HOTEL & RESTAURANT
LES TROIS VOILES
Privacy policy
The purpose of this Privacy Policy is to inform visitors and users of the website www.lestroisvoiles.com (hereinafter “the Site”) about how TRIBORD (Les Trois Voiles) collects, uses, stores, and protects their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter “GDPR”) and French Act No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended (hereinafter the “Data Protection Act”).
1. Data Controller
The data controller responsible for processing personal data collected via the Site is:
-
Company: TRIBORD (Les Trois Voiles)
-
Address: Port Napoléon — Rue Canal Saint Antoine l’Ermite — 13230 Port-Saint-Louis-du-Rhône
-
Telephone: +33 (0)4 42 48 84 60
-
Email: contact@lestroisvoiles.com
No Data Protection Officer (DPO) has been appointed to date. For any questions regarding the protection of your personal data or to exercise your rights, you may contact the Establishment at the email address provided above.
2. Data Collected and Purposes of Processing
2.1 Website Browsing (Cookies and Audience Measurement)
When you browse the Site, data is collected automatically via analytics and audience measurement tools, subject to your consent:
-
Google Analytics 4 (GA4): audience measurement and analysis of browsing behaviour (pages visited, duration, traffic source). Google Analytics may involve data transfers to the United States (see Article 6 below).
-
Google Tag Manager (GTM): tracking tag management tool. GTM itself does not collect personal data but may trigger other measurement tools.
-
Google Search Console: tool for monitoring site performance in Google search results. It does not directly collect personal data from visitors.
-
Google PageSpeed Insights: technical site performance analysis tool. It does not collect personal data from visitors.
Legal basis: your consent (Article 6.1.a of the GDPR), obtained via the cookie consent management tool on the Site.
2.2 Contact Form
The Site features a general contact form in which you can enter the following details: name, email address, message.
This data is collected for the purpose of processing your request and responding to you. It is managed directly via WordPress (Elementor Forms plugin) and is accessible only to the Establishment’s team.
Legal basis: the Establishment’s legitimate interest in processing requests for information (Article 6.1.f of the GDPR).
2.3 Private Hire Request Form
The Site offers a private hire request form allowing the collection of the following details: surname, first name, email address, telephone number, estimated number of guests, date, time, message.
This data is collected for the purpose of reviewing and processing your request for private venue hire of the Establishment. It is managed directly via WordPress (Elementor Forms plugin).
Legal basis: pre-contractual measures taken at the request of the data subject (Article 6.1.b of the GDPR).
2.4 Hotel Bookings (via Mews)
Room bookings are made via the Mews platform integrated into the Site. In this context, Mews Systems B.V. (a company incorporated under Dutch law, Wibautstraat 137D, 1097DN Amsterdam, Netherlands) collects and processes your data as a data processor on behalf of the Establishment. The data processed includes, in particular: surname, first name, email address, telephone number, payment card details (for payment or booking guarantee).
For further information on Mews’ processing practices, you can view its privacy policy at: https://www.mews.com/en/legal/privacy-policy
Legal basis: performance of the booking contract (Article 6.1.b of the GDPR).
2.5 Restaurant Bookings (via TheFork)
Table bookings are made via TheFork platform, whose widget is integrated into the Site. TheFork collects and processes the data you enter as part of the booking (surname, first name, email, telephone, number of guests, additional information). For further information, you can view TheFork’s privacy policy at: https://www.thefork.fr/legal
Legal basis: performance of the booking contract (Article 6.1.b of the GDPR).
2.6 Room Access Management (via Hotek / GuestKey)
The Establishment uses the Hotek room access management system (https://www.hotek.nl/), interfaced with the GuestKey solution (https://connect.guestkey.nl/), to manage electronic room opening. This system may process certain guest identification data (name, room number, stay dates).
Legal basis: performance of the accommodation contract (Article 6.1.b of the GDPR).
2.7 Emailing (Mailchimp — Future Use)
The Port Adhoc Group uses Mailchimp for its email communications. As of the date this policy goes online, the Les Trois Voiles website is not yet connected to this tool. Should a newsletter or marketing communications be introduced, this policy will be updated and your prior consent will be obtained in accordance with applicable regulations.
Mailchimp is published by The Rocket Science Group LLC, a US company (see Article 6 regarding transfers outside the EU).
3. Retention Periods
Personal data collected is stored for the following durations:
-
Data from contact and private hire forms: 3 years from the date of last contact, in accordance with CNIL recommendations for prospect and customer data.
-
Hotel and restaurant booking data: 3 years from the end of the commercial relationship for customer data, and 10 years for data kept for accounting purposes (pursuant to Article L.123-22 of the French Commercial Code — Code de commerce).
-
Browsing data and analytical cookies (GA4): 13 months from the placement of the cookie, in accordance with CNIL recommendations.
-
Access management data (Hotek / GuestKey): duration of stay, followed by deletion or anonymisation within the timeframes specified by the service provider.
At the end of these retention periods, data is erased or anonymised.
4. Data Recipients and Processors
Personal data collected via the Site may be transmitted or made accessible to the following recipients:
-
The internal team of Les Trois Voiles Establishment (authorised personnel);
-
Port Adhoc Group, in its capacity as parent company;
-
Mews Systems B.V. (data processor — hotel booking management);
-
TheFork (data processor — restaurant booking management);
-
Hotek / GuestKey (data processor — room access management);
-
Google LLC (data processor — analytics tools: GA4, GTM, Search Console, PageSpeed Insights);
-
Mailchimp / The Rocket Science Group LLC (data processor — emailing, future use);
-
Vultr Holdings, LLC (data processor — website hosting).
These processors are only authorized to process your data strictly within the framework of the documented instructions provided to them and in compliance with data processing agreements entered into pursuant to Article 28 of the GDPR.
Apart from the cases provided for above, your personal data will never be sold, rented, or transferred to third parties, unless legally required to do so.
5. Your Rights
In accordance with the GDPR and the Data Protection Act, you have the following rights regarding your personal data:
-
Right of access (Article 15 GDPR): to obtain confirmation that your data is being processed and obtain a copy thereof;
-
Right to rectification (Article 16 GDPR): to have inaccurate or incomplete data corrected;
-
Right to erasure (Article 17 GDPR): to request the deletion of your data, within the limits permitted by law;
-
Right to restriction of processing (Article 18 GDPR): to request the temporary suspension of the processing of your data;
-
Right to data portability (Article 20 GDPR): to receive your data in a structured, commonly used, and machine-readable format;
-
Right to object (Article 21 GDPR): to object to the processing of your data based on legitimate interest;
-
Right to withdraw consent (Article 7.3 GDPR): to withdraw your consent at any time for processing based on consent (notably analytical cookies), without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you may send your request to:
-
Email: contact@lestroisvoiles.com
-
Post: TRIBORD (Les Trois Voiles) — Port Napoléon, Rue Canal Saint Antoine l’Ermite, 13230 Port-Saint-Louis-du-Rhône
You may also lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés — CNIL): www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
6. Data Transfers Outside the European Union
Certain tools used by the Site involve transferring personal data outside the European Union (EU) or European Economic Area (EEA), including to:
-
Vultr Holdings, LLC (website host — United States);
-
Google LLC (Google Analytics 4, Tag Manager — United States);
-
Mailchimp / The Rocket Science Group LLC (United States — future use);
-
Mews Systems B.V. (Dutch entity, hence EU, but which may use sub-processors located outside the EEA in accordance with its own privacy policy).
These transfers are governed by appropriate safeguards pursuant to Chapter V of the GDPR, notably:
-
The use of Standard Contractual Clauses (SCCs) adopted by the European Commission (Implementing Decision of 4 June 2021);
-
The EU-US Data Privacy Framework (DPF) for transfers to certified US companies.
You are invited to consult the respective privacy policies of these service providers for further information regarding their data transfer practices.
7. Cookies
A cookie is a small text file placed on your terminal (computer, tablet, smartphone) when visiting the Site. Cookies make it possible to recognise your browser and remember certain information.
The Site uses the following categories of cookies:
-
Strictly necessary cookies: essential for the operation of the Site and booking tools (Mews, TheFork). They do not require your consent.
-
WordPress session cookies;
-
Functional cookies related to Mews and TheFork.
-
-
Analytical cookies: allow for audience measurement and operational improvements to the Site (Google Analytics 4, Google Tag Manager). These cookies are placed only with your consent.
-
Advertising cookies: may be placed by third parties as part of advertising campaigns. These cookies are placed only with your explicit consent.
Upon your first visit to the Site, a cookie consent management banner is displayed. You may modify your cookie preferences at any time via the consent manager available on the Site.
You can also configure your browser to block or delete cookies. For more information: www.cnil.fr/en/cookies-and-other-trackers
8. Data Security
TRIBORD implements appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, destruction, disclosure, or alteration. These measures include, in particular, data encryption in transit (HTTPS/SSL protocol), restriction of access to data solely to authorised personnel, and regular backup procedures.
However, as no system of data transmission or storage is entirely foolproof, TRIBORD cannot guarantee absolute security.
9. Minors
The Site is not intended for persons under 16 years of age. TRIBORD does not knowingly collect personal data relating to minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@lestroisvoiles.com so that we can proceed with its deletion.
10. Changes to the Privacy Policy
This Privacy Policy may be updated at any time, notably in the event of changes to the tools used or evolution of applicable regulations. The effective version is that displayed on the Site on the date of your visit. In the event of material changes, users will be informed via a prominent notice on the Site.
This policy was updated on 19 August 2026.