Privacy policy

1. Who We Are

Hôtel de Milan is a hotel located in France.
We are responsible for the personal data collected through our website https://hoteldemilan.fr and through our communication with guests and potential guests.

If you have any questions about this policy or wish to exercise your privacy rights, you can contact us at:
info@surlaroutedesalpes.com
54 rue du Général de Gaulle, 38520, Le Bourg d’Oisans, France

2. What Personal Data We Collect

We collect and process the following types of personal data:

  • Contact information: name, email address, and phone number (when you contact us through our website form or by email).

  • Booking information: details about your stay (dates, number of guests, preferences) when you contact us or when we receive information from external booking platforms.

  • Communication data: messages or requests you send us.

  • Marketing preferences: your consent to receive newsletters or promotional emails.

We may also collect payment information, such as partial or full billing details, when you provide them to us directly in the context of confirming or paying for a reservation (for example, when you send them to us by email or phone). However, when bookings are made through external platforms, payment information is processed under the privacy policies of those platforms.

3. How We Use Your Data

We use your personal data only for the following purposes:

  • To respond to booking requests or general inquiries sent through our website or by email.

  • To manage communication with guests before, during, and after their stay.

  • To send newsletters or special offers — only if you have given explicit consent to receive them.

  • To comply with legal obligations related to hospitality and accounting in France.

If you provide payment information directly to us, we use it only for the purpose of securing and processing your reservation and stay, and in compliance with applicable French accounting and hospitality regulations. We do not store payment information longer than necessary for processing the payment and meeting legal requirements.

4. Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contract: to respond to your inquiries and manage your stay.

  • Consent: for sending newsletters or promotional emails.

  • Legal obligation: to comply with accounting, tax, or guest record-keeping requirements.

  • Legitimate interest: to ensure the proper functioning and security of our website.

5. Sharing of Data

We share your personal data only with trusted third parties when necessary to provide our services:

  • Email service providers used to send our newsletters (only to subscribers who have opted in).

  • IT and hosting providers that maintain our website and email systems.

We never sell or rent your personal data to third parties.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected:

  • Contact form and inquiry data: up to 12 months after your last contact.

  • Newsletter subscribers: until you unsubscribe.

  • Booking-related communications: retained as required by French law for accounting or tax purposes.

After that period, your data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, or disclosure.
Only authorized hotel staff and service providers have access to personal information, and all access is limited to what is necessary.

8. Your Rights (under the GDPR)

You have the following rights regarding your personal data:

  • Access – request a copy of the data we hold about you.

  • Rectification – request correction of inaccurate or incomplete data.

  • Erasure – request deletion of your data where legally possible.

  • Restriction – request limitation of processing in certain circumstances.

  • Withdrawal of consent – unsubscribe or withdraw your consent at any time.

To exercise these rights, please contact us at info@surlaroutedesalpes.com.
You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) at www.cnil.fr.

9. Cookies and Tracking

Our website does not use cookies for analytics or advertising purposes.
Only essential cookies may be used to ensure the basic functionality and security of the site.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
The latest version will always be available on our website at https://hoteldemilan.fr.