Publication manager: SAS ECS
Hosting: OVH – OnLine, Scaleway
The websites www.chateaux-france,com, www.chateaux-france.app and all their derivatives:
– its cardinal sites, by adding one or more alphanumeric characters in place of “www”,
– sites that are translations thereof, such as: chateaux-france.fr, frankrijk-kastelen.com, schlosser-frankreich.com, castelli-francia.com, (it being specified that this list is neither restrictive nor exhaustive),
Collectively referred to as “the Site” or “the Publisher”.
In connection with the use of its services, and in particular the services accessible on the Site (as defined in our General Terms of Use – T&CU), in its internet (web) and mobile versions and its mobile applications, ECS SAS, in its capacity as data controller, may collect and process personal data concerning you.
As User (as defined in the T&CU); you accept the SPP and declare that you have a sufficient understanding of the language, in its original version, French, which always prevails over the translated versions of the SPP.
Chateaux-France is a brand operated by ECS SAS. 3bis, rue Albert Einstein 93200 Saint-Denis – France.
ECS SAS is dedicated to respecting with the privacy rules of its Users and beneficiaries, members of its loyalty program, prospects, and visitors to its website, mobile site, and mobile applications. All personal data processing carried out in connection with the services provided complies with applicable local regulations on personal data protection, in particular the provisions of the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation (EU Regulation 2016/679) or “GDPR.”
Loyalty programs and newsletters are offered by ECS SAS. These programs may involve third parties.
ECS SAS is responsible for processing your personal data within the framework of these programs. The respective responsibilities for compliance with personal data protection rules have been determined by agreement.
In order to ensure the proper application of these rules, ECS SAS has appointed a data protection officer who acts as the primary liaison with the French Data Protection Authority (CNIL). ECS SAS also implements appropriate internal procedures to raise awareness among its employees and ensure compliance with these rules within its organization.
ECS SAS is committed to ensuring a high level of protection for the personal data of its customers, prospects, Users of its website, mobile site, and mobile applications, and any other person whose personal data it processes.
ECS SAS undertakes to comply with the EU and French regulations applicable to all personal data processing operations it carries out. More specifically, ECS SAS undertakes to comply with the following principles:
Your personal data is processed lawfully, fairly, and transparently (lawfulness, fairness, transparency).
Your personal data is collected for specific, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes (purpose limitation).
Your personal data is stored in an appropriate and relevant manner and is limited to what is necessary for the purposes for which it is processed (data minimization).
Your personal data is accurate, kept up to date, and all reasonable steps are taken to ensure that inaccurate data, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy).
ECS SAS implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements, and to protect the rights and data of data subjects from the outset of the processing operations.
Par ailleurs, ECS SAS impose contractuellement le même niveau de protection des données personnelles à ses sous-traitants (prestataires, fournisseurs, etc.).
Enfin, ECS SAS s’engage à respecter tout autre principe s’imposant au regard de la règlementation applicable en matière de protection des données personnelles, et plus précisément concernant les droits conférés aux personnes concernées, les durées de conservation des données personnelles ainsi que les obligations relatives aux transferts transfrontaliers de données personnelles.
In the course of our relationship, you may provide us with your personal data through various means, including on our websites, mobile sites and applications when you browse the internet, make purchases, book reservations, fill in various data collection forms, subscribe to the e-newsletter, create an account, submit an application, post comments on our social media pages, make any contact with ECS SAS or otherwise transmit your personal data to us.
Your data is mainly used for booking and purchasing purposes, providing specific services or services carried out by or on behalf of SAS ECS: transport services, prospecting, loyalty building, entertainment, commercial information, satisfaction surveys, organization of competitions, new services and products intended to improve your customer and beneficiary experience, statistical studies, recruitment, after-sales service, processing your requests and/or complaints, but also to ensure the security and safety of the services provided within the framework of the gift boxes and to combat fraud.
In addition to cases where your consent has been obtained (in particular to communicate personalized offers to you), the processing of your data for the various purposes mentioned above is necessary in particular: to ensure the performance of the service contract, to comply with a legal obligation (in particular to ensure the safety of flights, to carry out mandatory immigration formalities with French or foreign public authorities, hotel reservations, alcohol orders, etc.), for the purposes of the legitimate interests pursued by ECS SAS (in particular to develop new services and offers, improve the loyalty program, improve customer and beneficiary service, etc.).
More specifically, your data is used:
to allow you to benefit from all the services or features available on ECS SAS’s websites, mobile sites and mobile applications: creation of a user account, e-newsletter, booking management, assistance and complaints, loyalty program management, etc.
to allow you to browse our websites,
to best match our information, notifications, offers and other forms of services to your expectations,
to be enriched by sharing certain information with preferred business partners in order to improve our understanding of your interests and allow us to send you offers and other forms of personalized services (subject to your prior consent where required and respect for your right to object, in accordance with applicable commercial prospecting rules),
to facilitate the completion of administrative formalities relating to immigration and entry into the territory, for the prevention of non-payment and the fight against fraud, as well as to ensure the security and safety of the services provided within the framework of the gift boxes that may be issued by SAS ECS.
In the mobile app, access to your contacts is used to automatically fill in the “travel companions” or “sign-up for” forms. This allows you to enter your personal information without having to do so manually. You are free to choose not to use this feature.
Any incident occurring during the execution of the services provided for in the boxes (such as transport contract, accommodation, services, etc.) and likely to affect the safety or security of said services, may be recorded electronically, a complaint may be filed and result in a ban on services by ECS SAS for a period of three years.
ECS SAS is committed to retaining your personal data for no longer than is necessary for the purposes for which it is processed. Furthermore, ECS SAS retains your personal data in accordance with the retention periods required by applicable laws.
These retention periods are defined according to the purposes of processing implemented by ECS SAS and take into account in particular the applicable legal provisions imposing a precise retention period for certain categories of data, any applicable limitation periods as well as the recommendations of the CNIL concerning certain categories of data processing (for example, Deliberation No. 2016-264 of 21 July 2016 amending a simplified standard concerning automated processing of personal data relating to the management of customers and prospects (NS-048), Article L.232-7 of the Internal Security Code relating to the transmission of passenger data to the French administration, retention of cookies for 13 months according to the recommendation of the CNIL…).
The data collected on ECS SAS’s websites, mobile sites, and mobile applications may be shared with authorized ECS SAS personnel, its partners (accredited agents, carriers, car rental companies, hotels, credit card companies, etc.), or its ancillary service providers, in connection with the performance of all or part of the services described above. We remind you that, in this context, ECS SAS requires its service providers to implement strict confidentiality and data protection measures.
In accordance with Article L.232-7 of the French Internal Security Code, we inform you that air carriers may be required to transmit the booking, check-in and boarding data of their passengers (API/PNR) to the French administration, according to the processing methods and for the purposes set out in Decree No. 2014-1095 of 26/09/2014.
Some of the recipients mentioned above may be established outside the European Union and may have access to all or part of the personal information collected by ECS SAS (name, surname, passport number, travel details, etc.), for the proper execution of the transport contract or due to a specific legal authorization.
In this context, ECS SAS undertakes to guarantee the protection of your data in accordance with the strictest rules in particular through the signing, on a case-by-case basis, of contractual clauses based on the model of the European Commission, or any other mechanism compliant with the GDPR, as soon as your personal data is processed by a service provider outside the European Economic Area and whose country is not considered by the European Commission as ensuring an adequate level of protection.
In accordance with applicable regulations on the protection of personal data, you may, at any time, exercise your rights of access, rectification, deletion of data concerning you as well as your rights to limit and object to the processing and to the portability of your personal data.
In addition, you have the legal right to define guidelines regarding the fate of your personal data after your death.
Furthermore, any person who was a minor at the time their personal data was collected can obtain its deletion as soon as possible.
These rights can be exercised by mail to the following address:
ECS SAS
Data Protection Officer
3bis, rue Albert Einstein 93200 Saint-Denis – France
Email : ECS SAS cnil@chateaux-france.com
In this context, we kindly ask you to accompany your request with the necessary information for your identification (name, surname, email) as well as any other information necessary to confirm your identity.
For certain specific services, these rights may be exercised directly online (managing your user account, managing your reservations, loyalty program, etc.).
You also have the right to lodge a recourse with the French National Commission for Information Technology and Freedoms (CNIL, in French) in the event of a violation of applicable regulations concerning the protection of Personal Data, and in particular the GDPR.
ECS SAS will collaborate when necessary to guarantee the exercise of your rights, or to provide you with answers to all your questions or complaints.
When you contact our customer service department, your call may be recorded for the purposes of improving service quality, preventing disputes, and deterring malicious calls. If you do not wish to be recorded, please inform the advisor directly.
You also have the right to object to the processing of your personal data for marketing purposes. Where required by law, your data will only be used for electronic marketing purposes after we have obtained your explicit consent.
Furthermore, if you no longer wish to receive the ECS SAS electronic newsletter by email, you can click on the unsubscribe link located at the bottom of each communication.
If you do not wish to receive offers from ECS SAS and our partners, you can update your communication preferences in your profile by logging into your account.
The collection of certain personal data is essential to enable access to certain services or benefits (special meals, medical assistance, etc.). You can, of course, exercise your right to object to the collection and processing of this data, but this may prevent you from accessing these services or benefits.
In accordance with French and international laws and regulations, the absence of communication or the inaccuracy of certain data may lead to a decision to refuse boarding or entry into a foreign territory (for example, by decision of a customs service), without ECS SAS being held liable.
ECS SAS is committed to continuously improving its online services to make them more accessible to its customers, potential customers, Users, and visitors. For example, the ECS SAS website (or its mobile site) provides 24/7 access to online booking and purchase of gift boxes and services. You can also find information on hotel and car rental booking options, travel insurance, and products offered by our partners.
To facilitate account creation and login, you can link your account on the Site to most social networks. By agreeing to share certain personal data, listed on the linking and authorization screen specific to each social network, you will benefit from optimized browsing on the ECS SAS website. You can unlink your ECS SAS account from your social media account at any time, if you wish.
In order to continuously improve the quality of services offered on the site and their suitability to your expectations, ECS SAS may use “cookies”, which are text files used to identify your terminal when you connect to one of our services.
The placement of cookies or trackers on your device (computer, tablet, smartphone, etc.) allows ECS SAS to collect information and personal data. Depending on your device settings, cookies allow us to: use the main features of the Site, optimize our website and detect any technical problems, remember your choices and preferences and personalize your user interface, compile statistics for the purpose of managing traffic and the use of the various elements comprising the ECS SAS website (sections visited, user journeys) to improve the site’s usability and the relevance of the services offered, evaluate the effectiveness of our advertising campaigns by counting and evaluating the number of sales and clicks in relation to our advertising investments, understand the content of the pages you visit, the searches you perform, the information you choose to share when registering on other sites, the pages and websites you have visited, share information with other websites to offer you relevant advertisements and announcements, and share information on social networks.
Depending on your cookie settings, some trackers may be issued or read by third parties (advertising providers, communication agencies, etc.) when you browse the Site.
You can adjust your cookie settings at any time. For more information on how ECS SAS uses cookies, please see our cookie policy.
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for ECS SAS. We therefore implement all appropriate technical and organizational measures, considering the nature, scope, and context of the personal data you provide and the risks associated with its processing, to protect the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion, or unauthorized access to this data. You can thus be assured that you can purchase and make your reservations with complete confidentiality and security.
We offer a secure online payment system using the latest technologies.
ECS SAS is committed to combating identity theft on the internet. This is why, for example, we use a system to detect fraudulent credit card payments. This system is designed to protect you in case your credit card is lost or stolen.
The security and confidentiality of personal data depend on everyone following best practices. Therefore, we urge you not to share your passwords with third parties, to always log out of your profile and social media accounts (especially if they are linked), and to close your browser window at the end of your work session, particularly if you are accessing the internet from a computer shared with others. This will prevent other users from accessing your personal information.
We strongly advise against sharing with third parties or publishing on social media any document issued by ECS SAS containing your personal data (your boarding pass, your ticket number, etc.).
To learn about best security practices, we encourage you to consult the IT Security Portal, for example. The terms and conditions relating to certain services or offerings accessible from ECS SAS websites, its mobile site, or its mobile applications may define more specific terms for the collection and use of your personal data.
Finally, ECS SAS has implemented a security breach management procedure to effectively address potential personal data breaches, promptly notify the competent authority of these breaches, and warn you when such a breach is likely to affect your personal data.
ECS SAS does not collect or process personal data relating to children under 16 years of age without prior agreement from the parents or those holding parental responsibility for the child.
If personal data concerning children is collected via the Site, parents or those with parental authority have the option to object by contacting us at the address indicated at the bottom of this page.
Furthermore, as stated above, a child who was a minor at the time their personal data was collected can obtain its deletion as soon as possible.
On several pages of the ECS SAS website, you are given the option to click through to other companies’ websites. We advise you to read the privacy policies of these sites regarding the processing and protection of personal data, as their terms and conditions may differ from those of ECS SAS.
ECS SAS will in no way be responsible for the processing of personal data by these other websites.
For more details regarding the control programs implemented by the US authorities, you can refer to the following websites:
U.S. Department of Homeland Security (DHS) Secure Flight Program Data Protection Policy
For any further questions regarding this policy or how ECS SAS processes your personal data, please contact our Data Protection Officer at the following address: cnil@chateaux-france.com
SAS ECS reserves the right to amend these Security and Privacy Polities (SPP) and undertakes to inform Members of any changes or additions on its website, in particular by displaying the date of the last update at the top of these SPP.
The Site applies other Terms and Conditions in addition to these SPP, such as the General Terms and Conditions of Use (“T&CU”), that describe its use, the Copyrights, and other conditions that apply to Member Users.
These additional terms and conditions are linked to these SPP, which apply to any use of the Site.
They are incorporated by reference and form an integral part of the contractual agreement (hereinafter referred to as the “Agreement“).
The invalidity of one or more clauses herein shall not invalidate the Agreement.
The invalidity of one or more clauses of the contractual agreement shall not invalidate these SPP
French law applies to this Agreement.
In the event of failure to reach an amicable resolution of a dispute between the parties, the French courts within the jurisdiction of the Paris Court of Appeal—Paris being the place of performance and rights referred to herein—shall have sole jurisdiction to hear the case.
For any questions regarding the application of these GTCS, you may contact the Publisher at the address provided in article 1.
