
Legal information
Privacy Policy
UK GDPR & EU GDPR · Personal Data
La Palme d'Azur Residence is committed to protecting your privacy. This policy explains which personal data we process, for what purpose, on what legal basis, and what rights you hold.
1. Data Controller
The data controller is La Palme d'Azur Residence, 6 rue de la Verrerie, 06400 Cannes, France. For any question regarding your personal data, please contact us via our contact form or call +33 (0)4 89 41 29 30.
2. Data We Collect
Depending on your relationship with us, we may collect:
- Identity and contact data: surname, first name, e-mail address, telephone number, postal address.
- Booking data: stay dates, apartment booked, number of guests, special requests.
- Payment data: processed securely by our payment service provider; we do not store your card numbers.
- Browsing data: technical information collected via cookies (see our cookie policy).
- Automatically collected data: when you browse our website, certain technical information is collected automatically (IP address, device and browser type, pages viewed, date and time of visit). This is used for website security and to compile aggregated statistics.
- Hotel registration data: on arrival, French law may require non-French guests to complete an individual registration form (date of birth, nationality, identity document). This information is used solely for that purpose.
3. Purposes, Uses and Legal Bases
We use your data to:
- manage your bookings and your stay (performance of contract);
- respond to your enquiries via the contact form, by e-mail or by telephone (legitimate interest);
- follow up with you when an online booking has not been completed, via a one-off reminder if you have provided your e-mail address (legitimate interest);
- invite you, after your stay, to share a review of your experience (legitimate interest);
- ensure website security and to prevent and detect fraud (legitimate interest);
- handle any disputes or complaints (legitimate interest and legal obligation);
- fulfil our legal and accounting obligations (legal obligation);
- send you, with your consent, information about the residence and our offers (consent).
These processing activities rely on the legal bases set out in the UK GDPR and EU GDPR: performance of contract, our legitimate interest, compliance with our legal obligations, or your consent, as indicated for each purpose. Where consent is required, you may withdraw it at any time.
4. Recipients of Your Data
Your data is shared with the residence's internal teams and, where applicable, with our technical service providers (hosting, payment, booking system, messaging), who act on our instructions and in compliance with the UK GDPR and EU GDPR. Your data is never sold to third parties.
Transfers outside the European Union: your data is hosted and processed primarily within the European Union. Where a service provider may process certain data outside the EU/EEA (for example an international payment provider), that transfer is subject to appropriate safeguards in accordance with applicable data protection law, such as the European Commission's standard contractual clauses.
5. Retention Periods
We retain your data for as long as necessary for the purposes described above, and then in accordance with applicable statutory retention periods (in particular for accounting and tax purposes). Data relating to a simple contact enquiry is retained for the time required to handle your request. Individual hotel registration forms are kept for the period prescribed by applicable regulations, then destroyed.
6. Your Rights
In accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and applicable data protection law, you have the right of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw your consent at any time.
To exercise these rights, contact us via our contact form or by telephone on +33 (0)4 89 41 29 30. You also have the right to lodge a complaint with the relevant supervisory authority: the Information Commissioner's Office in the UK (ICO — ico.org.uk) or the French data protection authority (CNIL — www.cnil.fr).
7. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
8. Contact, Questions and Complaints
For any question relating to this privacy policy, please contact us via our contact form or by post to the residence's address. If you consider that your rights have not been respected, you may submit a complaint to us by the same means — we endeavour to respond within a reasonable time — or contact the competent supervisory authority directly (ICO or CNIL).
9. Changes to This Policy
We may amend this privacy policy to reflect changes to our services or applicable regulations. Any amendment will be published on this page with its effective date; in the event of a significant change, we will notify you by an appropriate means.