Data protection - RGPD

Appendix 2 - General Conditions of Sale and Use - GetWelcom - RGPD

Chapter 1: Introduction

GetWelcom and Personal Data Protection

In today's connected world, the protection of personal data is more than a legal obligation; it is an essential component of the trust and relationships we build with our users and partners. At GetWelcom SAS, we understand the crucial importance of the privacy and security of personal data.

GetWelcom's Commitment

GetWelcom is firmly committed to respecting the principles of the General Data Protection Regulation (GDPR) of the European Union, a regulatory standard designed to strengthen and unify data protection for all individuals within the European Union. Our data protection policy and practices are designed to ensure the secure, transparent, and compliant management of the personal data we collect, process, and store as part of providing our innovative services to the hotel industry.

Chapter 2: About this Policy

Objective of the Policy

This Personal Data Protection Policy defines the principles and guidelines for the collection, processing, storage, and management of personal data by GetWelcom. Our aim is to ensure that the rights of individuals are respected in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection legislation. It aims to establish transparency with our users, partners, and employees regarding GetWelcom's personal data practices.

Scope and Application

This Policy applies to all personal data collected by GetWelcom during the use of our services by customers, hotel partners, and users of our website and applications. It also concerns personal data collected during events, marketing campaigns, or when you contact our customer service.

The Policy covers the following aspects of data protection:

‍

• The data protection principles that GetWelcom is committed to respecting.
• The rights of individuals concerning their personal data and how to exercise them.
• The security measures put in place to protect personal data.
• Obligations in terms of reporting and managing data breaches.
• Information on the transfer of personal data to third parties or outside the European Economic Area (EEA).

GetWelcom is committed to:

• Process personal data in a fair, legal, and transparent manner.
• Collect personal data only for specific, explicit, and legitimate purposes.
• Limit the collection and storage of personal data to what is strictly necessary for the purposes for which they are processed.
• Ensure the accuracy of personal data and update it as required.
• Keep personal data in a form that allows the identification of data subjects for a period that does not exceed that required for the purposes for which they are processed.
• Protect personal data from loss, misuse, unauthorized access, and disclosure.
• Respect the rights of data subjects by providing an easy way to exercise these rights.

Chapter 3: Personal Data Rights

We will only process personal data if you have consented to such processing, unless we are legally authorized or required to collect and process more personal data about you.
 Therefore, if we process data only based on your consent, we will use the data only for the purposes indicated in this document.

The application of your rights: Right of Access

• Definition: Data subjects may request and obtain a copy of their personal data processed by GetWelcom.
• Application at GetWelcom: Users can request access to their data by contacting our DPO (Data Protection Officer) via the following email address: donnees-personnelles@getwelcom.com.
• Right to Rectification
• Definition: Users have the right to have their personal data rectified if they are inaccurate or incomplete.
• Application at GetWelcom: Users can update their personal data directly in their user area or by submitting

a request for correction via the following email address: donnees-personnelles@getwelcom.com.

Right to Erasure (“Right to Be Forgotten”)

• Definition: Data subjects may request the deletion of their personal data.
• Application at GetWelcom: We allow users to request the deletion of their account and associated data, subject to legal data retention obligations. The request can be submitted to the following email address: donnees-personnelles@getwelcom.com

Right to Data Portability

• Definition: Data subjects have the right to receive the personal data they have provided to GetWelcom, in a structured, commonly used and machine-readable format.
• Application at GetWelcom: We facilitate the provision of users' personal data upon request, allowing their easy transfer to another service. The request can be submitted to the following email address: donnees-personnelles@getwelcom.com


Right of Opposition

• Definition: Users have the right to object to certain forms of processing of their personal data, including processing for direct marketing purposes.
• Application at GetWelcom: We offer users the possibility to unsubscribe from marketing communications and to oppose other forms of processing of their data. The request can be submitted to the following email address: donnees-personnelles@getwelcom.com
• GetWelcom is committed to providing a quick and transparent response to your requests, and to respecting your rights by contacting our Data Protection Officer at the following email address: donnees-personnelles@getwelcom.com

Chapter 4: Responsibility and Acquiring Consent

• It is the responsibility of the Hotel Property Manager to collect consent, in accordance with the provisions of the applicable privacy and/or data protection legislation in force in its jurisdiction, from end-user customers regarding the processing of personal information set out in chapter 6 below.
• The Hotel Property Manager will be held responsible for any claim, complaint or administrative penalty imposed on GetWelcom resulting from the Hotel Property Manager's failure to obtain the required consent from its end customers.

Chapter 5: Personal Data Collection

When you register on GetWelcom as Hotel Property Managers, the following information will be collected about you:

• email address;
• Your full name, address and contact details;
• Information about your hotel (s) /accommodation (s) that we may use in order to provide you with customer experience management services;
• We collect information about customers from our Hotel Property Managers:
• Their reservation, including their names, contact details, dates of stay, dates of stay, number of people, number of the room booked, and amounts paid;
• Any information they have filled in, that you have chosen to add as fields in your Hotel Property Managers interface.

Chapter 6: Use of Personal Data

The personal data that we collect about our users and that we use includes data that is required to:

• To provide you with the Services as part of our ongoing business activities.
• Conduct analyses and produce statistics on the performance of our applications and our website.
• To offer you the best user experience when using our applications and service interfaces.
• The data collected and processed is both general (for example, for technical purposes) and personal, such as contact details, signatures and other information that you have entered (or that of your customers if you are a Hotel Manager), depending on the services selected and used.

The data processed may specifically include your name, certain identification numbers, IP address, browser type, and system software.

As is the case with most organizations that operate websites and applications, we also collect certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, timestamp, and click flow data. We use this information to analyze trends, administer the site, and track user movements on our application.

Chapter 7: List of subcontractors & data transfer

As part of providing our services, it may be necessary for us to share certain personal information that we manage with third party service providers. However, we ensure that the volume of shared data is reduced to the minimum necessary for the provision of services requiring the collaboration of these external partners.

GetWelcom may need to transfer personal data concerning you, or your customers, to entities based outside your country of physical residence.

We provide below a detailed list of our subcontractors, including the nature of the services they provide as well as the location where your data is stored and processed. This transparency aims to assure you of our commitment to protect your information in accordance with the most stringent security and confidentiality standards:

Chapter 8: Data Retention Periods

GetWelcom deletes personal data in cases where the commercial purpose for which the data was collected or processed ceases to apply, or if applicable data protection regulations require us to delete such personal data, unless we have overriding legal obligations or interests in continuing to process personal data. personal information.

However, we will only keep your personal data for as long as necessary to provide you with GetWelcom services and for legitimate and essential business purposes, such as maintaining the performance of GetWelcom services, complying with our legal obligations, and resolving disputes.

The data can also be anonymized at the request of the Hotel Manager.

Chapter 9: Security Measures

We are committed to protecting the personal data of our users. We implement all appropriate technical and organizational measures, in accordance with industry standards, to protect your personal data against loss, alteration, theft or access by unauthorized third parties.

Notwithstanding the above, no system is completely secure, and GetWelcom will not be liable for damages or losses resulting from the inappropriate use of its services and/or any security breach leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of, or access to, data personal ones.

Chapter 10: Changes

The information provided in this policy may be amended in order to respond to new questions or changes. If we make significant changes, we may notify you by other means (for example, by email or by posting a banner on the website) before the changes take effect. Any changes made will take effect 30 days after the update date indicated above.

Last revised and updated on 01/04/2024.