GDPR
Privacy policy
Hôtel Goodwood is committed to protecting your personal data. This policy describes how we collect, use and protect your data when you visit hotel-goodwood.com, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Data controller
SHCM (SARL, share capital €20,000)
7 rue René Cassin, 14280 Saint-Contest, France
Caen Trade Register 809 696 412
Contact: contact@hotel-goodwood.com · +33 (0)2 31 740 740
The company has not appointed a Data Protection Officer (DPO). For any question regarding your personal data, please contact us directly at the e-mail address above.
2. Data collected and purposes
2.1 Contact form
When you write to us through the contact form, we collect your name, e-mail address and the content of your message. This data is used solely to process your request and reply to you.
- Legal basis: legitimate interest of the publisher in responding to requests addressed to it (art. 6.1.f GDPR).
- Recipients: Hôtel Goodwood team and its technical service provider (Apollo Studio) for message delivery.
- Retention period: 3 years after the last contact, then intermediate archiving or deletion.
2.2 Booking
Bookings are made through the Misterbooking engine, embedded as an iframe. The data required for the booking (name, contact details, dates, payment method) is collected and processed directly by Misterbooking and Hôtel Goodwood as joint controllers or controller depending on the nature of the processing.
- Legal basis: performance of the hotel contract (art. 6.1.b GDPR) and legal obligations regarding accounting and the traveller register.
- Retention period: according to legal obligations (3 years for prospecting, 10 years for accounting documents, 6 months for individual police forms).
- Misterbooking's privacy policy is available at misterbooking.net.
2.3 Audience measurement (Google Analytics 4)
Subject to your consent, we use Google Analytics 4 via Google Tag Manager to measure visits to the Website. The data collected is pseudonymised (random identifier, anonymised IP) and helps us understand which pages are useful and how visitors find us.
- Legal basis: your consent (art. 6.1.a GDPR), collected via the cookie banner.
- Data collected: pages viewed, session duration, traffic source, device type, approximate country, pseudonymous identifier.
- Recipients: Google Ireland Limited, as processor.
- Retention period: 14 months maximum in GA4, then automatic deletion.
- Transfers outside the EU: Google may transfer data to the United States under the Data Privacy Framework (European Commission adequacy decision of 10 July 2023).
3. Cookies
A cookie is a small file placed on your device when you visit a website. We use the following categories:
| Cookie | Purpose | Lifespan | Consent |
|---|---|---|---|
gw_consent_v1 |
Stores your cookie consent choice. | 13 months | Exempt (consent management cookie, CNIL recommendation) |
_ga, _ga_* |
Google Analytics 4 — anonymised audience measurement. | 13 months maximum | Required |
| Misterbooking cookies | Operation of the booking engine (cart, session). Set only when the booking window is opened. | Session | Exempt (strictly necessary for the requested service) |
You can change or withdraw your consent at any time by clicking (also available in the site footer).
4. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights regarding your data:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
- Right of rectification: have inaccurate or incomplete data corrected.
- Right to erasure ("right to be forgotten"): have your data deleted under the conditions provided by law.
- Right to restriction of processing.
- Right to object to processing, in particular for commercial prospecting.
- Right to portability of the data you have provided to us.
- Right to give instructions regarding the fate of your data after your death.
- Right to withdraw consent at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, write to us at contact@hotel-goodwood.com or by postal mail to the registered office. We will respond within a maximum of one month. Proof of identity may be requested in the event of reasonable doubt about your identity.
5. Complaint to the CNIL
If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL):
CNIL — 3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France
Phone: +33 (0)1 53 73 22 22
Website: www.cnil.fr
6. Data security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration: TLS encryption of exchanges, restricted access to authorised personnel, secure hosting, regular backups.
7. Changes
This policy may be amended at any time to reflect legal or technical developments. The date of the last update appears below.