Bounty Lodge Personal Data Protection and Privacy Policy

Updated on February 5, 2023

Generalities

BOUNTY LODGE takes all necessary precautions to preserve the security and confidentiality of the personal data it processes, as the data controller or as a subcontractor of its customers’ personal data.

BOUNTY LODGE uses personal data:

When it has obtained permission to do so,
Within the framework of drafting or executing a contract.

The original French language version is the only contractual reference for this privacy policy.

Data Processing by BOUNTY LODGE as the Data Controller

As the data controller, BOUNTY LODGE complies with the local regulations applicable to the protection of personal data, particularly the provisions of the “Information Technology and Freedoms” law of January 6, 1978, as amended, and the General Data Protection Regulation (Regulation UE 2016/679) or “GDPR”.

Data Processing by BOUNTY LODGE as a Sub-Processor

Similarly, as a sub-processor for its clients, BOUNTY LODGE has completed all necessary formalities, including in relation to the European Regulation 2016/679 of April 27, 2016 on the protection of natural persons with regard to the Processing of Personal Data (General Data Protection Regulation, often referred to as GDPR).

BOUNTY LODGE endeavors to fulfill its obligations and respect the rights of individuals whenever it processes personal data.

What are BOUNTY LODGE’s commitments to data protection?

BOUNTY LODGE is committed to ensuring an optimal level of protection for the personal data of its clients, prospects, users of its website, and any other individuals whose personal data it processes.

BOUNTY LODGE is committed to complying with the applicable regulations for all personal data processing it implements. In particular, BOUNTY LODGE is committed, in particular, to respecting the following principles:

Your personal data is processed in a lawful, fair and transparent manner (lawfulness, fairness, transparency).
Your personal data is collected for specified, explicit and legitimate purposes, and is not processed subsequently in a manner incompatible with these purposes (purpose limitation).
Your personal data is kept in an adequate, relevant and limited manner to what is necessary with regard to the purposes for which it is processed (data minimization).
Your personal data is accurate, kept up-to-date and all reasonable measures are taken to ensure that inaccurate data, with regard to the purposes for which it is processed, are erased or rectified without delay (accuracy).

BOUNTY LODGE implements appropriate technical and organizational measures to ensure a security level that is adapted to the risk inherent in its data processing operations, meet regulatory requirements and protect the rights and data of individuals from the design of data processing operations.

Furthermore, BOUNTY LODGE contractually imposes the same level of data protection to its sub-processors (providers, suppliers, etc.).

Finally, BOUNTY LODGE is committed to respecting any other principle imposed by the applicable regulations on data protection, and more specifically regarding the rights granted to individuals, the duration of data retention.

BOUNTY LODGE does not intend to voluntarily collect information from children. We do not target children with our services.

What is the purpose of the data that may be collected by BOUNTY LODGE?

1- Data collection methods

As part of our customer relationships, we may collect your personal data through various means, including as part of our contractual and pre-contractual relationships. You may also provide us with your personal data on our website when you complete various forms, when you apply, or when you establish contact with BOUNTY LODGE or when you otherwise provide us with your personal data.

2- Processing purposes and legal bases

Your data is primarily used for the provision of specific services or services: accommodation booking, prospecting, animation, commercial information, satisfaction surveys, recruitment.

In addition to cases where your consent has been obtained (such as to communicate personalized offers), the processing of your data for the different purposes mentioned above is necessary in particular:

To ensure the execution of the service contract,
To comply with a legal obligation,
For the legitimate interests pursued by BOUNTY LODGE (including improving customer service).

How long are your data stored?

BOUNTY LODGE is committed to keeping your personal data for a period not exceeding the time necessary for the purposes for which they are processed, increased by a 5-year retention period, unless a longer retention period is authorized or imposed by a legal or regulatory provision;

These retention periods are defined based on the processing purposes implemented by BOUNTY LODGE and take into account, in particular, the legal provisions applicable requiring a specific retention period for certain categories of data, any applicable prescription deadlines, and the recommendations of the CNIL regarding certain categories of data processing.

Who is likely to access your personal data?

Access to personal data will be strictly limited to employees of the data controller, authorized to process the data due to their functions.

The information collected may be disclosed to third parties related to the company by contract and located within the EU and outside of the EU, for the performance of subcontracted tasks, including the use of accommodations, or for communication activity, without your permission being necessary. In the event of the recruitment of subsequent sub-contractors, these subsequent sub-contractors are required to comply with GDPR obligations. It is the responsibility of the initial sub-contractor to ensure that the subsequent sub-contractor presents the same sufficient guarantees with regard to the implementation of appropriate technical and organizational measures so that the processing complies with the requirements of the European data protection regulation.

Please note that in this context, BOUNTY LODGE requires its service providers to implement strict confidentiality and data protection measures.

How to exercise your rights?

The concerned person can exercise their rights as follows:

Right to information – this means you must know if your personal data is being processed; what data is collected, where it comes from, why and by whom it is processed.
Right of access – this means you have the right to request access to your data and receive a copy of your collected personal data.
Right to rectification – you have the right to request the rectification or erasure of your inaccurate or incomplete personal data.
Right to erasure – under certain circumstances, you can request your personal data to be erased from our records.
Right to restrict processing – under certain conditions, you have the right to restrict the processing of your personal data.
Right to object to processing – in certain cases, you have the right to object to the processing of your personal data, for example in the case of direct marketing.
Right to object to automated processing – you have the right to object to automated processing, including profiling, and not to be subject to a decision based solely on automated processing. You can exercise this right whenever there is a profiling result producing legal effects concerning or significantly affecting you.
Right to data portability – you have the right to receive your personal data in a machine-readable format or, if feasible, as a direct transfer from one processor to another.
Right to make a complaint – if we refuse your request under your access rights, we will provide you with a reason why it is not possible. If you are not satisfied with how your request was handled, you can make a complaint to the Commission Nationale de l’Informatique et des Libertés (CNIL).
Right to withdraw your consent – you have the right to withdraw any consent given for the processing of your personal data.

Additionally, any minor at the time of collecting their personal data can have it erased as soon as possible.

You can exercise your rights by addressing the data processing representative: the legal representative of BOUNTY LODGE, at the BOUNTY LODGE postal address: BP 41669, 98713 PAPEETE, POLYNESIE FRANCAISE or by email at the following address: hello@bounty-lodge.com, attaching a valid proof of identity.

Cookies

In order to constantly improve the quality of services offered on the website and their suitability with your expectations, BOUNTY LODGE may use “cookies”, text files used to identify your device when you connect to one of our services.

The deposit of cookies or trackers in your device (computer, tablet, smartphone, etc.) allows BOUNTY LODGE to collect information and personal data. Depending on your device settings choice, cookies allow in particular:

To use the main features of the BOUNTY LODGE website,
To book a room at BOUNTY LODGE,
To establish statistics (location data).

Choosing to disable cookies may prevent you from using certain functions. At any time, you have the option to adjust your cookie settings.

Depending on the cookie usage settings, some trackers may be sent or read by third parties during your navigation on the BOUNTY LODGE website.

Cookies issued on the website by third parties:

Due to third-party applications integrated into our site, some cookies may be sent by other third parties. In this case, the emission and use of these cookies are subject to the privacy policies of these third parties.

For example, we use Google Analytics which is a website analysis service. Google has its own privacy policy that you can consult here. If you wish to disable tracking by Google Analytics, please see the Google Analytics deactivation page.

You can remove the cookies stored on your computer via the settings on your computer. For more information on cookies, you can consult the CNIL website at www.cnil.fr.”

Security

BOUNTY LODGE takes all necessary organizational and technical measures to protect personal data.

For data protection, BOUNTY LODGE has selected the Infomaniak host to ensure the security of the infrastructure and information systems.

Access to personal data by BOUNTY LODGE personnel is limited to those who need it for their tasks.

We use secure protocols for communication and data transfer (such as HTTPS). We monitor our systems for potential vulnerabilities and attacks. Our computer systems are protected (Firewall, antivirus) and regularly updated (security updates, system, software, etc.). Regular maintenance operations are in place to anticipate potential problems.

We are doing everything possible to comply with the state of the art in security. However, given that these rules are constantly evolving and that security breaches can occur unexpectedly, we cannot guarantee users against unauthorized access to data.

However, we are committed to informing the competent authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything reasonably possible to prevent security breaches and assist authorities in case of breach.

Contact Information

Any questions or requests regarding personal data or this Privacy Policy can be addressed at any time to:

BOUNTY LODGE Attn: Management BP 41669 PAPEETE – 98713 TAHITI – French Polynesia

+689 87 322 485

hello@bounty-lodge.com

Modifications

BOUNTY LODGE reserves the right to modify this Privacy Policy. Any modification will be systematically published on this website before it takes effect. It is therefore strongly recommended to regularly consult this Privacy Policy so that you are always aware of these modifications.