Confidentiality Politic
This privacy policy applies to the website:
How their personal data is collected and processed. Personal data is any information that can identify a user (e.g., name, age, postal address, email, location, or IP address).
Their rights regarding this data.
The identity of the Data Controller responsible for collecting and processing this data.
To whom this data is transmitted.
The website’s "Cookies" policy, where applicable.
This policy supplements the Legal Notice and the General Terms and Conditions of Use, which can be viewed at:
In accordance with Article 5 of European Regulation 2016/679 (GDPR), the collection and processing of user data comply with the following principles:
Lawfulness, Fairness, and Transparency: Data can only be collected and processed with the user’s consent. Users will be informed of why their data is being collected.
Purpose Limitation: Data is collected for one or more specific purposes defined in these terms.
Data Minimization: Only data strictly necessary for the website's purposes is collected.
Storage Limitation: Data is kept for a limited duration, of which the user is informed.
Integrity and Confidentiality: The Data Controller ensures the security and confidentiality of the data collected.
To be lawful under Article 6 of the GDPR, processing must meet at least one of the following conditions:
The user has given express consent.
Processing is necessary for the performance of a contract.
Processing fulfills a legal obligation.
Processing is necessary to protect the vital interests of the individual.
Processing relates to a task in the public interest.
Processing is necessary for the legitimate interests of the Data Controller or a third party.
A. DATA COLLECTED AND METHOD OF COLLECTION The following personal data is collected on the Le Mas de la Crémaillère website:
Email address, First and Last Name, Postal address, Phone number.
This data is collected when the user:
Signs up for our newsletters.
Purchases services online.
For online payments, proof of the transaction (purchase order and invoice) will be stored in our systems. Data is stored for a duration of 3 years under reasonable security conditions. IP addresses and location data are recorded to improve service quality and website security.
B. DATA TRANSMISSION TO THIRD PARTIES Data may be transferred to our hosting provider to optimize our services.
C. DATA HOSTING The website is hosted by: Occitech, 35 B boulevard des Récollets, 31400 Toulouse. Phone: +33 (0)5 82 95 25 35.
A. THE DATA CONTROLLER The Data Controller is Le Mas de la Crémaillère – Chaîne Thermale du Soleil. They can be reached at: dpo@chainethermale.fr.
B. OBLIGATIONS OF THE DATA CONTROLLER The Controller commits to protecting personal data, not sharing it with unauthorized third parties, and notifying users in case of data rectification, deletion, or security breaches. The site uses an SSL Certificate (Secure Socket Layer) to ensure secure data transfer.
C. DATA PROTECTION OFFICER (DPO) The DPO ensures compliance with national and international data protection laws. Contact: dpo@chainethermale.fr.
Users have the following rights. To exercise them, please provide your name and email address to the Data Controller. A response will be provided within 30 days.
Right of Access, Rectification, and Erasure: Users can update or request the deletion of their data by emailing the address above.
Right to Data Portability: Users can request their personal data be transferred to another site.
Right to Restrict or Object to Processing: Users may request a limitation on how their data is used.
Right against Automated Decision-making: Users have the right not to be subject to a decision based solely on automated processing.
Post-mortem Data Instructions: Users can organize the fate of their data after their death (Law No. 2016-1321).
Right to Contact the Competent Authority: If the Data Controller does not respond, users may contact the CNIL (
MINORS: Under GDPR and French law, only minors aged 15 or over can consent to data processing. For those under 15, legal representative consent is required.
The site may use cookies (files under 4kb) to process traffic statistics and improve user experience.
Consent: Required for non-essential cookies and valid for 13 months.
Opposition: Users can disable cookies in their browser settings (Chrome, Firefox, Safari, etc.). Disabling cookies may cause site malfunctions for which the publisher is not responsible.
Details: For more information, please visit:
The publisher reserves the right to modify this policy at any time to ensure compliance with current laws. Users are invited to consult it regularly. Significant changes will be notified via email or site notification. Last updated: November 20, 2018.
By browsing the site, the user certifies that they have read and understood this privacy policy and accept its terms.
_6943e1612f6697_88226949.jpg)