Privacy Policy
The company BUILDINVEST RESORTS SXM Sarl , undertakes that the processing of personal data carried out within the framework of its activity are in accordance with the European Regulation No. 2016/679, known as the General Regulation on Data Protection (RGPD) and the Data Protection Act.
In this privacy policy (the " Policy "), we explain how and why we use your data, what your rights are and how to exercise them.
By accepting the Policy, you agree to our processing of your data.
What is personal data?
Personal data (" Personal Data " or " Data ") means any information relating to an identified or identifiable natural person:
- directly (name, first name, email address) or
- indirectly (IP address, geolocation).
Who is this Privacy Policy for?
This Policy applies to all of our hotel, bar-restaurant, spa and related services (the " Services ") via the website https://www.sxm-palm-court.com (the " Site ").
It is intended to inform the Customer who uses our Services.
Who collects your Data?
The Data Controller, within the meaning of the European Data Protection Regulation, is BUILDINVEST RESORTS SXM, represented by its president in office
How do we collect your Data?
BUILDINVEST RESORTS SXM, collects Data online (including by e-mail), on paper or orally (during a physical appointment or by telephone) and this Policy applies regardless of the method of collection or processing.
Why do we collect your Data?
Some of your Data is necessary for the processing and provision of our Services. Failure to provide this information will prevent the proper functioning of the Services offered.
For your information, you will find below a non-exhaustive list of categories of data collected corresponding to the purposes of our collection.
To answer your contact request:
- Categories of data collected: identity data (last name, first name, postal code, city, country), contact data (email address, phone number), free comment area.
- Category of person: website users
- Legal basis: your consent obtained when sending the contact request
To offer you a subscription to our newsletter:
You can subscribe to our newsletter by email.
- Categories of Data collected: identity data (name, first name) and contact data (email address).
- Person category: users
- Legal basis: your consent obtained through your subscription to the newsletter.
You can, at any time, decide to unsubscribe from this newsletter, by clicking on the link provided for this purpose, present in each newsletter.
To process your response to a job offer or recruitment request:
- Categories of Data collected: identity data (name, surname), contact data (e-mail address, telephone number), information contained in the curriculum vitae and cover letter (free comment area).
- Category of person: website users
- Legal basis: pre-contractual measures taken at your request.
To process your reservation and gift certificate request:
- Categories of Data collected: identity data (last name, first name, country of residence, postal address), contact data (e-mail address, telephone number) and banking data (card number, cryptogram, holder, expiration date).
- Category of person: customers
- Legal basis: contractual measures taken at your request.
To carry out statistical operations of frequentation:
- Categories of Data collected: Browsing data (IP address).
- Category of person: website users
- Legal basis: your consent when you accept the deposit of statistical cookies.
When creating an account:
- Categories of Data collected: login data (password) and contact data (e-mail address).
- Category of person: website users
- Legal basis: Your consent.
Are you required to provide your Personal Data?
When you make specific requests such as registering for our newsletter, the processing of your Data is mandatory. Indeed, we cannot proceed to your registration without processing your Data (email address in particular).
Please note that when you give your consent to the processing of your Personal Data, you have the right to withdraw this consent at any time via the dedicated address rgpd@buildinvest.com.
How long do we keep your Data?
We keep your Data only as long as necessary to carry out the purposes for which it was collected, except where the law provides for a different retention period:
- To make a reservation request or to offer a gift voucher: the data are kept for 3 months from the last contact with the customer.
- For the contact form: the data are kept for the time of the treatment of the request then immediate deletion of the data.
- For the recruitment request: the data is kept for 2 years in case of no answer or refusal. After recruitment, the data is kept for the duration of the employment contract and then destroyed 2 years after the last contact.
- For authentication: the data are kept for 1 year from the last connection.
- For statistics: the data are kept for 13 months, then, deletion or renewal of contact.
You acknowledge that the Data you provide to us and that is stored in our information systems is accurate and constitutes proof of your identity.
With whom do we share your Data?
The Data collected are shared, according to their respective needs and in accordance with the purposes mentioned above, with
- BUILDINVEST RESORTS SXM staff ;
- external operating, reservation or delivery personnel
- External application management services staff
- staff of external hosting services for our website
- External service personnel sending confirmation emails following product/service orders or reservation requests.
Is your Data sent outside the European Union?
We may share some of your Data outside the European Union with service providers located outside the European Union. However, each transfer is governed by a mechanism that provides protection equivalent to that guaranteed by European Union law.
As the Site is accessible on the Internet, its content and therefore your publications may be accessible outside the European Union.
What security measures have we taken to protect you?
We undertake to implement all the technical and organizational measures necessary to respect the protection of your Personal Data.
Our contracts with our service providers include a section dedicated to data protection, in compliance with applicable laws.
What are your rights?
In accordance with the Data Protection Act and subject to compliance with the legal obligations imposed on BUILDINVEST RESORTS SXM in the context of its activity, each individual may exercise the following rights:
You can:
- Request a copy of your session content data, service requests, recruitment requests - Right of access
- Correcting inaccurate data about you - Right of rectification
- Request the deletion of certain Data concerning you, however this request is incompatible with the processing of your response to a job offer - Right of deletion
- To object to our processing of your Data; this request is incompatible with the processing of your order for products/servicesor your reservation request - Right to object
- Decide at any time to withdraw your consent - Right of withdrawal
- Limiting the use of your Data while your request is being processed - Right to limit processing
- Exercise your Right to Portability - if applicable
When a Data breach that may pose a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.
You may formulate directives relating to the conservation, deletion and communication of your Personal Data after your death, in accordance with article 85 of the law 78-17 of January 6, 1978.
How to exercise your rights?
These rights as well as these directives can be exercised and addressed to us by writing to
- by post to the following address: BUILDINVEST Service Juridique 18, rue de Prony - 75017 PARIS
or
- electronically: rgpd@buildinvest.com
In order to allow us to identify you quickly and to answer you, you will join to your request all elements allowing to establish your identity (in particular request for estimate, request for contact, request for inscription, or request made directly via your account.) A response will be sent to you within 1 month of receipt of the request. In some cases, due to the complexity of the request or the number of requests, this period may be extended by 2 months.
You may also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority in charge of enforcing regulations on the protection of personal data in France, by internet https://www.cnil.fr/fr/agir or by post at the following address Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.
Changes to this Privacy Policy
We may update this Policy by posting a new version on our Site. We will not lower the level of privacy of your Data substantially without informing you and obtaining your consent.
Contact
If you have a question about the Privacy Policy, contact us:
- by post to the following address: BUILDINVEST Service Juridique 18, rue de Prony 75017 PARIS
or
- By electronic means: rgpd@buildinvest.com