Privacy Policy

Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how SAS DU MONT CINDRE collects and uses the personal data of users of the https://lermitage-hotel.diadabox.shop/fr/ website in connection with the sale of gift sets, gift vouchers, and gift cards.

1. Data Controller

The data controller is:

 SAS DU MONT CINDRE

Chemin de l’ermitage, 69450, Saint-Cyr-au-Mont-d’Or

Lyon Trade and Companies Register (RCS Lyon): 495 368 557

Email: contact@lermitage-hotel.com

Phone: 04 72 19 69 69

No DPO has been designated

2. Data Collected

In connection with the use of the website and orders, SAS DU MONT CINDRE may collect the following data:

• last name, first name, title;

• email address and phone number;

• billing and/or shipping address;

• order information;

• information regarding the gift voucher recipient;

• any personalized message entered by the customer;

• information required for secure payment;

• browsing data and cookies.

SAS DU MONT CINDRE does not store complete banking information. Payment is processed securely by Stripe.

3. Purposes of Processing

Personal data is used to:

• process orders for gift vouchers, gift cards, and gift sets;

• process payment, billing, and delivery;

• send order confirmations;

• manage customer service, complaints, and cancellation requests;

• managing the use of gift vouchers by recipients;

• secure transactions and prevent fraud;

• comply with legal and accounting obligations;

• improve the website’s functionality;

• Send newsletters or promotional offers.

4. Legal Basis

Data processing is based, as applicable, on:

• performance of the contract we have with you;

• compliance with legal obligations;

• the legitimate interests of SAS DU MONT CINDRE, particularly regarding security and fraud prevention;

• the user’s consent, particularly regarding certain cookies or marketing communications.

5. Recipients of the Data

The data is intended for the internal departments of SAS DU MONT CINDRE authorized to process it.

It may also be shared with service providers acting on behalf of SAS DU MONT CINDRE, including:

• Diadabox, for managing the online store;

• Stripe, for secure payments;

• delivery service providers;

• technical and hosting service providers;

• advisors, certified public accountants, or competent authorities when required by law;

• O2switch, for hosting

6. Retention Period

Data is retained only for as long as necessary to fulfill the purposes for which it was collected.

For example:

• Order data is retained for the time necessary to process the order, then archived in accordance with legal time limits;

• invoices and accounting documents are retained for 10 years;

• marketing data is retained until consent is withdrawn or for a maximum of 3 years after the last contact;

• Cookies are retained for the time necessary to process them in accordance with CNIL recommendations.

7. Security

 SAS DU MONT CINDRE We implement technical and organizational measures designed to protect personal data against loss, unauthorized access, alteration, or disclosure.

In particular, the website uses a secure connection, and payments are processed via a secure interface.

8. Cookies

The website may use cookies necessary for its operation, including for the shopping cart, order processing, user session, and secure payment.

Audience measurement or marketing cookies may also be used, subject to the user’s consent when required.

You can accept, reject, or configure these cookies via our cookie banner.

9. User Rights

In accordance with applicable regulations, each user has the following rights:

• right of access;

• the right to rectification;

• the right to erasure;

• right to object;

• right to restriction of processing;

• right to data portability;

• right to withdraw consent.

To exercise these rights, users may contact SAS DU MONT CINDRE at the following address:

contact@lermitage-hotel.com

Proof of identity may be requested if there is reasonable doubt regarding the requester’s identity.

10. Filing a Complaint with the CNIL

If the user believes that their rights are not being respected, they may file a complaint with the CNIL:

Commission Nationale de l’Informatique et des Libertés

3 Place de Fontenoy – TSA 80715

75334 Paris Cedex 07

Website: www.cnil.fr

11. Changes to the Policy

 SAS DU MONT CINDRE reserves the right to amend this privacy policy at any time to adapt it to legal, regulatory, or technical changes.

The applicable version is the one published on the website on the date of access.