Privacy policy

PRIVACY POLICY

SAINT-MALO GOLF CLUB's Commitment to the Protection of Personal Data

May 25, 2018, marks the effective date of the General Data Protection Regulation, known as the “GDPR.” The purpose of this regulation is to significantly overhaul and unify Europe’s fundamental legislation on the protection of personal data. To comply with this new regulation, the French Data Protection Act of January 6, 1978, was amended, and its revised version was passed by the National Assembly on May 14, 2018.

Under current regulations, “personal data” is defined as “any information relating to an identified or identifiable natural person.” A person may be identified directly (e.g., last name, first name) or indirectly (e.g., username, phone number, etc.).

"Processing of personal data" means any operation or set of operations performed on personal data, regardless of the method used (collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, etc.).

SAINT-MALO GOLF CLUB has always been committed to building strong, lasting relationships with its customers based on trust. That is why ensuring the security and confidentiality of its customers’ personal data is one of its top priorities.

This policy is designed to help you understand what data we collect, why we collect it, and what we do with it.

Through this policy, SAINT-MALO GOLF CLUB commits to processing the personal data entrusted to it in a transparent, confidential, and secure manner.

Identity and contact information of the data controller

Under the General Data Protection Regulation, a “data controller” is defined as the person who, alone or jointly with others, determines the purposes and means of processing. A “data processor” is the person who processes personal data on behalf of the data controller.

The data controller is SAINT-MALO GOLF CLUB, a single-member limited liability company with a capital of 750,000 euros, whose principal place of business is located in Saint-Yvieux, 35540 LE TRONCHET, registered with the Saint-Malo Trade and Companies Register under number 338 684 277, Intra-Community VAT number: FR56338684277. SAINT-MALO GOLF CLUB is represented by Mr. Serge RAULIC, its Managing Director.

Data Collected

When you browse our website or book a stay, a treatment, or any other service at one of our facilities, we may ask you, as a customer, to provide certain personal information.

All data regarding users or customers is collected directly from them.

The personal data we may collect includes the following:

Booking a Stay or Service
When you book a stay, a treatment, or any other service (such as fitness classes, green fees, etc.) at one of our properties, we will ask you for your contact information (last name, first name, mailing address, email address, phone number, title, etc.), certain personal information (date of birth, nationality, etc.), and your credit card number for transaction and booking purposes.

Opening a Customer/Subscriber Account
When you create your customer or subscriber account, we collect your last name, first name, mailing address, email address, and date of birth.

Login When you log in to your customer/subscriber account, we collect your last name, first name, login information, usage data, and location data.

Browsing the
Website When you browse our website, information may be stored on or read from your device. The information collected allows us to track the volume, type, and pattern of traffic on this site in order to improve its design and layout. It also enables us to enhance your customer experience by sending you personalized offers tailored to your needs.

Payment Remote credit card payments are made by providing your credit card number, expiration date, and security code directly to the payment processors. These processors use 2048-bit SSL v3 (Secure Socket Layer) encryption technology, which secures all the information you enter by encrypting it. The payment solution is also certified by Visa and Mastercard under the international PCI DSS security standard to ensure the security and confidentiality of payment data. SAINT-MALO GOLF CLUB never has access to confidential information regarding your payment method.
In order for the bank to process your online payment, we send it billing information (last name, first name, address, email, phone number), shipping information (last name, first name, address), and order details (order number, total amount, items purchased with quantities and prices).

Purposes of Data Processing

We collect your personal data for the following purposes:

• Manage requests for reservations for stays and green fees.
• Manage your online purchases of gift cards, gift sets, and more…
• Manage your stay at our facility (track consumption, manage room access, etc.).
• Improving our services, including:
  • Tailor our products and services to best meet your needs.
  • To personalize our offers and communications for you.
  • To keep you informed about special offers and any new stays or services available at our Group's properties.
  • To allow you to take advantage of our loyalty program.
  • Conduct optional satisfaction surveys and prepare reports and analyses of the responses we receive to questionnaires and customer feedback on our services, in order to improve our services
  • Handle any complaints related to our trips and services.
• Managing our relationship with our guests before, during, and after their stay:
  • To send you newsletters or contact you by phone.
  • Process requests to unsubscribe from newsletters.
  • Implement the right to object.
• Comply with local laws (for example, retention of accounting records).
• To secure and improve your experience on our websites, including:
  • Improve navigation.
  • Ensure security and prevent fraud.

The legal basis for the collection of your personal data is:

• The performance of a contract to which the data subject is a party or the implementation of precontractual measures taken at the data subject’s request (booking and purchase of a vacation or medical care, online purchases, etc.)
• Compliance with the legal obligations incumbent upon SAINT-MALO GOLF CLUB (for example, statutory retention periods for accounting documents)
• The legitimate interest of SAINT-MALO GOLF CLUB in ensuring the highest quality of its services, providing its customers with the best possible support regarding their reservations, stays, or treatments, and improving the operation of the Group’s websites.
• The legitimate interest of SAINT-MALO GOLF CLUB, as set forth in Recital 47 of the GDPR, namely the existence of a “relevant and appropriate relationship between the data subject and the data controller in situations such as those where the data subject is a customer of the data controller.”
• The consent of the data subject when required by applicable regulations, particularly with regard to marketing and cookies.

If you choose not to provide the requested personal information, you may not be able to access certain parts of our website, or SAINT-MALO GOLF CLUB may be unable to respond to your requests.

Whether the information provided is mandatory or optional, and any consequences for us resulting from a failure to respond, are specified at the time the information is collected.

Recipients of the data

The Personal Data collected by SAINT-MALO GOLF CLUB is not shared with commercial or advertising entities.

No personal data is transferred to a third country or to an international organization.

They are accessible only to certain authorized employees in the IT, customer service, sales, and marketing departments, within the scope of their respective responsibilities and in accordance with this policy.
SAINT-MALO GOLF CLUB may also engage the services of subcontractors—that is, specialized service providers (mailing, audience analysis)—a list of whom is available upon request via the designated form.

Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.

User Rights

In accordance with the regulations governing the protection of personal data, you have the following options:
To exercise your right of access to find out what personal data we hold about you and to obtain information regarding the processing of that data.

• To request that your data be corrected if it is inaccurate, or to request that it be completed if it is incomplete.
• To have your data deleted.
• To have the processing of your personal data restricted.
• To object, at any time and for legitimate reasons, to the processing of your personal data, including profiling.
• To withdraw your consent to the processing of your personal data at any time
• To request data portability.
• To establish guidelines regarding what will happen to your personal data after your death.

To exercise your rights, please contact us by mail at the following address: Direction Générale Internet – DPO, Grande Plage du Sillon – BP 32, 35401 SAINT-MALO, or via the dedicated form. In this case, you must specify the personal data you wish us to correct, complete, or delete, and provide clear proof of your identity by including a copy of an ID document. Requests to delete personal data will be processed subject to the legal obligations incumbent upon SAINT-MALO GOLF CLUB, particularly with regard to the retention or archiving of documents.
Finally, you also have the option to file a complaint with the French Data Protection Authority (CNIL).

Security and Privacy

SAINT-MALO GOLF CLUB takes appropriate technical and organizational measures, in accordance with applicable legal provisions, to protect your personal data against unlawful or accidental destruction, loss, or accidental alteration, as well as unauthorized or unlawful disclosure, access, or processing.
In addition, our website is equipped with high-performance security systems. We have implemented SSL (Secure Socket Layer) encryption and have also strengthened all scrambling and encryption processes to protect all sensitive payment data as effectively as possible.

Cookies

SAINT-MALO GOLF CLUB uses cookies and other tracking technologies on its online booking sites. To learn more about how these tracking technologies are used and to manage your settings, please review our cookie policy.

Contact Us

If you have any questions or complaints regarding the protection of personal data, or if you would like to share recommendations or comments aimed at improving the quality of this policy, please contact us in writing at the following address: Direction Générale Internet – DPO, Grande Plage du Sillon – BP 32, 35401 SAINT-MALO, or via the dedicated form at
You may also contact our Data Protection Officer, who is registered with the CNIL, directly at the following mailing address: Direction Générale Internet – DPO, Grande Plage du Sillon – BP 32, 35401 SAINT-MALO, or via the dedicated form.

Changes to This Policy

SAINT-MALO GOLF CLUB reserves the right to make changes to this policy at any time, in particular to comply with changes in laws, regulations, case law, and technology.

Cloudflare Turnstile

To protect our forms from automated and fraudulent submissions, our site uses Cloudflare Turnstile. This service transparently verifies that you are a human user, without using intrusive visual puzzles. In some cases, this verification takes place silently, without requiring any action on your part.
Cloudflare Turnstile may collect certain technical data (IP address, browser and device characteristics) solely for the purpose of this anti-bot verification, with no advertising purpose. For more information, seeCloudflare’s Turnstile Privacy Addendum