Privacy Policy

Version as of 15/09/2025

Preamble

This Privacy Policy is intended to explain to you, in accordance with the General Data Protection Regulation (GDPR), why Grandes Alpes Hotel Courchevel processes your personal data, how it is processed, what rights you hold over your data and how to perform them.

Grandes Alpes Hotel Courchevel reserves the right to modify this Privacy Policy at any time. Any changes will take effect immediately. We invite you to regularly consult our Policy, accessible from all pages of the Site, in order to keep yourself informed of the latest applicable online version. We also encourage you to check the date indicated on this Policy to find out when it was last updated.

Summary

Why does Grandes Alpes Hotel Courchevel need to collect and process your data and what is the legal basis for processing it?
What data does Grandes Alpes Hotel Courchevel collect and process as part of its activity?
Whom does Grandes Alpes Hotel Courchevel share your data with?
Is your data transferred outside the EU?
How long is your data retained?
Prospecting and targeted advertising
What are your rights and how can you exercise them?

1. Why does Grandes Alpes Hotel Courchevel need to collect and process your data and what is the legal basis for processing it?

Grandes Alpes Hôtel Courchevel collects your personal data in order to meet the purposes described above. Each of these purposes is based on a legal basis that permits Grandes Alpes Hôtel Courchevel to carry out the processing.

A/ Client relations management

Objectives: To ensure the link with customers before, during and after their stay.

Reservation management (confirmation, cancellations, refunds, special requests)
Communication with customers (reception, concierge, answering questions)
Feedback and customer satisfaction
Management of complaints and other issues related to the stay
Customer loyalty and personalization of the experience
Promotions, special offers, newsletters
Group and event management
Communication and customer satisfaction
Emergency management (related to security or customer incidents)

2. Sales management, partnerships and marketing

Objectives: To develop the commercial activity of the establishment.

Business development and communication with business partners
Partnership management (travel agencies, OT, ESF, etc.)
Collaboration with external partners
Hotel representation (trade fairs, events)
Promotion and marketing
Market analysis and research

3. Administrative, financial and accounting management

Objectives: To manage the structure and ensure its financial compliance.

Accounting (invoices, payments, reconciliations, reporting)
Financial management (budgets, cash flow, financial indicators)
Communication with financial institutions (banks, investors)
Contract management (customers, suppliers, service providers)
Cost Management
Performance Analysis

4. Human Resources and Internal Management

Objectives: To recruit, and to create a CV database based on your consent.

Management of vacancies
Receipt of applications and sorting according to employment needs
Individual responses to candidates

5. Hotel Operations and Operations

Objectives: To guarantee the quality of service, operational fluidity and customer satisfaction.

Inventory management
Purchase orders management
Supplier and subcontractor management
Supervision of operations and coordination of services (catering, spa, maintenance, bar…)
Logistics planning of services and events
Quality monitoring
Communication with departments
Strategic Operations Planning

6. Maintenance and technical management

Objectives: To ensure the proper functioning of the installations and equipment.

Preventive and curative maintenance management
Supervision of technical projects (renovations, fittings)
Technical Emergency Management
Monitoring of technical systems (heating, air conditioning, security)
Communication with technical suppliers
Management of technical service contracts
Technical innovation, energy efficiency and sustainability

7. GDPR Security and Compliance

Objectives: To protect personal data and ensure regulatory compliance.

Management of customer complaints related to data processing
Security and alerts
Incident or data breach management
Compliance monitoring (CNIL controles, GDPR, processing registers, legal notices)
Management of the rights of individuals (access, rectification, erasure)

B/ These purposes have the following legal basis:

Legal basis (Art. 6 GDPR)	Associated purposes
Performance of the contract (Art. 6-1.b)	Management of reservations (confirmation, cancellation, refund) Communication with travel agencies and TO Management of employee files (payroll, health insurance, planning) Processing of supplier orders
Legal obligation (Art. 6-1.c)	Bookkeeping and tax obligations Follow-up and communication with the DGFIP (Tax administration), URSSAF (Social security contributions collector), mandatory social declarations Response to requests to perform GDPR rights Regulatory compliance (safety, hygiene, accessibility)
Legitimate interest (Art. 6-1.f)	Internal communication between departments Post-stay or internal feedback (employees) Performance analysis and continuous improvement Management of customer complaints B2B institutional communication (partners, OT, City Hall)
Consent (Art. 6-1.a)	Sending newsletters and marketing campaigns Non-technical cookies (advertising, statistics) Registration forms for optional events or services
Vital interest (Art. 6-1.d) (exceptionally)	Management of emergency situations or technical incidents affecting the physical safety of people in the establishment

In general, Grandes Alpes Hôtel Courchevel does not process any of your data for purposes that are incompatible with those for which they were collected, unless you have given your prior consent.

2. What data does Grandes Alpes Hotel Courchevel collect and process as part of its activity?

Grandes Alpes Hotel Courchevel collects different types of personal data about you:

Personal data that you provide to us directly:

When you fill out a contact form,
When you are involved in a recruitment process to complete a season with our teams;
When you wish to book a room in our Establishment,
When you wish to enter into a contract with our Company,
Generally speaking, when you exchange with Grandes Alpes Hotel Courchevel in any other way.
Identification data (surname, first name, date of birth);
Contact details (email addresses, postal addresses, landline and mobile phone numbers, etc.)
Family data (household composition, number of children, grandparents)
Bank details (Iban, bank details, banking institution, reasons in case of payment incident)
Financial data (invoice number, person in charge of validation, amounts and services exchanged)
Technical data (hardware configuration, Apple TV…)

Personal data provided to us

For the purposes described above, some of your personal data is transmitted to us by third parties:

The data that is transmitted to us by our partners, tour operators or travel agencies for booking purposes is usually the following:

Identification data (surname, first name, date of birth);
Contact details (email addresses, postal addresses, landline and mobile phone numbers, etc.)
Family data (household composition, number of children, grandparent…s)
Bank details (Iban, bank details, banking institution, causes of payment incident)

Personal data we collect automatically

When you access the Site, certain information about you is collected automatically, in particular, information about your browsing. Grandes Alpes Hotel Courchevel uses cookies and other tracking technologies to collect information about you when you interact with the Site.

To learn more about cookies and how to disable them, please see the Cookie Policy.

By clicking on Cookie Policy, a hypertext link should refer to this policy.
The paragraph can be deleted if the website does not use cookies.

3. Whom does Grandes Alpes Hotel Courchevel share your data with?

Grandes Alpes Hotel Courchevel is likely to transmit your data only to authorised recipients, within the limits of their respective responsibilities and according to the purpose(s) concerned: the staff of Grandes Alpes Hotel Courchevel, and external bodies, subcontractors with whom our relationship is contractually framed to include the requirements arising from the protection of personal data.

Purpose	Recipients
Customer relations management	Internal: General Management, Operations and Reception, Accounting, IT Referent. External: IT service providers (Microsoft, Medialog, etc.).
Sales, partnerships and marketing management	Internal: General Management, Operations and Reception, Accounting, IT Referent. External: IT service providers (Microsoft, Medialog, etc.), leisure service partners.
Administrative, financial and accounting management	Internal: General Management, HR and Finance, IT referent. External: Accounting and social firms, Law firms, IT service providers.
Human Resources and Internal Management	Internal: General management, IT referent, any manager concerned or interested in recruitment operations. External: Accounting and social firms, Law firms, IT service providers.
Hotel Operations & Operations	Internal: General management, IT referent. External: Accounting and social firm, IT service providers (Apple), leisure service partners.
Maintenance and technical management	Internal: General Management, Operations, HR Accounting and Finance. External: External DPO (My Data Solution), IT service providers.
GDPR Security and Compliance	Internal: General management, IT referent. External: External DPO (My Data Solution), IT service providers.

4. Is your data transferred outside the EU?

Your data is hosted on secure servers located in France.

In case your data is transferred outside the EEA, in particular through our service providers, we will pay particular attention to ensuring that they process your data in strict compliance with the regulations in force on the protection of personal data. In the event of such a transfer, your data will only be transferred:

To countries deemed to provide an adequate level of data protection and approved by the European Commission as ensuring a level of protection essentially equivalent to that guaranteed within the EEA ; or certified in compliance with the Data Protection Framework (« DPF ») requirements.
Under the safeguard of the EU Commission Standard Contractual Clauses.

5. How long is your data retained?

Your personal data is retained by Grandes Alpes Hotel Courchevel for the time strictly necessary to achieve the purposes referred to in point 1 hereof, and beyond in order to follow the legal limitation periods, thus respecting the different life cycles of the data : in an active database, intermediate archiving, permanent archiving or deletion.

Purpose	Recipients
Customer relations management	In active database: Until the end of the stay + immediate post-stay management (2 to 6 months) Intermediate archiving: 5 years after the end of the service Deletion, except anonymised storage for statistical purposes
Sales management, partnerships and marketing (including commercial prospecting)	In active database: Until the withdrawal of consent or 3 years after the last active contact. Intermediate archiving: Not applicable except for proof of opt-in (up to 5 years max) Suppression ou anonymisation
Administrative, financial and accounting management	In active database: Retained during the fiscal year + closure (N+1) Intermediate archiving: 10 years from the end of the financial year (legal obligation) Suppression or Historical Retention with Restrictions (Definitive Archives)
Human Resources and Internal Management	As far as recruitment operations are concerned, In active database: If the application is successful: until the hiring process is effective. If the application is not successful: Up to 2 years after the last active contact with the candidate. Intermediate archiving: Integration into the personnel file in case of hiring, otherwise, not applicable. Deletion (unless explicitly agreed for longer storage)
Hotel Operations & Operations	In active database: for the duration of operations. Intermediate archiving: During the time of litigation with regard to contractual operations and provision of services Delete or retain for internal audit purposes with restricted access
Maintenance and technical management	In active database: For the duration of operations. Intermediate archiving: During the time of litigation for contractual operations and the provision of technical or IT services Suppression ou anonymisation
GDPR Security and Compliance	In active database: Up to 3 years after the exercise of the rights. Intermediate archiving: 5 years max depending on the context (proof of compliance) Delete or retain for internal audit purposes with restricted access

For more information on the retention periods of your data, you can contact the DPO of Grandes Alpes Hotel Courchevel (Cf. Art. 7.2 of this Policy).

6. Prospecting and targeted advertising

Once you have agreed to receive commercial offers from Grandes Alpes Hotel Courchevel, you may, at any time, revoke your choice by using the unsubscribe link, e.g. at the bottom of the email or by sending STOP, as indicated in the event where a SMS was sent to you. If you have agreed to receive newsletters from Grandes Alpes Hotel Courchevel, you may at any time express your wish to no longer receive them, thanks to the unsubscribe link in each of the newsletters.

7. What are your rights and how can you exercise them?

7.1. Your rights over your data

Pursuant to and within the limits of the applicable provisions on the protection of personal data, you have the following rights:

Right of access to your data	You can obtain confirmation from Grandes Alpes Hôtel Courchevel as to whether or not your data is being processed and, where it is, access to all data and information held by Grandes Alpes Hôtel Courchevel.
Right to rectification of your data	You may obtain from the Company, as soon as possible, the rectification of data concerning you that is inaccurate or erroneous. You can also request that your data be completed, if necessary.
Right to erasure of your data	Subject to legal exceptions, you can ask Grandes Alpes Hotel Courchevel, for the erasure of your data, if, for example, you consider that the processing of your data is no longer necessary in relation to the purposes for which it was collected.
Right to object	You can object to your data being used for a specific purpose, provided that you explain the reasons relating to your particular situation. On the other hand, in the event of commercial prospecting, you may object without reason and at any time (see below right to withdraw consent).
Right to restriction of the processing of your data	In the event that you contest the accuracy of the data used by the Data Controller or object to your data being processed, the Data Controller may verify or examine your request for a certain period of time. During this period, you have the option of asking them to stop using your data; however, he will have to keep them. Conversely, if the data controller intends to delete your data, you can ask them, by virtue of this right, to keep the data to exercise a legal right, for example.
Right to withdraw consent	If the processing of your personal data is based on your consent (e.g. sending us our electronic commercial offers), you have the option to withdraw your consent at any time.
Right to give post-mortem instructions	You have the option of defining guidelines for the storage, deletion and disclosure of your data after your death. These guidelines set out how you want your rights over your data to be exercised after your death. You may, at any time, modify or revoke your instructions.

For more information on your rights, you can consult the CNIL website: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.

7.2. Exercising your rights

To exercise any of your rights, send your request to:

dpo@grandesalpes.com
LIEUDIT LE BIOLET, 73120 COURCHEVEL France

All requests must specify, in the subject line, the type of right exercised (exercise of the right of access, opposition, etc.) and be accompanied by any element proving your identity and specifying the address to which the response must be sent.

Grandes Alpes Hotel Courchevel will send you its response within a maximum of one (1) month, from the date of receipt of your request. However, this deadline may be extended by two (2) months due to the complexity and number of applications.

If you believe, after contacting Grandes Alpes Hotel Courchevel, that your data protection rights have not been respected, you can send a complaint to the CNIL, directly on the CNIL website or by post to: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.