Preamble and Data Controller

The company CARIBBEAN TRIP attaches great importance to the protection of your privacy. The purpose of this policy is to inform you, in a clear and transparent manner, about how your personal data is collected and processed when you use the site tikiparadiselodge.com (hereinafter “the Site”), in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978, known as the “Data Protection Act”.

The data controller is the company CARIBBEAN TRIP (SARL), whose registered office is located at 14 Route de Fonds Vapeur, 97180 Sainte-Anne (Guadeloupe). For any question relating to your data, you may contact it at bcauzot@gmail.com.

Data We Collect

We only collect the data necessary for the purposes described below. Depending on your use of the Site, this may include the following categories:

• Identification and contact data: surname, first name, postal address, email address, telephone number.
• Reservation or order data: services or accommodation chosen, dates, number of people, amount and history.
• Payment data: information required for payment, processed by a secure provider (see below).
• Browsing data: IP address, browser type, pages viewed, date and time of connection, collected notably by means of cookies.
• Data from your requests: information you provide to us via the contact forms or by email.

Reservation and Payment

Accommodation reservations are made through the Amenitiz booking platform. When you make a reservation, the information required to process it is collected (contact details, stay dates, number of people, amount). The processing carried out through this platform is governed by its own terms and privacy policy.

Purposes and Legal Bases for Processing

Your data is processed for the following purposes, each based on an appropriate legal basis:

• Manage your reservations and orders and ensure customer relations (performance of the contract).
• Handle invoicing and comply with our accounting and tax obligations (legal obligation).
• Respond to your requests sent via the forms or by email (legitimate interest).
• Send you, where applicable, commercial communications or a newsletter (consent).
• Ensure the security, proper functioning and audience measurement of the Site (legitimate interest and, for non-essential cookies, consent).

Recipients of the Data

Your data is intended for the authorised departments of CARIBBEAN TRIP and, within the limits of their respective duties, for the following providers:

• the Site’s host, the company OVH (European Union);
• the Amenitiz booking platform, which handles the management of reservations and payments;
• the technical providers (maintenance, email sending, audience measurement) acting on behalf of the publisher;
• the administrative or judicial authorities where required by law.

Your data is never sold, rented or transferred to third parties for commercial purposes.

Transfers Outside the European Union

Your data is in principle processed and stored within the European Union. Where certain providers (in particular for audience measurement or social networks) involve a transfer of data outside the European Union, such transfer is governed by appropriate safeguards, such as the standard contractual clauses adopted by the European Commission.

Retention Period

Your data is retained for the period strictly necessary for the purposes pursued:

• Reservation, order and invoicing data: for the duration of the contractual relationship, then archived in accordance with legal obligations (accounting records being kept for ten years).
• Customer relationship management and prospecting data: for up to three years from our last contact.
• Browsing data and cookies: thirteen months at most.
• Requests via the contact forms: for the time necessary to process them.

Data Security

CARIBBEAN TRIP implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. Payment data is processed using secure protocols by specialised providers.

Cookies

A cookie is a small file placed on your device when you visit the Site. The Site may use different types of cookies:

• Strictly necessary cookies: essential to the functioning of the Site (browsing, cart, security); they do not require your consent.
• Audience measurement cookies and third-party cookies: intended to analyse traffic on the Site or linked to social networks; they are only placed after your consent.

You can express and change your choices at any time via the cookie management banner and/or by configuring your browser. The validity period of your consent does not exceed thirteen months.

Your Rights

In accordance with the applicable regulations, you have the following rights over your data:

• a right of access and rectification;
• a right to erasure (“right to be forgotten”);
• a right to object and a right to restrict processing;
• a right to the portability of your data;
• the right to withdraw your consent at any time;
• the right to set guidelines regarding the fate of your data after your death.

To exercise these rights, simply send your request to bcauzot@gmail.com; proof of identity may be requested. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, or at www.cnil.fr.

Policy Amendments

This privacy policy may be amended to take account of legal, regulatory or technical developments. The applicable version is the one in force at the time you consult the Site.