Personal data protection policy

As of 5 August 2026

SUMMARY OF THE PROTECTION OF YOUR PERSONAL DATA

This personal data protection policy of Hôtel Artus is an appendix to the T&Cs ("Terms and Conditions") and therefore has contractual value. In the event of a contradiction between the T&Cs and this policy, the T&Cs shall prevail, which the user of our sites acknowledges and accepts.

This personal data protection policy reflects Hôtel Artus's wish to be fully transparent with the user of the site about how it manages their personal data, and incorporates the latest requirements of the applicable legislation and regulations, in particular the European General Data Protection Regulation (GDPR).

The personal data protection officer of Hôtel Artus is: Mr Romain BINET - Email: privacy@biografygroup.com

For any question about this personal data protection policy, the user is invited to send a message to privacy@biografygroup.com

‍

CONTENTS

Article 1. What is the purpose of the Personal Data Protection Policy?

I. PERSONAL DATA

Article 2. What is personal data?

Article 3. What personal data does Hôtel Artus collect and for what purposes?

Article 4. Who has access to the user’s personal data?

Article 5. What rights do Users have regarding the personal data collected?

Article 6. For how long is personal data collected?

Article 7. What measures are in place to protect users’ personal data?

II. COOKIES

Article 8. What is a cookie?

Article 9. What tracking systems does Hôtel Artus use and for what purpose?

Article 10. How to allow/disable cookies?

III. CHANGES TO THE DATA PROTECTION POLICY

Article 11. What is the purpose of the Personal Data Protection Policy?

‍

Personal data protection policy

Article 1. What is the purpose of the Personal Data Protection Policy?

The purpose of this Personal Data Protection Policy is to inform the User about how Hôtel Artus manages the personal data of the users of its websites, whether or not they are customers (hereinafter "the Users").

‍

I. PERSONAL DATA

Article 2. What is personal data?

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, personal data is “any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

Article 3. What personal data does Hôtel Artus collect and for what purposes?

Hôtel Artus collects personal data on the following website: https://www.artushotel.com/

Data processing concerned: Sending of exclusive offers and communication

Personal data processed: Email address

Purpose : Commercial

Legal basis: Legitimate interest / contract (following a stay)
Retention period: 3 years from the date you were last active with us, in any way

‍

Data processing concerned: Newsletter

Personal data processed: Email address

Purpose : Commercial

Legal basis: Consent
Retention period : For the duration of the subscription

‍

Data processing concerned: Email open tracking (tracking pixel)

Personal data processed: Email address, date emails were opened, clicks on links

Purpose: Audience measurement, content personalisation, adjustment of sending frequency

Legal basis: Consent (separate from consent to receive the newsletter)

Retention period: Date of the last opening only, overwritten each time an email is opened again

‍

Data processing concerned: Contact before the stay

Personal data processed: Surname, first name, email, telephone

Purpose: Commercial

Legal basis: Contract
Retention period: 3 years

‍

Data processing concerned: Contact and follow-up of services during the stay – satisfaction monitoring

Personal data processed: Surname, first name, email, telephone

Purpose: Commercial

Legal basis: Contract
Retention period: 3 years

‍

Data processing concerned: Taking, following up and paying for bookings

Personal data processed: Surname, first name, email, bank details, bank card, identity document

Purpose: Commercial

Legal basis: Contract
Retention period: 5 years (bank details deleted after 15 days)

‍

Data processing concerned: Recruitment of new employees

Personal data processed: Surname, first name, email, telephone, CV data (mandatory data)

Purpose: Recruitment

Legal basis: Performance of pre-contractual measures
Retention period: 2 years after the last contact (unless recruited)

‍

Data processing concerned: Use of data for advertising and remarketing purposes

‍Personal data processed: Surname, first name, email address, telephone number

‍Purpose: Marketing and targeted advertising, creation of lookalike audiences, measurement of the effectiveness of advertising campaigns

‍Legal basis: Performance of the contract (customers who have made a booking) / Consent (newsletter subscribers)

‍Retention period: 3 years after the last contact for customers who have booked / Until unsubscription or withdrawal of consent for newsletter subscribers

‍

Data processing concerned: Management of telephone calls

‍Personal data processed: Surname, first name, telephone number, email address (if provided), audio recording of calls, notes and tags associated with calls.

‍Purpose: Handling of customer and prospect requests, monitoring of service quality, team training and security of exchanges.

‍Legal basis: Performance of a contract (Article 6.1.b GDPR) and legitimate interest (Article 6.1.f GDPR).

‍Retention period: Recordings and associated data are kept for a maximum of 24 months.

Article 4. Who has access to the User’s personal data?

The only recipients of Users’ personal data are:

- the relevant departments and employees of Hôtel Artus and of the Biografy group (in particular: IT, sales/marketing, operations), bound by specific data protection obligations;

- the companies that assist Hôtel Artus in the operation and/or running of the sites;

- The subcontractors of our hotels.

These entities only receive the personal information strictly necessary for taking bookings and, where applicable, calling customers back.

The processing of personal data by these entities is carried out in compliance with the applicable legislation and regulations.

‍

Article 5. What rights do Users have regarding the personal data collected?

The User has access to the rights detailed in Chapter III of the GDPR, including the following rights:

- Right of access to their personal data collected on the Website

- Right to modify/rectify it,

- Right to erasure (“right to be forgotten”), unless there is a legal ground that obliges us to keep it,

- Right to restriction of processing, i.e. the right to ask us in certain cases to suspend the processing of personal data,

- Right to data portability, i.e. the right to request a copy of their personal data in a common format (for example, a .csv file),

- Right to object to the processing of personal data,

- Rights relating to individual decision-making and profiling, i.e. the right to ask us to be transparent about any profiling we carry out or any automated decision,

All of these rights apply to data processing carried out through the Hôtel Artus website and requiring personal information (registration forms, contact requests, booking confirmation, etc.). Any user may contact Hôtel Artus by sending an email to privacy@biografygroup.com or to the postal address: 34, rue de Buci - 75006 Paris.

The User also has the right to lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL), the supervisory authority for data protection matters in France (www.cnil.fr).

Hôtel Artus would, however, like the chance to address your concerns before you contact the CNIL. Please therefore contact us first.

Article 6. For how long is personal data collected?

Users’ personal data is retained in compliance with the applicable legislation and regulations.

To find out more, any user may contact Hôtel Artus by sending a message to privacy@biografygroup.com

Article 7. How is personal data protected?

Hôtel Artus is very vigilant about the security of personal data and takes all reasonable precautions to prevent any unauthorised access, disclosure, alteration or destruction of personal data.

The personal data collected is stored by Hôtel Artus or by its service providers, and is protected by physical and electronic access controls, firewall technologies and other reasonable security measures.

However, such measures cannot prevent all risks of loss, access, misuse or alteration of the personal information collected. Where required by law, Hôtel Artus will notify the User of any loss, access, misuse or alteration of their personal data, so as to enable them to take appropriate steps to enforce their rights. Hôtel Artus will notify the User electronically, by post or by telephone, if the law allows.

The User is invited not to send payment information or sensitive information by email or in sections not intended for that purpose (for example, sending a credit card number by email).

The User is also informed that they always have the option to choose which personal data they wish to provide.

However, their decision not to provide certain data could affect their experience of the services. For example, we cannot make anonymous bookings and, if we are not authorised to disclose your personal data to the hotels in our group, we may be unable to provide certain services, whether booking-related or otherwise.

Likewise, if the User does not authorise us to disclose their personal data to third parties, such as Hôtel Artus's subcontractors (transfer service, concierge service, etc.), we may not be able to provide the full range of services or the provision of these services may be delayed. We will endeavour to respond to your request as quickly as possible.

II. COOKIES

Article 8. What is a cookie?

According to the Commission Nationale de l'Informatique et des Libertés, a cookie is a piece of information placed on the User’s means of access by the server of the Website or Application they visit.

A cookie contains several pieces of data:

- the name of the server that placed it,

- an identifier in the form of a unique number,

- possibly an expiry date.

This information is sometimes stored on a means of access in a simple text file that a server accesses to read and record information.

Article 9. What tracking systems does Hôtel Artus use and for what purposes?

The User is informed that Hôtel Artus uses the following tracking tools:

- Google Analytics

- Google Tag Manager

- Google Search Console

- DoubleClick

- LoungeUp

- Bing

- WebFlow

The Hôtel Artus website, online services, interactive applications, electronic messages and advertisements may use “cookies” and other technologies such as invisible pixels and web beacons.

In accordance with the CNIL recommendation of 14 April 2026 on tracking pixels in emails, the pixels embedded in our marketing emails and newsletters (open measurement, personalisation) are only used with the recipient’s prior and separate consent. This consent can be withdrawn at any time via the link provided in each of our emails, or by writing to privacy@biografygroup.com. The pixels in our transactional emails (booking confirmation, invoices, communications related to the stay) are not subject to this requirement, provided they are used solely to measure deliverability.

These technologies help us better understand user behaviour, tell us which parts of our websites have been visited, and facilitate and measure the effectiveness of advertising and web searches.

We treat the information collected by cookies and other technologies as non-personal information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information by local law, we also treat these identifiers as personal information.

Likewise, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this data protection policy.

Hôtel Artus also uses cookies and other technologies to remember personal information when you use our website, online services and applications.

Our aim in these cases is to make your experience more convenient and personal. For example, knowing your country and language helps us offer a personalised and more useful marketing experience.

We use this information to understand and analyse trends, administer the site, understand user behaviour on the site, improve our products and services, and gather demographic information about our user base as a whole. Hôtel Artus may use this information in its marketing and advertising services.

Pixel tags allow us to deliver targeted advertising messages in a format customers can read. We may use the information collected to reduce or eliminate the messages sent to customers.

The User is informed that they have, at any time, a right of access to data concerning them in relation to cookies, and a right to object allowing them to choose at any time whether or not to accept cookies.

However, if the User does not accept cookies, use of the Services (and in particular browsing the Sites) may not function correctly.

Article 10. How to allow/disable cookies?

The User can at any time manage, disable and allow cookies by configuring their internet browser. For example:

- for Mac smartphone or tablet: via Settings, then select the browser concerned / Accept cookies / Never / or From visited sites / or Always.

- for Android smartphone: after launching the browser, press the menu button (bottom left of the mobile device) / More / Settings / Accept cookies or do not accept.

- for computer:

• on Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

• on Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

• on Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDes...

• on Firefox: https://support.mozilla.org/fr/kb/desactiver-cookies-tiers

• on Opera: http://help.opera.com/Windows/10.20/fr/cookies.html

For more information on protecting and disabling cookies, the User can use the help section of their browser.

In case of difficulty exercising their right of access or objection regarding cookies, the User can contact Hôtel Artus at the email address: privacy@biografygroup.com

The maximum lifetime of a cookie is thirteen months.

III. CHANGES TO THE DATA PROTECTION POLICY

Hôtel Artus reserves the right to change, modify or revise this policy at any time.

The date of the last update of the document is 5 August 2026.

In the event of a significant change to this policy, we will display on the Sites that our data protection policy has been modified.

If we make significant changes to the way we use your personal data, we will notify you by email at the address in your account (if applicable) or by means of a notice on the home page of our Sites, while giving you the opportunity to refuse this new use.

Any change made to this data protection policy will take effect upon its publication on the Sites.

Your use of our Sites after these changes come into effect signifies acceptance of this data protection policy under the new terms made public.