PRIVACY POLICY

Who are we?

The company TROPICAL HOTEL & BEACH registered in the RCS of Basse-Terre under the number 821 773 553, whose head office is located at Saint-Jean Tropical Hôtel 97133 Saint-Barthélemy, is responsible for processing personal data for the purposes described below.

Data Protection Officer369° Hotels & Maisons has appointed a Data Protection Officer (DPO) who can be contacted:by email at dpo@369degres.compar by post at the following address: 369 - Parc d'activités GAROSUD - 130 rue de la Jasse Maurin - Immeuble le NEOS II - 34070 Montpellier.

Purposes and Legal Basis :

The table below summarizes the purposes for which TROPICAL HOTEL & BEACH processes your personal data:

Purposes of the processing

Legal basis

Commercial prospecting Our legitimate interest or your consent if required by regulation

Our legitimate interest Management of questions and contact requests

Our legitimate interest Tracking of interests Our legitimate interest or your consent if required by regulation Recruitment The performance of pre-contractual obligations and our legitimate interest

Supplier management

Fulfillment of contractual obligations and our legitimate interest Supplier evaluation Compliance with regulatory obligations (Sapin 2) Litigation management Our legitimate interest and the fulfillment of our contractual relationship

Management of customer reviews and satisfaction surveys

Our legitimate interest Categories of data collected and sources: TROPICAL HOTEL & BEACH processes the following categories of personal data: identification data (surnames, first names, dates of birth, etc.), contact data (email addresses, postal addresses, telephone numbers, etc.), data relating to professional life (company name, position in the company, etc.) as well as data relating to the diplomas and experience of job applicants.

The information collected by TROPICAL HOTEL & BEACH and which is essential to meet the above-mentioned purposes is identified by an asterisk on the collection forms. If you do not fill in these mandatory fields TROPICAL HOTEL & BEACH may not be able to provide the service concerned.

Your data is collected directly by TROPICAL HOTEL & BEACH or may have been transmitted to us by our business partners (in particular, companies in which TROPICAL HOTEL & BEACH directly or indirectly holds a majority stake).

If certain Third Parties are located in countries whose regulations do not necessarily offer the same level of protection as those of the European Union Member States, TROPICAL HOTEL & BEACH will ensure that these transfers are carried out in accordance with the provisions imposed by French regulations (such as the implementation of contractual clauses adopted by the European Commission or adherence to the PRIVACY SHIELD in the USA). You may contact our DPO to obtain further information on these matters and a copy of the relevant documents.

Retention period: The personal data collected are kept by TROPICAL HOTEL & BEACH in accordance with the regulations relating to data protection and according to the legal requirements. For example: data relating to commercial prospecting are kept for three years from the last contact; data relating to the management of contracts are kept for the duration of the contractual relationship increased by the statute of limitations (in general, the statute of limitations is 5 years); data relating to the management of recruitment are kept for 24 months.

Your rights: You have rights in accordance with the applicable regulations: You have the right to request access to and correction of your personal data.

You have the right to request the restriction of the processing of your personal data, (i) if you contest the accuracy of your data during the period of time required for us to verify the accuracy of your data, (ii) if you consider that we are processing your data unlawfully and you demand a restriction of its use rather than its deletion (iii) if we no longer need your data for the above-mentioned purposes but it is still necessary for the establishment, exercise or defence of your legal rights, (iv) if you exercise your right to object to the processing of your data for the duration of the verification of whether our legitimate reasons prevail over yours.

You have the right to request the deletion of your personal data. If you request the deletion of your data, TROPICAL HOTEL & BEACH may nevertheless keep it in an intermediate archive for the time necessary to meet its legal, accounting and tax obligations.

You have the right to ask to exercise your right to object to the processing used for reasons relating to your particular situation.

You also have the right to object to commercial prospecting, without having to provide a reason.

You have the right not to be subject to a decision based exclusively on automated processing and producing legal effects concerning you or significantly affecting you.

You have the right to exercise your right to data portability, which gives you the right to obtain a copy of your data or to transfer it to a third party in a structured and commonly used machine-readable format.

You have the right to withdraw your consent to the processing of your data at any time, where the processing requires your consent.

You also have the right to formulate directives concerning the conservation, deletion and communication of your personal data post-mortem.

These rights can be exercised at any time by email at dpo@369degres.com and by post at the following address: 369 - Parc d'activités GAROSUD - 130 rue de la Jasse Maurin - Immeuble le NEOS II - 34070 Montpellier.

You may also - if you wish - file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL). Further information is available on its website www.cnil.fr.