Privacy & Cookies Policy

Effective as of 22 October 2026

1. Data Controller

Company: UMO SAS. – Hôtel Les Glycines –
Address: 33 rue Saint-Pierre, 89450 Vézelay, France
Telephone: +33 (0)3 86 47 29 81
GDPR contact e-mail: reservations@vezelay-glycines.com
SIRET (registered office): 908 280 324 00017
Intra-community VAT: FR16908280324

2. Data Collected and Purposes

We collect and process your personal data for specific purposes:

Management of hotel bookings and stays:

  • Data: Surname, first name, postal address, e-mail address, telephone number, dates of stay, room preferences, bank card details (booking guarantee). This data is collected when you book directly: via our online booking engine, by telephone or by e-mail.
  • Legal basis: Performance of the booking contract and pre-contractual measures.

Individual police form (legal obligation):

  • Data: Surname, first name, date and place of birth, nationality, usual residence, telephone number and e-mail address of guests of foreign nationality.
  • Legal basis: Legal obligation (Art. R. 814-1 of the French Code on the Entry and Residence of Foreigners and the Right of Asylum).

Enquiries via the website contact form:

  • Data: Name, e-mail address, telephone number where provided, content of your message.
  • Legal basis: Pre-contractual measures / legitimate interest (responding to your enquiry).

Bookings via third-party platforms (OTAs):

  • When you book via partner platforms (e.g. Booking.com, Expedia), these platforms transmit to us the data required to carry out your stay. These platforms act as separate data controllers. We are not responsible for their collection of personal information and invite you to consult their own privacy policies.

Season’s greetings:

  • Data: Surname, first name and postal address of guests who stayed with us during the year, for sending a greeting card by post.
  • Legal basis: Legitimate interest (relationship with our guests). You may object at any time (see section 6).

Audience measurement and online advertising:

  • Data: Browsing data and technical identifiers, via cookies and trackers (see section 7).
  • Legal basis: Consent.

3. Data Recipients

Your personal data is primarily intended for the authorised staff of Hôtel Les Glycines (reception, management, accounting).

It may also be transmitted to our processors and technical partners:

  • Thaïs PMS: provider of our hotel management software and of our online booking engine (booking sub-domain of the website). Thaïs processes booking data on our behalf, as a data processor.
  • Website host: IONOS SARL, 7 Place de la Gare, 57200 Sarreguemines, France. SIRET: 431 303 775 00016.
  • Online booking platforms (Booking.com, Expedia): synchronisation of availability and booking records.
  • Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland): audience measurement (Google Analytics), advertising measurement (Google Ads), tag management (Google Tag Manager), anti-spam protection of our forms (reCAPTCHA) and access map (Google Maps). The measurement and advertising tools are only activated after your consent (see section 7). To learn more: How Google uses information from sites that use its services and Google Privacy Policy.
  • Tripadvisor LLC: display of the “Travellers’ Choice” award on the home page, via a module loaded from Tripadvisor’s servers (Tripadvisor privacy policy).
  • Public or judicial authorities, where required by a legal obligation.

4. Retention Periods

Your data is kept only for as long as necessary for the purposes pursued:

  • Bookings and invoicing: 10 years (legal accounting and tax obligation).
  • Individual police forms: 6 months from the guest’s arrival.
  • Contact enquiries without a booking: 12 months from the last exchange.
  • Cookies and trackers: 13 months maximum; your consent choice is stored for 6 months.

5. Transfers Outside the European Union

Wherever possible, your data is hosted within the European Union. The use of third-party tools (in particular the Google and Tripadvisor services described above) may involve a transfer of data to the United States. In that case, we ensure that the transfer is strictly governed by appropriate safeguards: an adequacy decision of the European Commission (EU-US Data Privacy Framework) or Standard Contractual Clauses.

6. Your Rights

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

  • Right of access: Obtain confirmation that your data is being processed and receive a copy of it.
  • Right to rectification: Request the correction of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): Request the deletion of your data within the limits provided by law.
  • Right to restriction of processing: Request the temporary freezing of the processing of certain data.
  • Right to data portability: Receive your data in a structured, reusable format.
  • Right to object: Object at any time to the processing of your data for commercial prospecting purposes.

To exercise your rights, you can contact us by e-mail at reservations@vezelay-glycines.com or by post at the hotel’s address.

If a dispute remains unresolved, you have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, the French data protection authority) on its website (www.cnil.fr) or by post at the following address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure the proper functioning of the site, analyse its audience and measure the effectiveness of our advertising campaigns.

A. Consent management on our website

On your first visit, an information banner allows you to accept, refuse or configure your choices regarding the storage of non-essential cookies. You can change your choice at any time via the “Cookies” tab displayed at the bottom of every page of our website.

Our online booking engine, accessible on a dedicated sub-domain, has its own consent banner: audience measurement cookies are only stored there after your agreement.

B. Cookies and services used

  • Strictly necessary cookies: operation of the website, storage of your chosen language and of your consent choices. They do not require consent.
  • Audience measurement, Google Analytics: website traffic statistics. Only stored after your consent. To learn more: How Google uses this data.
  • Advertising measurement, Google Ads: measurement of the effectiveness of our campaigns. Only stored after your consent.
  • Google Tag Manager: technical tool for managing measurement tags; configured to respect your consent choices (Consent Mode).
  • Google reCAPTCHA: protection of our contact forms against automated submissions (legal basis: legitimate security interest). This service is subject to Google’s Privacy Policy and Terms of Service.
  • Google Maps: display of the map showing how to reach the hotel.
  • Tripadvisor module: display of the “Travellers’ Choice” award on the home page.

C. Managing cookies directly in your browser (computer and smartphone)

You can also configure your internet browser to accept, block or delete cookies. Here are the official help links for setting your preferences depending on your device and browser:

Managing cookies on a computer:

Managing cookies on a smartphone or tablet:

D. Third-party opt-out tools

To block audience measurement or targeted advertising cookies globally, you can consult: