Staycation operates in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
2. Who is responsible for the processing of your personal data?
The information shared by the User while using the Website (creating a user account, making a reservation via the Website with a partner Hotel, signing up to receive the newsletter) are addressed to Staycation, SAS with a capital of 19,211.88€, registered with the Paris business registry (registre du commerce et des société de Paris) under number 829 869 023, whose headquarters are located at 18 rue Soleillet 75020 Paris.
To this end, Staycation is the data’s controller and chooses the processing purposes for this personal data.
As Data Privacy Officer of the Staycation company, Mr. Kevin Hutchings is the controller’s representative.
Below are the purposes of the personal data processing, carried out by the controller within the boundaries of the use of the Website by the User.
3. Processing purposes (what is the collected data used for?)
The Users’ personal data is collected and processed by Staycation to:
Provide the service: being an intermediary between the User and the partner Hotel in booking an offer – Staycation uses the User’s personal data to process the User’s reservation of an offer with a partner Hotel, and to manage the payment of the Offer. The legal grounds for this type of processing are outlined in the contract between the User and Staycation.
Share Staycation’s offers with the User – Staycation uses your personal data to share, via e-mail, the latest offers with the partner Hotels, available on the website. The legal grounds for this type of processing is the User’s consent.
Additionally, the Users’ personal data may be processed to:
Cookies to improve Website navigation: connection and Website use data;
Manage registrations and account creations;
Manage the monitoring of User orders: connection and website use data, billing, order history, information on the management of its requests
Answer client service issues (when the User contacts Staycation or when Staycation replies to User comments or requests)
Depending on the user’s consent to the Website’s “Cookies” policy, to offer custom content and ads to the User
Prevent and fight IT crimes (spamming, hacking…): hardware and software used for navigation, IP address, password (encrypted);
Carry out optional satisfaction surveys on the Staycation Website
https://www.staycation.co does not use your personal data for commercial purposes. The data is processed only for required purposes and for statistical, analytical, or advertising purposes
4. What data do we collect from you?
To fulfil the abovementioned purposes, Staycation collects the following data:
- For the creation and management of the User account:
Data the user must share to create an account:
Without this personal data, the User cannot create his/her user account.
Additional and optional data the User can share on his/her account:
On his/her account, the User may, at any moment:
Modify his/her personal information;
View his/her bookings with partner Hotels (Staycations);
View his/her whishlist;
- Provide the service: being an intermediary between the User and the partner Hotel in booking an offer:
Data the User must share to purchase an offer on the Website:
Contact information (Title, First name, Last name, E-mail address)
Phone number for a reservation
Postal address for a gift card order
If the User does not share this personal data, he/she cannot proceed with his/her reservation on the Website.
Additional and optional data the user can share:
Job title within the company if the reservation is made for a company,
A different billing address,
The User may also indicate the “Reason for his/her Staycation”. The information is shared with the Hotel, so it can take the reason into account if relevant.
- Share Staycation’s offers with the User:
Data the User must share to receive Staycation’s offers:
- E-mail address;
Generally speaking, Staycation does not collect sensitive personal data on its Website. If the User shares sensitive personal data without the information being required (sharing dietary restrictions for example), the User expressly agrees to the processing of this data. In this event, the User is informed of his/her right to withdraw his/her consent at any time, by placing a formal request in compliance with the procedure outline in article 9 of this document.
5. Who is the recipient of this data?
Your data is sent to Staycation’s internal services for the abovementioned purposes.
We share your data with the following third parties:
Partner Hotels, so they can carry out the accommodation services, along with any other additional services that were purchased;
Online payment service providers, so they can provide the online payment service for the reservation;
Advertising platforms, for audience creation and custom advertising
Affiliation platforms, to manage registrations and bookings.
In the last two cases, the third party’s access to User data will be strictly limited to the fulfillment of its services, and the third party holds a contractual obligation to use the data in a manner that is compliant with the applicable personal data protection regulation.
Additionally, in compliance with our legal obligations, your personal data may also be shared with duly authorized administrative and judicial bodies, and only upon judicial demand.
6. Data safety
Staycation is committed to implementing all appropriate organizational and technical data safety measures to ensure that all the personal data is well protected against alterations, destructions, and unauthorized access.
7. Data conservation period
Staycation only stores personal data for the time necessary to the accomplishment of the purposes for which the data was collected, and to the extent outlined in the applicable legislation.
In any case, the conservation period varies depending on the processing purpose.
When Staycation no longer needs to use the personal data, we will delete it from our systems and files and/or we will make it anonymous, so you can no longer be identified with it.
8. What are your rights?
Users have the following rights:
Right to access: it is the right to obtain a copy of the personal data we have about you.
The right to data portability: it is the right to obtain the personal data we have about you, in an electronic, structured, and interopable format, and to have it transferred to another controller.
The right to rectification: it is the right to rectify any incomplete or inaccurate personal data about you. To this end, we remind you that you can, at any time, modify the personal data in your User account by logging in to your account.
The right to erasure: you have the right to request the erasure of the personal data we process about you, which we will do, subject to our legal obligation to keep the data.
The right to restriction of processing: it is the right to obtain the restriction of processing of your personal data when the accuracy of the data is contested, when you think the processing is unlawful, or when you think we no longer need to process your data, unless we cannot delete your data because of legal or other types of obligations, or because you do not wish for the data to be deleted.
The right to object: it is the right for you to object to the processing of your data by Staycation. We will honor your request unless we have a valid reason not do so, in compliance with the applicable legislation.
9. How to exercise your rights
The User can exercise all of his/her rights by proving his/her identity through the following means:
Sending an e-mail to: email@example.com, or,
Sending a letter to: Staycation, 18 rue Soleillet 75020 Paris.
The User will be informed, in a timely manner, of all the measures taken following his/her request. However, Staycation will not respond favorably to requests that are clearly unfounded or excessive.
The User will be informed of his/her right to lodge a complaint with the appropriate inspection body for data protection, which is the French CNIL.
Please note that if you have withdrawn your consent to the processing of your personal data (subject to contractual and legal restrictions, as well as to a reasonable prior notice), we will no longer be able to offer you the services attached to the processing of this data.
10. Any questions?
If the User has any question, he/she should reach out to Staycation via:
E-mail at the following address: firstname.lastname@example.org, or,
Mail at the following address: Staycation, 18 rue Soleillet 75020 Paris.
You can always disable these cookies for free via your browser settings. Each browser’s configuration is different. It is outlined in the browser’s help menu, or you can view it below:
Staycation will also inform its Users of the modification via e-mail, in a timely fashion. If the User does not agree to the amended Policy, he/she can delete his/her account.
Users who do not have accounts will be informed via an alert on the Website’s homepage.
Version applicable on December 20, 2018