1. PERSONAL DATA COLLECTED BY MONTE-CARLO SOCIETE DES BAINS DE MER
The personal data we may collect comes from 3 different sources:
- Data collected from customers
- Data supplied by third parties (partners or service providers)
- Data collected automatically
This data includes the following:
1. Identity and family status (title, surname, first name, status, etc.)
2. Address and contact details (email address, postal address, mobile no., etc.)
3. Education and career (qualifications, jobs, etc.)
4. Financial details (bank card no., payment methods)
5. Consumption of goods and services, preferences and areas of interest (transactions; date, place and amount of expenditure; activities, etc.)
6. Electronic identification data (customer identification no., IP address, location data, MAC address, etc.)
7. Time and location information (monitoring of activities, cookies, logs, geolocation, etc.)
8. Loyalty programmes of the Group and its partners, loyalty programme membership no., etc.)
9. Health information provided by the customer (allergies, disabilities, etc.)
2. USE OF DATA
Your personal data is used by Monte-Carlo Société des Bains de Mer for the purpose of managing and delivering the services provided to you and without which Monte-Carlo Société des Bains de Mer would be unable to provide or render these services.
This use covers, firstly, the management of offers, the monitoring of services and, more generally, our entire business relationship (subscription to the Group’s newsletter or communication materials – MC Society; visits to our channels; quotes; reservations; orders; subscriptions; loyalty accounts; Wi-Fi or home automation services; reviews; surveys; information and marketing communications through all the means of communication you have provided for this use; and your contributions and posts on the Group’s accounts, social media or mentioning hashtags, brands, events, places, offers, services, products, Group channels, etc. (including through third parties)).
Monte-Carlo Société des Bains de Mer may also use your data to evaluate and improve its services and to develop new ones, as well as to run loyalty campaigns, target potential customers, conduct surveys and carry out promotional activities. Unless you object, you may receive offers from Monte-Carlo Société des Bains de Mer or its business partners through all the means of communication you have provided for this use for services similar to those offered by Monte-Carlo Société des Bains de Mer.
With your express consent, Monte-Carlo Société des Bains de Mer may,through all the means of communication you have provided for this use, send you marketing information for services that are not similar to those already provided.
This data will be stored for as long as is necessary for these purposes and for a maximum of three years from the date of the end of the business relationship with regard to direct marketing. Monte-Carlo Société des Bains de Mer may also use your data to meet its legal requirements (in particular the fight against fraud and money laundering) and/or in response to requests from public and governmental authorities.
3. PERSONAL DATA ACCESS AND CUSTOMER RIGHTS
In accordance with Regulation (EU) 2016/679 of 27 April 2016 and amended (Monegasque) Law No. 1.165 of 23 December 1993, you have a right of access to and a right to the rectification, erasure and portability of your personal data as well as a right to object and restrict the processing of this personal data. You may also define the instructions for the outcome of your personal data after your death. With proof of your identity, you may exercise your rights by contacting the Data Protection Officer (DPO) by email at data‑[email protected]. If, after contacting the DPO, you do not feel that your rights have been observed, you may make a claim with the French Data Protection Authority (CNIL – Commission Nationale de l'Informatique et des Libertés) or the Monegasque authority, the Commission for Control of Personally Identifiable Information (CCIN.mc – Commission de Contrôle des Informations Nominatives). The data which Monte-Carlo Société des Bains de Mer needs for the purpose for which they were collected, necessary for compliance with a legal obligation and/or for the establishment, exercise or defence of rights in court, may not, however, be deleted.
4. SUBCONTRACTING OF PERSONAL DATA PROCESSING
Your personal data is processed by Monte-Carlo Société des Bains de Mer, its subcontractors or partners for the purpose of managing and delivering the services you have requested or authorised. Your data may also be transferred to third-party service providers who provide services or support and advice to Monte-Carlo Société des Bains de Mer. On request, data may also be transferred to persons and authorities whose right to access personal data is recognised by the law, regulations or provisions issued by the legally competent authorities. Subcontractors and partners of Monte-Carlo Société des Bains de Mer may be located outside the European Union. When a subcontractor or partner is located in a country that has not been recognised as having an adequate level of protection, Monte-Carlo Société des Bains de Mer requires it to comply with its own requirements on the security and privacy of your personal data and to process your data only for the purposes it has identified. These subcontractors and partners will have previously signed the standard Contractual Clauses of the European Commission.
5. PERSONAL DATA RETENTION
Your personal data is stored in our databases in Monaco or in those of our subcontractors for a period in accordance with legal provisions or proportional to the purposes for which they were saved. In some cases, and mainly for technical reasons, your data may be stored on servers located outside of Monaco or the European Union.
Depending on whether we have an ongoing contractual relationship (you are an active customer), whether we have had a contractual relationship with you in the past (you are an inactive customer) or whether we have never had a relationship of this kind with you (you are a prospective customer), the retention periods may vary. The data that is linked to your browsing on our online services and collected by cookies that you authorised have a specific retention period indicated in our cookie policy.
The table below lists the main retention periods for your data.
In any case, we regularly revise the relevance of any information we hold. When their retention is no longer justified by commercial requirements or requirements related to the management of your customer account or if you have exercised a right of modification or erasure, we will securely delete them (with the exception of data necessary to establish proof of a right or contract).
- Data category: Civil status, contact data
- Purpose: Creation and management of a prospective customers file
- Retention period: 3 years, starting with the collection of data or the last communication from the prospective customer
- Data category: Civil status, contact data, Lifestyle habits, economic and financial information
- Purpose: Management of the customer and provision of subscribed services, concierge services, data relating to bill payments
- Retention period: duration of the contractual relationship or 10 years for financial data
- Data category: Civil status, contact data, social network username
- Purpose: completing tasks for loyalty cards, prospective customers, studies, surveys, promotions and offers, complaint management
- Retention period: duration of the contractual relationship or 3 years, starting with the data collection or last communication.
- Data category: Contact data
- Purpose: Sending personalised marketing communications
- Retention period: Maximum of 3 years, starting with unsubscribing or last communication from customer
Data category:
- Civil status: Civility, surname, first name, date of birth, place of birth, address, postal code, city, country, nationality, passport number or identity card
- Contact data: E-mail, telephone number, fax
- Lifestyle habits: Room number, shoe sizes, contact preferences, contact language, tastes and preferences
- Economic and financial information: Banking information, subscription, payment method, card number
6. PERSONAL DATA SECURITY
Monte-Carlo Société des Bains de Mer implements the necessary measures to protect the personal data it processes. Your data is processed electronically and/or manually, and in any case, in such a way to ensure its security, protection and privacy appropriate for its sensitivity level, through administrative, technical and physical measures to prevent loss, theft and unauthorised use, disclosure or changes. In case of breach of your personal data liable to pose a high risk to your rights and freedoms, Monte-Carlo Société des Bains de Mer shall inform you as soon as possible and take all necessary measures to limit the risks related to this breach. Whether your data is processed by Monte-Carlo Société des Bains de Mer or by its subcontractors and partners, the same security and privacy requirements apply to your personal data.
In particular, we have:
- appointed a data protection officer;
- established a unit dedicated to information system security;
- raised awareness of privacy requirements among our employees who need to access your personal data;
- secured access to our premises and IT platforms;
- implemented a general IT security policy for the company;
- secured data access, sharing and transfer;
- and we maintain high standards for data protection when selecting our subcontractors and partners.
7.COOKIES AND OTHER TRACKERS
Monte-Carlo Société des Bains de Mer uses cookies on its websites and e-mail-opening trackers for statistical reasons. These cookies and trackers do not exceed 13 months. To learn more and configure them, please consult our cookie policy.
8. PRIVACY POLICY UPDATE
This Privacy Policy may be subject to change, in particular due to legislative and regulatory developments. In this case, the most recent version will be directly accessible on this page.
9. MONTE-CARLO SOCIETE DES BAINS DE MER GROUP
SOCIETE ANONYME DES BAINS DE MER ET DU CERCLE DES ETRANGERS A MONACO (SBM) with capital of 24,516,661 euros, registered in the Monaco Trade and Industry Registry under the number 56 S 523 and with intra-community VAT no. FR 07 0000 1 5486.
Headquarters: Monte Carlo Société des Bains de Mer, Place du Casino – MC 98000 Monaco.
The Monte-Carlo Société des Bains de Mer group includes SBM and its subsidiaries: SOCIETE ANONYME MONEGASQUE GENERALE D’HOTELLERIE (SOGETEL), SOCIETE ANONYME MONEGASQUE DES THERMES MARINS MONTE-CARLO (STM), Société Civile Immobilière de l’Hermitage, Société Anonyme d’Entreprises de Spectacles (SAMES), SARL CAFE GRAND PRIX.