ميثاق حماية بيانات العملاء الشخصية

1. شركة أكور (Accor SA) والشركة الأم لمجموعة أكورللفنادق (Accor) ومقرها الرئيسي في 82 شارع هنري فارمان، 92130 إيسي ليه مولينو، فرنسا؛
2. الشركات الفرعية وغيرها من الشركات التابعة لشركة أكور (Accor SA) التي تعمل في الأنشطة الفندقية الخاصة بمجموعة أكور للفنادق (Accor) ؛و
3. الفنادق التي تعمل تحت إحدى العلامات التجارية التابعة لمجموعة أكور للفنادق (Accor) في العالم (Raffles, Sofitel Legend, Fairmont, SO/, Sofitel, onefinestay, Rixos, MGallery by Sofitel, Pullman, Swissôtel, 25hours Hotels, Novotel, Mercure, Mama Shelter, Adagio, JO&JOE, ibis, ibis Styles, ibis budget, Grand Mercure, The Sebel et hotelF1)). يتم تحديث قائمة العلامات التجارية بانتظام ويمكن الرجوع إليها على الموقع www.all.accor.com.

• تعالج شركة أكور (Accor SA) بياناتك لأنها مسؤولة عن إدارة النظام المركزي للحجز الذي يسمح لشركة أكور (Accor SA) بجمع البيانات اللازمة لتنظيم إقامتك في الفنادق التي تعمل تحت إحدى علامات أكور للفنادق (Accor) التجارية، وإيصال هذه البيانات إلى الفنادق المعنية. كما تدير شركة أكور (Accor SA) قاعدة بيانات العملاء العالمية المقيمين في الفنادق التي تعمل تحت إحدى العلامات التجارية التابعة لمجموعة أكور للفنادق (Accor). وتدير شركة أكور (Accor SA)، بمساعدة شركة Pro-Fid SAS التابعة لها برنامج الولاء Le Club Accor
• يعالج كل فندق بياناتك لإدارة علاقته التعاقدية معك (الفواتير، والدفع، وإدارة الحجز، وما إلى ذلك) ولتنفيذ الأنشطة التسويقية والامتثال لالتزاماته القانونية.

1. المشروعية: لا نستخدم البيانات الشخصية إلا إذا:
   • حصلنا على موافقة الشخص، أو
   • وجود ضرورة لتنفيذ العقد يكون الشخص طرفًا فيه، أو
   • وجود ضرورة للامتثال لالتزام قانوني، أو
   • ضرورة الحفاظ على مصالح الشخص الهامة، أو
   • لدينا مصلحة مشروعة نسعى لتحقيقها من خلال استخدام البيانات الشخصية على أن لا يؤثر هذا الاستخدام على حقوق الشخص.
2. الإنصاف: إننا نوضح لك كيفية الاستفادة من البيانات الشخصية التي نجمعها.
3. الأغراض المحددة وتقليل البيانات: إننا نستخدم البيانات الشخصية الضرورية التي نحتاجها فقط. إذا تمكنا من تحقيق نفس النتيجة باستخدام بيانات شخصية أقل، فإننا نتأكد من استخدام الكمية من البنانات اللازمة فقط.
4. الشفافية: نُعلم الأشخاص المعنيين حول كيفية استخدامنا لبياناتهم.
5. نسهل ممارسة حقوق الأشخاص المعنيين في الوصول إلى بياناتهم الشخصية، وتصحيح ومحو البيانات وحقهم في معارضة استخدامها.
6. مدة تخزين البيانات: نحتفظ بالبيانات الشخصية لفترات معينة فقط:
7. نحافظ على أمن البيانات الشخصية، أي سلامتها وسريتها.
8. في حالة استخدام البيانات الشخصية عن طريق طرف ثالث، نتأكد من أنه قادر على حماية البيانات الشخصية.
9. في حالة نقل البيانات الشخصية خارج الاتحاد الأوروبي، نتأكد أن هذا النقل محكوم بالأحكام القانونية المناسبة.
10. إذا تم اختراق البيانات الشخصية أو في حالة كانت ضائعة أو مسروقة أو تالفة أو غير متوفرة ...، فإننا نبلغ هذا الانتهاك إلى سلطات حماية البيانات المختصة والأفراد المعنيين في الدولة المعنية في حال كان هناك خطر جوهري متوقع جراء هذا الانتهاك لحقوق وحريات الشخص المعني.

Accor SA is established in France and as such its data processing activities first have to be compliant with the European General Data Protection Regulation (“GDPR”). But in addition to the GDPR, there are other laws and regulations which, depending on your specific situation, may also govern the use of your personal data. You will find below additional information that may apply to you.

Last Updated:  October 8, 2021

14.1. Privacy Policy for California residents

This “Privacy Policy for California residents” is part of the Accor SA “Customer Personal Data Protection Charter” and should therefore be read in conjunction with it.

The California Consumer Privacy Act 2018 (“CCPA”) requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of California residents regarding their personal information.

The CCPA defines “Personal Information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. In the context of this “Privacy Policy for California residents” section, the term “Personal Information” will refer to this information.

Accor SA may collect the categories of Personal Information as described in section 4. What personal data is collected? of our Customer Personal Data Protection Charter.

If you would like more details about when your Personal Information is collected, what purposes it is collected for and how long we retain it, please see sections below of our Customer Personal Data Protection Charter:

5. When is your personal data collected?
6. What purposes is your data collected for and how long do we retain it?

In addition to the purposes set forth in our Customer Personal Data Protection Charter, we currently collect and have collected and “sold” (see section “Do Not Sell” below) Personal Information for the following business or commercial purposes:

• Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Debugging to identify and repair errors that impair existing intended functionality
• Performing services, including maintaining or servicing accounts, providing customer service, processing reservations, verifying customer information, processing payments, providing advertising or marketing services, or providing analytic services
• Undertaking activities to verify or maintain the quality or safety of our services, and to improve, upgrade, or enhance same
• Commercial purposes, such as by inducing another person to buy, join, subscribe to, provide, or exchange property or information, or enabling or effecting, directly or indirectly, a commercial transaction

We may share your Personal Information with internal and external recipients subject to the conditions set forth in section 7. Conditions of third-party access to your personal data of our Customer Personal Data Protection Charter. The categories of third parties to whom your Personal Information may be disclosed or “sold” (see section “Do Not Sell” below) on a need-to-know basis are:

• Service Providers: external Service Providers;
• Other Third Parties: appropriate persons within hotels and Accor Group entities; commercial partners; social networking sites; local authorities (if and as legally required).

We do not knowingly “sell” (see section “Do Not Sell” below) the Personal Information of minors under 16 years of age. For more information on data collected in relation to persons under 16 years of age and to arrange for this information to be deleted, see section 4. What personal data is collected? of our Customer Personal Data Protection Charter.

RIGHT TO KNOW ABOUT PERSONAL INFORMATION

As a California resident, you have the right to request that we disclose what Personal Information we have collected about you in the 12-month period preceding your request, and more specifically the following:

• The categories of Personal Information we have collected about you;
• The categories of sources from which the Personal Information was collected;
• The business or commercial purpose for collecting Personal Information, and if applicable, for “selling” Personal Information;
• The categories of Personal Information that we “sold” (if applicable) or disclosed for a business purpose;
• The categories of third parties to whom we have “sold” (if applicable) or disclosed Personal Information; and
• The specific pieces of Personal Information we have collected about you.

RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION

As a California resident and subject to certain exemptions, you have the right to request the deletion of your Personal Information that we collect.

HOW TO SUBMIT A REQUEST TO KNOW OR TO DELETE

You may submit a request to know or to delete:

• by sending an email to data.privacy@accor.com
• by contacting us at 877 856 1464 (toll free), or
• by writing to the address below:

Accor SA
Département Protection des Données Personnelles (Data Privacy Department)
82, rue Henri Farman - ACC 1208
CS 20077
92445 Issy-les-Moulineaux – France

When you submit your request, we will need to verify your identity pursuant to regulations adopted by the Attorney General and ask you to provide sufficient information in order to allow us to reasonably verify you are the person about whom we have collected information.

As part of our verification method, we will seek to verify the information in your request with the Personal Information we maintain about you. We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure or deletion as applicable. In addition, you may be required to submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

We will respond to your request to know or to delete within 45 days, unless additional time is needed, in which case we will let you know.

AUTHORIZED AGENTS

The CCPA allows California residents to designate an authorized agent to exercise their rights. If you submit a request via an authorized agent acting on your behalf, we will require this authorized agent to provide proof that you gave the agent signed permission to submit the request.

“DO NOT SELL MY PERSONAL INFORMATION”: RIGHT TO OPT-OUT OF THE SALE OF PERSONAL INFORMATION

Under the CCPA, the disclosure of Personal Information to a third party for monetary or other consideration of value can be considered as a "sale", the term “sale” being broadly defined.

The CCPA defines a “sale” as selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a California resident’s Personal Information to another business or a third party for monetary or other valuable consideration.

The CCPA gives residents of California the right to opt out of the "sale" of their Personal Information.

We do not “sell” customers’ personal data in the strictest sense of the term. However, we offer Californian residents the opportunity to exercise this right, should one of our business practices be considered a “sale” within the meaning of the CCPA.

To opt-out of our use of third-party advertising cookies, see the “COOKIES” section below.  

You may submit a request to opt-out of the sale of your Personal Information:

• by using this form Do Not Sell My Personal Information
• by sending an email to data.privacy@accor.com,
• by contacting us at 877 856 1464 (toll free),
• by writing to the address below:

Accor SA
Département Protection des Données Personnelles (Data Privacy Department)
82, rue Henri Farman - ACC 1208
CS 20077
92445 Issy-les-Moulineaux – France

COOKIES

On the Accor websites, Accor and its partners store or retrieve information on your device in order to: operate the websites and provide you with the services you request (these cannot be rejected), enhance and customize website functionalities, measure website audience and performance, profile your interests to provide you with relevant advertising and allow you to interact with social networks.
You can modify your choices at any time by clicking on the "Cookies" link at the bottom of the respective website.

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the websites do not currently interpret, respond to or alter their practices when they receive “Do Not Track” signals.

FINANCIAL INCENTIVES AND NON-DISCRIMINATION

We will not discriminate against you for exercising any of your CCPA rights.
Unless permitted by the CCPA, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services;
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, as permitted by and in compliance with the CCPA, we may offer you certain financial incentives that can result in a different price, rate, level, or quality of services. Any financial incentive we offer will be reasonably related to the value of your Personal Information and your participation will be subject to any applicable terms. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

SHINE THE LIGHT LAW

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third parties’ direct marketing purposes (as those terms are defined in that statute).
This information is as follows: in accordance with European regulations, we will only disclose your personal information to third parties for the third parties’ direct marketing purposes with your express prior consent and a prior information on the third parties your information will be disclosed to.

14.2 Notice to Nevada residents

Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person.  We do not currently sell personal information as defined in the Nevada law.  However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales.  Opt-out requests may be sent to data.privacy@accor.com.