1. INTRODUCTION AND DATA CONTROLLER

Château de Trébodénnic, operated by SAS KILIC BROTHERS EUROPE (hereinafter “we”, “us”, or “the Hotel”), attaches great importance to the protection and respect of your privacy. As the Data Controller, we are committed to processing your personal data in strict compliance with the European General Data Protection Regulation (GDPR – Regulation EU 2016/679) and the French Data Protection Act.

2. PERSONAL DATA COLLECTED

We collect and process personal data that you voluntarily provide to us when using our website, making a reservation, or contacting us. This data includes:

• Identity Data: First name, last name, title, date of birth, passport/ID details (collected upon check-in as per local law).
• Contact Data: Email address, phone number, postal address.
• Transaction and Financial Data: Bank details, credit card numbers (processed securely via PCI-DSS compliant third-party payment gateways), billing history.
• Stay and Preference Data: Room preferences, dietary requirements, arrival/departure times, special requests, and any other information you choose to share to enhance your luxury stay.
• Technical and Navigation Data: IP address, browser type, location data, and browsing behavior collected via cookies (see our Cookie Policy).

3. LEGAL BASIS AND PURPOSES OF PROCESSING

Your personal data is processed for the following purposes and under the following legal bases:

• Performance of a Contract: To manage your reservations, facilitate your stay, process payments, and provide customer support.
• Legal Obligation: To comply with French accounting, tax, and police registration requirements (e.g., maintaining billing records and completing the foreign national police fiche).
• Legitimate Interest: To improve our services, ensure the security of our website, and conduct statistical analysis.
• Consent: To send you newsletters, promotional offers, and personalized marketing communications. You may withdraw this consent at any time.

4. DATA RETENTION PERIODS

We retain your personal data only for the time necessary for the purposes for which it was collected, in compliance with legal requirements:

• Customer and Reservation Data: Kept for 3 years after the end of the commercial relationship for marketing purposes.
• Invoicing and Accounting Data: Kept for 10 years in accordance with French commercial and tax laws.
• Credit Card Data: Kept only until the completion of the transaction, or up to the end of your stay for incidentals, unless explicitly saved with your consent.

5. SHARING OF PERSONAL DATA

Your data is treated confidentially and is only shared with strictly authorized third parties who assist us in operating our hotel, including:

• Booking engine providers and property management systems (PMS).
• Secure payment processing gateways.
• IT and web hosting service providers.
• Accounting and legal advisors.

We do not sell, rent, or transfer your personal data to third parties for commercial purposes.

6. YOUR RIGHTS REGARDING YOUR DATA

Under the GDPR, you have the following rights concerning your personal data:

• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): To request the deletion of your data under certain conditions.
• Right to Restriction of Processing: To block the processing of your data.
• Right to Data Portability: To receive your data in a structured, commonly used format.
• Right to Object: To object to the processing of your data, particularly for direct marketing.

To exercise these rights, please contact our Data Protection Officer (DPO) / Management by mail at:
SAS KILIC BROTHERS EUROPE – Château de Trébodénnic, 3 Rue Eugène Jaouen, 29260 Ploudaniel, France, or by email at: info@chateautrebodennic.com

If you feel that your rights have not been respected after contacting us, you have the right to file a complaint with the French supervisory authority, the CNIL, at www.cnil.fr.

7. VIDEO SURVEILLANCE

For the safety of our guests, staff, and property, Château de Trébodénnic operates a closed-circuit television (CCTV) system in the public areas of the hotel. These recordings are kept for a maximum of 30 days, in strict compliance with French regulations, and are only accessible to authorized security personnel or law enforcement agencies upon formal request.

8. INTERNATIONAL DATA TRANSFERS

While we prioritize processing your data within the European Economic Area (EEA), some of our technical service providers (such as hosting infrastructure or booking engines) may process data outside the EEA. In such cases, we ensure that your data is protected by strict legal safeguards, including the implementation of the European Commission’s Standard Contractual Clauses (SCCs), to guarantee a level of data protection fully equivalent to GDPR standards.