Pending validation 06/06/2026

1. Data Controller

Personal data collected in connection with the use of this website is processed by:

The City of Gold

Limited Liability Company (SARL) with a capital of 10,000 euros

Fréjus Commercial Register No. 443 053 541

Headquarters: Route Nationale 7 – Les Plaines District – 83480 Puget-sur-Argens

Phone: 04 94 43 33 33

Email: puget@lacitedor.fr

Hereinafter referred to as the “Data Controller.”

2. Data Collected

Depending on the features used, the Data Controller may collect the following categories of data:

First and last name;
Phone number;
Email address;
Reservation details (date, time, number of guests, special requests);
Content of messages sent via the contact form;
IP address;
Technical data on connection and browsing.

The information marked as required on the forms is necessary to process the relevant request.

3. Purposes of Data Processing

Personal data is collected for the following purposes:

Reservation Management;
Handling contact and information requests;
Communicating with customers regarding their reservations;
Customer Relationship Management;
Improving the website's functionality;
Information Systems Security;
Compiling website traffic statistics;
Compliance with applicable legal and regulatory requirements.

The data is not used for purposes inconsistent with the purposes listed above.

4. Legal Basis for Data Processing

The processing activities carried out are based on the following legal grounds:

Carrying out pre-contractual or contractual measures
- Reservation Management;
- Processing requests submitted by users.
Legitimate Interest of the Data Controller
- Website security;
- Fraud prevention;
- Technical management of the site;
- Improving the quality of the services offered.
Consent

When required by law, particularly for certain non-essential cookies or trackers.

Compliance with a Legal Obligation

When the retention or disclosure of certain data is required by law or regulation.

5. Recipients of the Data

Personal data is used exclusively for the following purposes:

To authorized personnel at La Cité d’Or;
To the technical service providers involved in the operation of the website;
To the website host;
To administrative or judicial authorities when required by law.

The data is neither sold nor transferred to third parties for commercial purposes.

6. Subcontractors

The Data Controller may use technical service providers to host, maintain, and operate the website.

These subcontractors act solely on the instructions of the Data Controller and provide sufficient safeguards regarding security and confidentiality in accordance with Article 28 of Regulation (EU) 2016/679 of April 27, 2016.

7. Retention Periods

Data is retained for no longer than is necessary to achieve the intended purposes.

For reference:

Data related to contact requests: three years from the last contact;
Reservation data: the time required to process the reservation, followed by archiving, if applicable, in accordance with legal requirements;
Connection data and security logs: up to six months;
Cookies: In accordance with the website's cookie policy.

Once the applicable retention periods have expired, the data is deleted or anonymized.

8. Transfers Outside the European Union

Personal data is hosted and processed within the European Union.

In the event of a transfer to a third country, it will be carried out in accordance with the provisions of the GDPR and the appropriate safeguards provided for by applicable regulations.

9. Data Security

The Data Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks, in particular to protect the data against:

accidental or unlawful destruction;
accidental loss;
deterioration;
unauthorized disclosure;
unauthorized access.

10. Rights of Data Subjects

In accordance with the General Data Protection Regulation and the French Data Protection Act, every data subject has the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
the right to data portability, where applicable;
the right to withdraw consent at any time when the processing is based on consent.