- Purposes, legal basis and nature of the data collected
- Data retention period
- Communications and prospecting by ACCOR S.A. and its partners
- Recipients of your data and data transfers to third countries
- Security measures
- Your rights
- Browsing Data – Cookies
- Changes to the personal data protection policy
The protection of the personal data of the Users of our Platform is a major concern of Accor. Thus, Accor invites Users to familiarize themselves with the current personal data protection policy which is designed to explain, as transparently as possible, the conditions under which the personal data of Users are processed as part of their use of the Platform.
1. Purposes, legal basis and nature of the data collected
When you create an account, search for a supplier or merely browse our Platform, ACCOR S.A, the processing manager, whose head office is located at 82 rue Henri Farman, 92130 Issy Les Moulineaux, France, collects data about you, namely: title, surname, first name, user name, qualification or job title, postal and electronic addresses, work telephone number, password, official details of your company (e.g., : SIRET number in France, intracommunity VAT number, etc.), information about orders and connections to and browsing on the Platform and about communications between Users.
On forms used to collect personal data, the User is informed of the compulsory or optional nature of the replies by the presence of an asterisk. Should you fail to provide some of the compulsory information, we would be unable to provide you with the full range of Platform services.
The data that we collect on you are processed for the following purposes:
|Purpose||Legal basis of the processing|
Create and manage your account and ensure that transactions proceed correctly.
Execution of the contract to which you are a party
|Meet your requirements, improve the quality of the services on offer, manage any complaints, establish statistics about and perform analyses on the operation of the Platform and, possibly, share them with other companies in the Group.||
Execution of the contract to which you are a party
Pursuit of our legitimate interests
|Provide you with commercial information and communications for the purpose of prospecting and participation on the Platform, in compliance with the regulations on commercial prospecting.||Pursuit of our legitimate interests|
|Comply with the legislative and regulatory provisions in force and/or with the verdict of any competent legal authority.||Respect de nos obligations légales|
Compliance with our legal duties
Combat fraud within the framework of the operation of the Platform. The information passing via the Platform are analyzed by the teams that manage the Platform with the aim of preventing the risk of fraud. The checks performed to this end may result in the suspension of your order, sales or inventory (if you operate as a Supplier) until the information needed to verify the operation concerned is provided. A decision temporarily or permanently to suspend your account may be taken. The occurrence of an incident (fraud in supply, repeated offers to sell banned products, high levels of cancellation and/or complaints, etc.) will cause your data to be added to an incidents list which may, when subsequent orders are placed, cause ACCOR S.A. to perform additional checks or, potentially, to reject your order or refuse to publish new products. Those affected may provide any observations or challenge a decision that affects them by contacting the Platform's customer service through the following form
|Pursuit of our legitimate interests|
2. Data retention period
In general, your personal data are held for a limited period, as long as you are active on the Platform (i.e., until you request the deletion of your account in compliance with the platform's conditions of use), plus an additional period that will allow us to comply with our various legal and regulatory obligations. At the end of these periods, your personal data will be rendered totally anonymous or irreversibly deleted.
More specifically, your personal data will be retained in accordance with the terms and criteria set forth below:
- data related to the management of your Account and to the use of services: are retained for 3 years from the date of your last activity on the Platform. After this period, these data will be archived for five years for evidence purposes;
- Financial documents and records will be stored for 10 years from the date of their creation;
- log-on data are stored for 12 months after their collection.
3. Communications et prospection de la part de ACCOR S.A. et de ses partenaires
We may have cause to communicate with you in the following circumstances:
To send you emails of a "transactional" nature:
As part of your use of the Platform, you will receive various emails that allow you to monitor your activity on the site (welcome email, order confirmation, forgotten password, confirmation of dispatch, etc.). These emails are necessary to your use of the Platform. You can use them, for example, or change your password. You receive these emails irrespective of whether or not you agree to receive our newsletters as they are necessary to the correct use of the Platform (sign-up, order, forgotten password, etc.).
To send you newsletters:
If you expressly consent, or if you do not object at the time that your address is collected, you will receive emails with information about, for example, new Platform features, promotions or news about Suppliers.
In order to offer you relevant content, we might use your personal data (company, purchases, loyalty program, etc.) to personalize these newsletters. We might also monitor the performances of these emails with the aim of improving the content and the circumstances in which they are issued.
To display online adverts:
As part of our online advertising campaigns, we might offer you adverts that are targeted and personalized on the basis of information collected when you make purchases on the site and on your browsing behavior on the site.
To suggest personalized offers and content:
We can use your personal data to send you offers and content personalized on the basis of various criteria, such as your geographical location, your company name, your browser's language, your browsing history on the site or your observed/suggested preferences.
We can thus personalize promotions, the display (or otherwise) of certain products or product categories, the general presentation of the Platform, language and currency. Personalization is designed, in the main, to facilitate your browsing and purchases on the Platform.
To contact you by telephone or SMS message
The work telephone number you provided for your profile may be used as part of a phone call or SMS prospecting operation, if you have opted to receive or have not opted out of such forms of contact.
For loyalty operations:
We may use your profile or purchases to offer you the benefits of loyalty schemes.
You may unsubscribe from any type of prospecting contact at any time by clicking on the unsubscribe link included in all such communications.
4. Recipients of your data and data transfers to third countries
The data that we collect are received by trained ACCOR S.A. staff and are also accessible by third parties that we use to manage some of our services.
These service providers, acting as subcontractors, participate in the administrative, technical or commercial management of services that we offer (hosting provider, integration provider, payment provider, customer service provider, telephone call handling provider, advertising technologies provider, marketing activities provider or company, market studies and data processing specialist, banking professionals, internet access providers, etc.). These third parties have been properly selected and undertake to implement appropriate technical and organizational security measures to ensure a suitable level of protection for your personal data. The data are also used to connect Suppliers and train them in the operation of the Platform.
In this context, data that we collect may be transferred to countries outside of the European Union. We satisfy ourselves that such transfers are carried out to a country deemed to provide a sufficient level of protection for data of a personal nature or we ensure that suitable legal tools govern these transfers as per the conditions required by the legislation in force.
In addition, when you reply to a Supplier's offer or complete a quote form, your contact details are sent to the relevant professional, namely the processing manager who issued said offer or form.
Further, be informed that certain Users, Suppliers or customers with whom you complete transactions are located in countries outside of the European Union. Therefore, transfers of your personal data to such countries may occur. Such transfers are necessary to the execution of the contract between you and the entity concerned.
Finally, your data may be sent to police forces and legal and government authorities, in accordance with the law, for the detection and prosecution of offences, for the prevention of threats to public safety or to allow ACCOR S.A. to confirm, exercise or defend a legal right.
5. Security measures
Accor S.A. takes technical and organizational measures appropriate to and in compliance with the applicable legal provisions to protect your personal data against illegal or accidental destruction, loss, accidental amendment, divulgence and unauthorized access. To this end, we have introduced technical measures (such as firewalls) and organizational measures (such as a login/password system, physical protection methods, etc.).
Moreover, ACCOR S.A. undertakes regularly to test, verify and assess the effectiveness of the technical and organizational measures in order to ensure ongoing improvement to the security of processing.
Accor S.A. is particularly concerned to make Platform users aware of the need to safeguard their logins and passwords. By accessing the Platform, users undertake never to reveal their password and login to a third party. We remind users that the password and login are strictly personal and confidential. Consequently, the user undertakes to take all measures necessary to this end and remains solely liable for ensuring that their confidentiality is maintained and thus for the consequences of any involuntary divulgence to any other person. Should suspected or proven fraudulent use of their login and/or password occur, the user undertakes to inform Accor SA as soon as possible via the Platform's customer service at: email@example.com. Should the password be lost, the user may change it by clicking the "Forgot password" link on the Platform login page.
6. Your rights
Under the regulations applicable to the protection of data of a personal nature, you have the following rights in respect of your personal data:
- Right of access: This refers to your right to obtain confirmation of whether or not your data are processed and, if they are, your right of access to them;
- Right of rectification: This refers to your right to have inaccurate data about you rectified, and incomplete data about you completed. You can also change the personal data of your user account, excluding your email address, at any time. Just click on the "My Account" section;
- Right of erasure: This refers to your right to have your data deleted, subject to our legal duty of retention
- Right of restriction: This refers to your right to restrict processing, if you object thereto, if you are questioning the accuracy of your data, if you think that their processing is illegal or if you need them to confirm, exercise or defend your rights in law;
- Right to object: This refers to your right to object at any time to the processing of your data by ACCOR S.A., unless ACCOR S.A. has legitimate reasons for so doing. You may also object, without the need for justification, to processing for prospecting purposes.
- Right to portability: This refers to your right to receive your data in a structured, currently used format that is machine readable on any operating system when these data are processed with your consent or where processing is needed for the execution of the contract to which you are a party.
- Automatic processing: you are entitled not to be subject to a decision based exclusively on an automated process that produces legal effects that concern or affect, unless this decision is necessary to the conclusion or execution of a contract, or is legally authorized.
- Instructions in the event of death: you are entitled to give instructions as to the fate of your personal data after your death.
- Complaint: you have the right to submit a complaint to a control authority.
To exercise your rights, send us a request through this contact form
To ensure the confidentiality and protection of your personal data, we will need to be able to identify you before we can respond to your request. To do so, we will ask you to attach to your request a copy of an official identity document bearing your signature. A black and white copy of the front of an identity document is sufficient.
You may also exercise your rights in respect of your personal data that is held and processed by any Supplier as a result of interactions with the latter via the Platform. To do so, you will need to contact the Supplier concerned directly.
8. Changes to the personal data protection policy
We therefore invite you to check its content from time to time. As far as possible, we will try to inform you in advance of any changes made and of their consequences.
The current version of the confidentiality policy will, in all circumstances, be published on this page, with the date of its most recent update.