemented for the purpose of analyzing the navigation on the Website and optimizing the Website is based on your consent. The processing of your Data for the purposes of the operation and security of Website are based on our legitimate interest in ensuring its security and functionality.
The processing of your Data for the purpose of subscribing to our newsletter is based on your consent.
When your Data is collected in the context of requests sent via our contact form, it is kept for the time strictly necessary to process those requests, and for a maximum of 2 years.
When your Data is collected as part of your subscription to our Newsletter, it is kept during your subscription and is deleted immediately after you unsubscribe.
At the end of the retention periods indicated above, we will delete your Data.
In order to provide our services, your Data may be shared with
– Our service in charge of the management of the Website and the analysis of its traffic;
– Our IT department, for technical assistance, management and maintenance of the Website;
– Our service providers in charge of analyzing the Website’s traffic and providing security and functionality cookies;
– Our service provider in charge of hosting of the Website.
InterContinental Bora Bora Resort & Thalasso Spa may disclose your Data to third parties where such disclosure is permitted and required by law or court order, or where such disclosure is necessary to protect and defend its rights.
Apart from these cases, your Data will not be transferred or made accessible to any third party without your prior consent.
Transfer outside the EU
The Website is hosted by our provider, OVH, based in France. We also use the services of Google Analytics and WordPress in order to measure the audience and the performance of the Website. In these cases, your Data will be transferred to the United States.
Subcontracting agreements including the European Commission’s Standard Contractual Clauses have been signed with our service providers to ensure compliance with the applicable legal framework.
Our concern is to preserve the quality and integrity of your personal data. The technologies and security policies applied by us and our technical service providers protect your data against unauthorized access, alteration, malicious or accidental destruction and inadvertent loss of data. We continually improve our security procedures as technology evolves to maintain the highest level of protection. Our staff and those of our subcontractors who have access to personal data are contractually bound to confidentiality.
You have the right to access your personal data or to request their deletion. You also have a right to object on legitimate grounds, a right to withdraw your consent, a right to rectification, portability, a right to limit the processing of your data and a right to define directives concerning the fate of your Data after your death.
To exercise these rights or if you have any questions about the processing of your data, you can contact our Data Protection Officer (DPO): by email at email@example.com, or by post at DPO, Pacific Beachcomber SC, BP 6014, Faa’a, Tahiti – French Polynesia.
In the event that we fail to respond to your requests in a manner that satisfies you, you may also file a complaint with the supervisory authority (in France the CNIL).
For California Residents
A) Information on the Processing of your Data
If you are a California resident you have the right to ask that we grant you access to your Data, and that we delete your Data. Please address written requests and questions about your rights to firstname.lastname@example.org
B) Categories of Data that we Collect
We collect the following personal data:
- Identifiers – such as first and last name, email address or other similar identifiers
- Browsing activity data– internet or other electronic network activity information, such as browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.
We do not “sell” your personal information. The list of third parties that receive your Data are described in the “Recipients” section above.