We take your data protection very seriously and only gather the information we need to give you the best possible service, as well as the best experience on our website. We DO NOT give any data to third parties for marketing purposes. We do not sell data. We do not share data unless there are lawful grounds for doing so.
Who we are
Chalet Floralie is a luxury ski chalet business. The owner is Ski Floralie Limited (Ski Floralie) with registered office at 30 Orange Street, London, WC2H 7HF (company registration number 064742929). If you have any questions about this policy you can contact the General Manager, Suze Drew by email to: firstname.lastname@example.org or phone +44 7971 676 192. Our website address is: skifloralie.com.
Ski Floralie is the data controller for the purposes of the European General Data Protection Regulation (GDPR) and data protection legislation from time to time in force and is responsible for your personal data.
What personal data we collect and what we do with it
We will collect personal information that you provide to us if you choose to: make a reservation with us, fill out a contact form on our website, fill out a response card in the chalet, subscribe to mailing lists, apply for a job with us, deal with us with a view to providing services to us.
The type of information we collect includes your:
- Name, address, contact information including phone and email.
- Information regarding family and travel companion(s) such as names, emergency contacts and special service needs, which may include special category information (such as any disability or medical or dietary restrictions (which may also disclose your religious beliefs), passport information, dates of birth, insurance information, visa information, nationality and country of residence.
- Information relevant to customer surveys and feedback.
- We do not store financially sensitive information such as credit card numbers, bank details or security numbers. Payments to us are made by direct bank transfer.
- If you apply for a job with us (for example sending us your CV or application form or completing an application via a job board) the personal data contained in your application will be collected by us and will be processed for the purposes of managing our recruitment related activities, which include setting up and conducting interviews, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes. We may also keep records of references received from third parties and of any other communication or correspondence between you and us.
We will automatically collect some technical information when you use our website (see below).
How do we use your personal information?
We will use your personal data to:
- provide you with services you request from us and to otherwise enter into and perform contracts with you, including providing customer support;
- send you travel related documentation such as booking confirmations;
- maintain contact with you during the booking process;
- send you newsletters and/or marketing information if you make an enquiry or booking with us or if you consent;
- maintain our records and audit our business;
- comply with regulatory requirements and requests for information received from regulators and competent authorities;
- train our staff and improve our business, products and services;
- retain factual information which can be relevant to resolving disputes;
- prevent and to assist in the detection of crime.
Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data.
- We will rely on contract if we are negotiating or have entered into an agreement with you or your organisation or any other contract to provide services to you or to receive services from you or your organisation.
- We will rely on legal obligation if we are legally required to hold information about you to fulfil our legal obligations – for example where we are legally required to hold passport information and to confirm your right to work (where you are offered employment with us).
- We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required. You can withdraw consent at any time.
- In order to provide our services we may also need to process sensitive personal data. This is likely to be limited to information relating to your health for the purpose of providing special services you request e.g. managing dietary requirements. We will process sensitive personal data about you: when you have explicitly consented to us processing the sensitive data for a specific purpose (you can withdraw consent at any time) or where it is necessary to protect your vital interests and you are unable to give us your consent such as in an emergency situation to a third party provider of medical services where the consent you have given us does not cover such sharing.
- With respect to marketing, if you have enquired about our chalet, or have booked or travelled with us (and you have not opted out) – you will receive promotional mailings and e-mails from us.
- You have the right to opt out of receiving marketing materials from us in any circumstances and at any time by contacting us email@example.com.
- Please note that where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a product or service you have with us.
Legal basis for collection and processing of your personal data
As a chalet operator we are exercising a legitimate interest in collecting and retaining the personal data of our clients and suppliers so that we can organise your stay and provide you with the services promised or receive services from you. We also have a legitimate business interest in sending relevant and useful information about our chalet to clients and potential clients in order to develop our products and services and grow our business.
With respect to managing our recruitment process we have a legitimate business interest in solicitation, evaluation, and selection of applicants for employment.
Cookies – What technical data we collect and why we collect it
In order to keep our website well optimised for users, we collect technical data. This may include third party plugins collecting technical data in order to keep their services running optimally. We use Google Analytics in order to optimise user experience on our website. This can include technical data such as the pages you visit, time spend on each page, your general location, browser, etc. Google has its own GDPR information which you can view on Google’s website. Our Google Analytics data is stored (on Google Analytics) indefinitely. You can choose not to be tracked by changing your browser settings, for example, going ‘incognito’ or ‘private’, or amending your Cookie settings. To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
See our full list of Cookies in use on this website here.
Our website is SSL secure (https).
How we store your data & how long we store your data
We treat all data with the highest degree of respect and confidentiality. We are committed to ensuring that information we collect from you is secure. In order to prevent unauthorized access or disclosure we have put in place physical, electronic and managerial procedures to safeguard and secure the information we collect on and offline.
It is important to be aware that unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us over the internet and any transmission is at your own risk.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. All information you provide to us is stored on servers in the UK. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions.
Compatible with the GDPR we will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. Ski Floralie is required to retain information in accordance with the law, such as information needed for income tax and audit purposes. How long certain kinds of personal data should be kept may also be governed by specific business-sector requirements and agreed practices. Personal data may be held in addition to these periods depending on individual business needs. Please contact us if you would like further details of our retention periods.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Who we share your data with
- We may disclose your personal data to third party companies and individuals we engage including to:
- Delivery companies such as the couriers and Royal Mail.
- Ski guides/schools, private jet/helicopter companies, nannies and transfer companies.
- Our professional advisors including lawyers, bankers, accountants, auditors and our insurers (including to enforce our rights).
- Prospective purchasers and purchasers of our business or assets for the purpose of considering the prospective sale of our business or assets and for carrying on the business.
- Third party payment platforms and financial institutions to facilitate your purchases (including for fraud detection and prevention purposes) .
- Facilitate our site and services.
- Provide certain functions on our behalf in connection with the operation of our business.
- Perform site-related services.
When we share personal data with other organisations supplying services to Ski Floralie we require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Your details may be passed to countries outside of the UK, the European Union and/or the European Economic Area in order to process and arrange for the products and services you request where this is necessary for us to enter into and perform our contract with you.
What rights you have over your data
Under the GDPR you have the right to:
- Request access to and correct the personal information that we hold about you.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. To stop receiving marketing communications from us or change your preferences please contact us on firstname.lastname@example.org.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party in certain formats, if practicable.
- Withdraw consent to processing at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
- Make a complaint to a supervisory body which in the United Kingdom is the Information Commissioner’s Office. The ICO can be contacted through this link: https://ico.org.uk/concerns/