Privacy Policy

Article 1 Data controller

The data controller is MIRAMBEAU PALACE, SAS with a share capital of €1,000, registered in Saintes under number 983 990 789, Château de la Trémoille, 1 avenue des Comtes Duchâtel, 17150 Mirambeau, France. For any question about your data: sales@chateaumirambeau.com.

Article 2 Data we collect

You can browse the website without giving us any personal data. We only collect data when you provide it to us or when your browsing requires it.

2.1 When you browse. IP address, device and browser type, pages viewed, date and time of connection and, if you accept them, information from analytics, map, advertising or social media cookies (see Article 9).

2.2 When you book or buy a ticket. Title, surname, first name, email address, telephone, postal address, dates of stay, services chosen, special requests and payment data. Card data is processed directly by our secure payment provider; the Château never stores the security code.

2.3 During your stay. Identity document on arrival and, for guests of foreign nationality, the individual police registration form required by French law. Stay preferences and, if you tell us, allergies or dietary requirements, used solely to prepare your meals during this stay and, if you agree, future ones.

2.4 When you request a quote or a private event. Contact details of the organiser, company if applicable, nature and programme of the event, number of guests and, where needed for the organisation, the guest list and contact details of your suppliers.

2.5 When you contact us or sign up to our newsletter. Surname, first name, email address, telephone and the content of your message.

2.6 When you apply for a job. CV, cover letter and recruitment correspondence.

Mandatory fields are marked with an asterisk. Without them, we cannot process your request.

2.7 Minors. Our booking, ticketing and quotation services are reserved for adults. Every booking must be made by a person aged 18 or over, who remains responsible for it, including when it concerns an accompanying minor. We do not knowingly collect data from minors; if we learn that a minor has sent us data, we delete it.

Article 3 Purposes and legal bases

We use your data to:

• process your bookings, tickets, quotes and contracts, manage your stay or event, invoice and collect payments – on the basis of performing the contract or pre-contractual steps taken at your request;
• comply with our legal obligations, including accounting, tax and police registration requirements – on the basis of a legal obligation;
• reply to your messages, measure your satisfaction, secure the website and prevent fraud – on the basis of our legitimate interest;
• send you our newsletter and offers – on the basis of your consent, or of our legitimate interest where you are already a guest and the offers relate to similar services; you can object at any time;
• take your allergies or dietary requirements into account – on the basis of your explicit consent;
• measure website traffic, display interactive maps and measure the effectiveness of our advertising through non-essential cookies – on the basis of your consent.

Automated decision-making and profiling. No decision producing legal effects concerning you or similarly significantly affecting you is taken solely on the basis of automated processing. If you accept advertising cookies, our advertising partners may build a profile of your interests from your browsing in order to show you relevant advertising, in particular on social media. This profiling has no other consequence for you; you can refuse it or withdraw your consent at any time via the “Cookie preferences” button.

Article 4 Recipients

Your data is intended for the Château de Mirambeau team and, for business management purposes, for I Estate France, President of Mirambeau Palace. It is shared, strictly within the limits of their assignment, with our service providers: website host, website developer, Thaïs booking and property management tools, BookingShake for event management, Billetweb for ticketing, payment provider, newsletter tool, and the caterers and event suppliers engaged for your event. It may be disclosed to administrative or judicial authorities where required by law.

When you accept the relevant cookies, some browsing data is also sent to our analytics, mapping and advertising partners, listed in our cookie manager (see Article 9). We never sell your data.

Article 5 Transfers outside the European Union

Most of our technical service providers are established in the European Union. Some of our analytics and advertising partners may transfer certain data to the United States. These transfers are governed by the EU–US Data Privacy Framework, recognised by the European Commission adequacy decision of 10 July 2023 where these companies are certified to it, or by standard contractual clauses. Any other transfer outside the European Union would be subject to appropriate safeguards in line with the GDPR.

Article 6 Retention periods

Booking and guest data is kept for the duration of the business relationship, then for 3 years from your last stay or last contact for marketing purposes. Data relating to prospects and quote requests that do not proceed is kept for 3 years from the last contact. Invoices and accounting records are kept for 10 years. Police registration forms are kept for 6 months. Information on allergies and dietary requirements is kept in your guest profile, if you agree, so that we do not need to ask you again on future visits; it is deleted 3 years after your last stay or as soon as you ask. If you do not want it kept, it is deleted after your stay or event. Card data used as a guarantee is kept until the end of the stay or service. Job applications are kept for no more than 2 years after the last contact, with your agreement. Browsing data is kept for no more than 13 months. At the end of these periods, data is deleted or anonymised.

Article 7 Security

We apply appropriate technical and organisational measures (secure connection, access restricted to authorised staff, service providers bound by confidentiality) to protect your data against loss, alteration or unauthorised access.

Article 8 Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict its processing, to object to it, in particular to direct marketing, and to data portability. You can withdraw your consent at any time and set instructions regarding your data after your death.

To exercise these rights, write to sales@chateaumirambeau.com or to Château de Mirambeau, Château de la Trémoille, 1 avenue des Comtes Duchâtel, 17150 Mirambeau, France. If we have reasonable doubts about your identity, we may ask you for proof. We reply within one month. Every marketing email contains an unsubscribe link.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr (opens in a new tab)).

If you have a French telephone number, you can register free of charge on the Bloctel telemarketing opt-out list (www.bloctel.gouv.fr (opens in a new tab)).

Article 9 Cookies and trackers

9.1 What is a cookie? A cookie is a small file stored on your device when you visit the website. It allows your browser to be recognised for as long as it remains valid.

9.2 Cookies exempt from consent. Some cookies are strictly necessary for the website to work: security, online booking, remembering your cookie choice. They are set without your consent.

9.3 Cookies requiring your consent. Analytics, interactive map, video, social media and advertising cookies are only set after you agree. The up-to-date list of these cookies, their issuers, purposes and durations is available at any time in our cookie manager, via the “Cookie preferences” button at the bottom of every page.

9.4 Your choice. You can accept, refuse or customise cookies from the banner shown on your first visit, and change your choice at any time via the “Cookie preferences” button. Your choice is kept for 6 months and cookies for no more than 13 months.

Learn more: www.cnil.fr/fr/cookies-et-autres-traceurs (opens in a new tab).