Legal notice

Site design and build: Clickzou, web agency, 8 lotissement Palmola, 31660 Buzet-sur-Tarn, France

Site host: Gandi, registered office at 63-65 boulevard Masséna, 75013 Paris, France, registered under number 423 093 459 RCS Paris, EU VAT number FR81423093459

Photographs copyright: Société De Gestion Hôtelière and Frédéric Maligne.

Design & development of the site Clickzou – agence web – 8 lotissement Palmola – 31660 Buzet-sur-Tarn

Contact details of the site’s host Gandi – having its registered office at 63-65 boulevard Masséna in Paris (75013) FRANCE, registered under number 423 093 459 RCS PARIS, intra-Community VAT no. FR81423093459

Disputes After having referred the matter to the claims department and failing a satisfactory response within a period of 1 month, the customer may refer the matter to the Médiateur du Tourisme et du Voyage (the French tourism and travel ombudsman), whose contact details are set out below: Postal address: Médiation Tourisme et Voyage-BP 80 303 75 823-PARIS Cédex 17 Website: www.mtv.travel

Information collected on the site All data collected on this site, by whatever means, is for the exclusive use of the company De Gestion Hôtelière Le Palladia In accordance with article 34 of the loi 78-17 Informatique et Libertés of 6 January 1978 (the French Data Protection Act), you have a right of access, modification, rectification and deletion of the data concerning you. To exercise this right, contact us by e-mail: e.davoust@hotelpalladia.com. Or, by post, at the following address: HOTEL PALLADIA 271 Avenue de Grande Bretagne – 31300 TOULOUSE – FRANCE

GDPR 1. Data protection: Le Palladia takes the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the statutory provisions on data protection and with the present data protection declaration. Use of our site is possible without providing personal data. Insofar as personal data (for example the name, the address or the e-mail address) is collected on our site, this is always done on a voluntary basis. Save within the framework of the management of your bookings, such data shall under no circumstances be transmitted to third parties. We draw your attention to the fact that the transmission of data over the Internet (for example communication by e-mail) may present security weaknesses. Complete protection of data against access by third parties is not possible.

2. Collection of personal data We collect personal data only where such data is necessary for the provision of the specific service. You may visit our site without providing any personal information. We retain only so-called “browsing” data with no personal reference, such as the name of your internet service provider, the page from which you visit us or the name of the file requested. This data is evaluated exclusively for the improvement of our site and permits no conclusion to be drawn as to your person. Personal data relating to the identity of the customer, such as name, address, postal address, telephone number or e-mail address, is collected on our website only where you provide it voluntarily when using the website’s contact forms or when contacting us by any other means, for example directly by e-mail.

3. Use of personal data Mandatory fields and optional information. Please note that there are mandatory fields for any collection of data through the forms on our website. These are marked with an asterisk; an entry is required in order to process your request. All other information is optional. Should you also provide information in the other fields, it will be evaluated for statistical purposes and in order to improve our offering. Grounds for the processing operations. The personal data you transmit to us will be used solely for the purposes for which you sent it to us. This includes in particular the processing of your request for a booking, a request for information, a search for a function room or the sending of our newsletter. Use for other purposes, in particular for advertising purposes. We do not exploit any data received for advertising purposes.

4. Transfer of personal data to third parties Your data will not be transferred unless we are legally obliged to do so (for example, a request from an investigating authority) or authorised to do so (for example, within the framework of the processing of booking data), or unless you have expressly consented to its transfer to third parties. In particular, data is transferred to third parties where this is necessary for the performance and the processing of the contract. Data is transferred to third parties in particular, and without limitation, in connection with your bookings and your enquiries regarding the availability of function rooms for the organisation of your events or the purchase of gift boxes. These third parties are of course required to protect your data and to use it solely for the specific purpose assigned to them. Furthermore, they are required to process the data in accordance with this data protection statement and with the applicable legal situation. Le Palladia regularly verifies that these third parties comply in particular with the GDPR.

5. Right to information, erasure and blocking You have the right to obtain, free of charge and at any time, information about your stored personal data, its origin and its recipients and the purpose of the processing of the data, as well as a right to rectification, blocking or deletion of such data, subject to legal obligations. To exercise these rights, you need only request this from us using our contact form on the site: https://www.hotelpalladia.com or send a letter to the attention of: Hôtel Palladia Att responsable du traitement des données personnelles 271 Avenue de Grande Bretagne 31300 Toulouse. In order to ensure the confidentiality and the security of personal data, any request must be accompanied by information or documents establishing unequivocally the identity of the applicant. The data controller shall reply to the applicant within one month of receipt of the request (a period which may be extended to 2 months in the event of complexity or of a large number of requests). Article 12-5 of the GDPR provides, however, that where the requests of a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either charge a reasonable fee or refuse to act on those requests.

6. Data security Your personal data, which is exchanged with us via the website, is generally transmitted in encrypted form, which corresponds to the current state of the art. We protect our website and other systems by technical and organisational measures against the loss, destruction, access, modification or distribution of your data by unauthorised persons. The partners and processors providing the technical components implement the most recent techniques in order to ensure the security of the data which they process on our behalf.

7. Data storage Your personal data is stored in France or, for certain of our partners, in Europe. No data is transferred outside European territory.

8. Use of cookies In order to make your visit to our website appealing and to enable the use of certain functions, we use cookies on various pages. These are small text files containing configuration information which are stored on your mobile device or computer. Some of the cookies we use are deleted after the end of the browser session, that is to say once your browser has been closed (session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies). You may at any time delete the cookies stored locally on your computer or configure your browser so that you are informed of the setting of cookies and decide individually whether to accept them, or so as to exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited. Should you wish to receive further information on the use of these cookies, please consult our cookie statement.

9. External links Le Palladia may integrate into its own website features originating from external websites belonging to its partners and subcontractors in order to ensure a better service for users (in particular room booking, sale of gift boxes, etc.). Le Palladia has audited those sites in order to verify their legal compliance, in particular as regards the management of personal data and the application of the GDPR. As a general rule, websites contain links to third-party websites (“external links”), over the content and design of which Le Palladia has no influence. The operator of the linked site is solely responsible for the content and for the accuracy of the information provided therein. At the time the link was established, Le Palladia could have no knowledge of any potential infringement of the law. Le Palladia has no influence over the current or future content of the linked websites. The placing of external links does not mean that Le Palladia adopts as its own the third-party content that may be accessed under the links. Le Palladia cannot reasonably be expected to check and examine the external links without concrete evidence of possible infringements of the law. Should we nevertheless become aware of infringements of the law, those external links will be removed immediately.

10. Newsletter Should you wish to subscribe to the newsletter offered on the website, we require an e-mail address from you together with the information enabling us to verify that you are the owner of the e-mail address provided and that you consent to receiving the newsletter. No other data will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You may at any time withdraw your consent to the storage of the data, to the e-mail address and to their use for sending the newsletter, for example via the “Unsubscribe” link provided at the foot of all our newsletters.

11. Amendments to data protection regulations New data protection rules apply to future contacts with Le Palladia. The former provisions relating to data protection continue to apply to data already stored, unless the law does not permit this.

12. Amendment of this policy Le Palladia reserves the right to amend, adapt and update its data protection policy at any time in accordance with the law in force.

13. Legal information The GDPR may be consulted on the website of the CNIL, the French data protection authority: https://www.cnil.fr/fr/reglement-europeen-protection-donnees Any person who considers that they have been prejudiced in the application of their rights may refer the matter to the CNIL: https://www.cnil.fr

Discover our CSR environmental charter

info@hotelpalladia.com Find us 271 Av. de Grande Bretagne, 31300 Toulouse +33 5 62 12 01 20 Facebook Linkedin Youtube Instagram Hotel website design

Le Palladia takes the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the statutory data protection provisions and with the present data protection statement.

The use of our site is possible without providing personal data. Insofar as personal data (for example the name, the address or the e-mail address) is collected on our site, this is always done on a voluntary basis. Save within the framework of the management of your bookings, such data will under no circumstances be transferred to third parties. We draw your attention to the fact that the transmission of data over the Internet (for example communication by e-mail) may present security vulnerabilities. Complete protection of data against access by third parties is not possible.

We collect personal data only where it is necessary for the provision of the specific service. You may visit our site without providing personal information. We retain only so-called “browsing” data, without personal reference, such as the name of your Internet service provider, the page from which you visit us or the name of the file requested. This data is evaluated exclusively for the improvement of our site and allows no conclusion to be drawn as to your person.

Personal data relating to the identity of the customer, such as the name, the address, the postal address, the telephone number or the e-mail address, is collected on our website only where you provide it voluntarily when you use the contact forms of the website or contact us by another means, for example directly by e-mail.

Mandatory fields and optional information. Please note that there are mandatory fields for any collection of data through the forms on our website. These are marked with an asterisk; an entry is required in order to process your request. All other information is optional. Should you also provide information in the other fields, it will be evaluated for statistical purposes and in order to improve our offering.

Justification of the processing. The personal data that you transmit to us will be used solely for the purposes for which you sent it to us. This includes in particular the processing of your request for a booking, a request for information, a search for a room or the sending of our newsletter.

Use for other purposes, in particular for advertising purposes. We do not exploit any data received for advertising purposes.

Your data will not be transmitted unless we are legally obliged to do so (for example a request from an investigating authority) or authorised to do so (for example in connection with the processing of booking data) or unless you have expressly consented to its transmission to third parties.

In particular, the data is transmitted to third parties where this is necessary for the performance and processing of the contract. The data is transmitted to third parties in particular, and without limitation, in connection with your bookings and your enquiries as to the availability of rooms for the organisation of your events or the purchase of gift boxes. Those third parties are of course required to protect your data and to use it solely for the specific purpose assigned to them. They are furthermore required to process the data in accordance with this data protection declaration and with the applicable legal situation. Le Palladia regularly verifies that those third parties comply in particular with the GDPR.

You have the right to obtain, free of charge and at any time, information on your stored personal data, its origin and its recipients and the purpose of the processing of the data, as well as a right of rectification, blocking or deletion of such data, subject to legal obligations.

To exercise these rights, you need only request this from us using our contact form on the site: https://www.hotelpalladia.com or send a letter to the attention of: Hôtel Palladia – Att. responsable du traitement des données personnelles – 271 Avenue de Grande Bretagne – 31300 Toulouse.

In order to ensure the confidentiality and the security of personal data, any request must be accompanied by information or documents making it possible to establish unequivocally the identity of the applicant.

The data controller shall reply to the applicant within one month of receipt of the request (a period which may be extended to 2 months in the event of complexity or of a large number of requests).

Article 12-5 of the GDPR provides, however, that where the requests of a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may either charge a reasonable fee or refuse to act on those requests.

Your personal data, which is exchanged with us via the website, is generally transmitted in encrypted form, in accordance with the current state of the art. We protect our website and other systems by technical and organisational measures against the loss, destruction, access, modification or distribution of your data by unauthorised persons.

The partners and processors handling the technical aspects implement the most recent techniques in order to ensure the security of the data they process on our behalf.

Your personal data is stored in France or, for certain of our partners, in Europe.

No data is transferred outside European territory.

In order to make your visit to our website appealing and to enable the use of certain functions, we use cookies on various pages. These are small text files containing configuration information which are stored on your mobile device or computer.

Some of the cookies we use are deleted after the end of the browser session, that is to say after your browser has been closed (session cookies). Other cookies remain on your device and enable us to recognise your browser upon your next visit (persistent cookies). You have the possibility, at any time, of deleting the cookies stored locally on your computer or of configuring your browser so that you are informed of the setting of cookies and decide individually whether to accept them, or so as to exclude the acceptance of cookies in certain cases or generally.

If cookies are not accepted, the functionality of our website may be limited. Should you wish to receive further information on the use of these cookies, please consult our cookie declaration.

Le Palladia may integrate into its own website functionalities originating from external websites of its partners and processors in order to ensure a better service for users (in particular room booking, sale of gift boxes, etc.). Le Palladia has audited these sites in order to verify their legal compliance, in particular with regard to the management of personal data and the application of the GDPR.

As a general rule, websites contain links to third-party websites (“external links”), over the content and design of which Le Palladia has no influence. The operator of the linked site is solely responsible for the content and for the accuracy of the information provided therein. At the time the link was established, Le Palladia could have no knowledge of any potential infringement of the law. Le Palladia has no influence over the current or future content of the linked websites. The placing of external links does not mean that Le Palladia adopts as its own the third-party content that may be accessed under those links. Le Palladia cannot reasonably be expected to check and examine the external links in the absence of concrete evidence of possible infringements of the law. Should we nevertheless become aware of infringements of the law, such external links will be removed immediately.

Should you wish to subscribe to the newsletter offered on the website, we require an e-mail address from you together with the information enabling us to verify that you are the owner of the e-mail address provided and that you consent to receiving the newsletter. No other data will be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You may at any time revoke your consent to the recording of the data and of the e-mail address and to their use for the sending of the newsletter, for example via the “Unsubscribe” link appearing at the foot of all our newsletters.

New data protection rules apply to future contacts with Le Palladia. The former data protection provisions continue to apply to the data already stored, unless the law does not permit this.

Le Palladia reserves the right to modify, adapt and update its data protection policy at any time in accordance with the law in force.

The GDPR may be consulted on the website of the CNIL, the French data protection authority: https://www.cnil.fr/fr/reglement-europeen-protection-donnees

Any person who considers that their rights have been infringed may refer the matter to the CNIL (the French data protection authority): https://www.cnil.fr