The website is accessible at the URL https://www.hotel-garage-biarritz.fr/ (hereinafter the “Site”), published by the company Experimental Group, a simplified joint-stock company with a capital of 20,085,900 euros, registered with the Paris Trade and Companies Register under number 524 095 064, whose registered office is located at 14-16, boulevard Poissonnière, 75009 Paris, France (hereinafter “Experimental Group”).

Individuals who access the Site are referred to as “Users.”

ARTICLE 1 – COLLECTION OF PERSONAL DATA

Experimental Group collects and processes, on its own behalf, the User’s personal data that (i) has been provided via a data collection form available on the Site, (ii) has been shared in the course of interactions with Experimental Group, and (iii) is obtained through the use of the Site, provided that valid consent has been given by the User beforehand.

Experimental Group will not process personal data other than those described in this Privacy Policy (hereinafter the “Privacy Policy”) without the explicit consent of the User.

ARTICLE 2 – LEGAL BASIS FOR DATA PROCESSING

In accordance with applicable personal data protection laws, the data processing implemented by Experimental Group is based on one of the following legal bases:

2.1 Contract Performance Users must accept the terms and conditions available at https://www.hotel-garage-biarritz.fr/en/legal-notices-credits/ to use the Site and benefit from its services. These terms formalize a contractual relationship between each User and Experimental Group. The personal data collected in this context is necessary for the execution of these contracts, as specified in Article 4 – “Purposes of Processing.”

2.2 User Consent When Users browse the Site, Experimental Group may read and/or write trackers on their device (e.g., computer, mobile phone). Before installing cookies, Experimental Group collects the User’s consent through a “cookie banner.”

2.3 Compliance with Legal Obligations Experimental Group may be required to process the User’s personal data to comply with legal obligations.

2.4 Legitimate Interest of Experimental Group Experimental Group may have a legitimate interest in collecting and processing personal data of Site visitors (e.g., conducting commercial prospecting). In such cases, Experimental Group ensures that the processing is necessary for its legitimate interest and does not infringe on Users’ fundamental rights.

ARTICLE 3 – CATEGORIES OF PERSONAL DATA PROCESSED

The personal data collected and processed by Experimental Group includes:

(i) Identification data (e.g., name, surname); (ii) Contact details (e.g., phone number, email address, postal address); (iii) Financial data (e.g., credit card number, transaction details); (iv) Lifestyle data; (v) Information related to meal preferences, which may indirectly indicate religious beliefs, ethnic origin, or health conditions and thus be considered sensitive data under Article 9 of the GDPR. These data are only collected when voluntarily provided by the User; (vi) Professional data (e.g., CV); (vii) Location data (e.g., GPS); (viii) Connection data (e.g., technical logs, IP addresses).

Experimental Group does not collect information related to political opinions, morality, sexual orientation, or genetic characteristics.

ARTICLE 4 – PURPOSES OF DATA PROCESSING

Personal data processing by Experimental Group is necessary for the following purposes:

4.1 Online Booking Processing

  • Site optimization for User navigation;
  • Creation of a User account on the Site;
  • Booking confirmation and processing in an Experimental Group establishment;
  • Payment processing for User reservations;
  • Sending a confirmation message before the User’s arrival;
  • Conducting satisfaction surveys.

4.2 Application Management

  • Receiving job applications;
  • Recruitment process management.

4.3 Sending Newsletters and Marketing Actions

  • Sending newsletters (Users may unsubscribe at any time);
  • Performing marketing statistics and analysis;
  • Communicating with Users who submit a contact form;
  • Building a customer and prospect database;
  • Informing Users about service updates.

4.4 Rights Management

  • Fraud prevention and payment security;
  • Dispute management;
  • Legal compliance;
  • Handling requests for data subject rights.

ARTICLE 5 – USER RIGHTS

Users have rights to access, modify, object, limit, transfer, rectify, define post-mortem instructions, and delete their personal data. The right to deletion is subject to the following conditions:

(i) The request must be submitted by the data subject along with a valid identity document; (ii) The request must be made in writing to gdpr@expegroup.com.

For data portability, requested information will be provided electronically unless otherwise requested. The right to deletion does not apply when processing is required for legal compliance.

ARTICLE 6 – DATA RETENTION

Experimental Group retains User data for up to three (3) years from the last contact. Audience measurement data is not kept for more than thirteen (13) months. In case of disputes, all relevant documents containing User data may be retained for the duration of the proceedings.

Some data may be archived beyond retention periods for research or legal requirements, ensuring anonymization and secure storage.

ARTICLE 7 – DATA RECIPIENTS

User data collected by Experimental Group is shared with:

7.1 Internal Services Experimental Group shares personal data internally only for the purposes outlined in Article 4.

7.2 Affiliates Experimental Group may share User data with subsidiaries for managing bookings, group reservations, and job applications.

7.3 Third-Party Partners and Service Providers Experimental Group may securely transfer User data to third parties, including:

  • Site operation and maintenance partners;
  • Contract execution partners (e.g., OTAs, booking platforms);
  • Customer relationship management service providers;
  • Legal professionals (e.g., accountants, auditors, lawyers).

7.4 Administrative and Judicial Authorities User data may be disclosed when required by law.

ARTICLE 8 – COOKIES

Experimental Group uses analytics cookies to understand User behavior. These cookies do not necessarily identify Users but generate usage reports. Users may refuse cookies via browser settings or the cookie banner.

8.1 Partners The following partners may place cookies or trackers:

  • Google: Analytics, Ads;
  • Meta: Facebook Pixel;
  • Quicktext: Chatbot Velma;
  • Synxis / D Edge: Booking Engine;
  • Influence Society, Triple Lootz, Staffcom

ARTICLE 9 – STATISTICAL USE OF ANONYMOUS DATA

Experimental Group collects, processes, and stores statistical usage data. These anonymous data may be shared with third parties without identifying Users.

ARTICLE 10 – PRIVACY POLICY CHANGES

Experimental Group reserves the right to modify this Privacy Policy at any time. If changes are made, Users will be required to accept the updated Privacy Policy upon accessing the Site. The Privacy Policy will always be accessible on the Site.