Definitions and interpretation
Data: collectively all information that you submit to Chalet Pecchio via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
Data Protection Laws: any applicable law relating to the processing of personal Data.
GDPR: the General Data Protection Regulation (EU) 2016/679.
Chalet Pecchio, or us: Chalet Pecchio, is a SARL company registered in France
User or you: any third party that accesses the Website and is not either (i) employed by Chalet Pecchio and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Chalet Pecchio and accessing the Website in connection with the provision of such services.
Website: the website that you are currently using, chalet-pecchio.com, and any sub-domains of this site unless expressly excluded by their own terms and conditions.
• The singular includes the plural and vice versa
• A reference to a person includes firms, companies, government entities, trusts and partnerships
• “including” is understood to mean “including without limitation”
• Reference to any statutory provision includes any modification or amendment of it
Scope of this policy
This document provides you with information about how Chalet Pecchio is handling, or is intending to handle, your personal information. If you are aged 16 or under, please obtain your parent/guardian’s permission before you provide any personal information to us.
For purposes of the applicable Data Protection Laws, Chalet Pecchio is the “data controller”. This means that Chalet Pecchio determines the purposes for which, and the manner in which, your Data is processed.
Chalet Pecchio is committed to protecting and respecting your privacy and complying with the principles of applicable data protection laws. This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. The data controller of the personal data referred to in this policy is the SARL Chalet Pecchio, Le Miroir, Ste Foy Tarentaise, 73640 Savoie, France.
Collection of personal data
Chalet Pecchio may collect and/or create, or otherwise obtain, and process
1. data that is given to us by you.
2. data that is collected automatically.
3. information about you, that you provide by filling in forms while registering for activities, holidays, communications and competitions on our website.
• Date of birth
• Contact Information such as email addresses and telephone number
• Financial information such as credit / debit card numbers
• Information from your social media accounts but only where you have given us permission to use it. For example, posts, pictures and video footage you share on sites such as Facebook, Twitter and Instagram.
• We may also ask you for information when you report a problem or make a complaint and, if you contact us, we may keep a record of that correspondence.
• We may also ask you to complete optional surveys that we use for research purposes and to provide you with a more relevant customer experience.
• Information about emails and other communications we have sent to you and your interaction with them.
• Information from third parties where you consent to those other organisations sharing information they hold on you with us, and where those other organisations lawfully share your information with us.
How we use your information and the basis of processing
Chalet Pecchio will use your personal information to:
• Ensure that content from our websites is presented in the most effective manner.
• Authenticate you when you register.
• Carry out our obligations arising from any contracts entered into between you and Chalet Pecchio.
• Provide you with information, products or services that you request from Chalet Pecchio, or which we feel may interest you, where we are legally entitled to do so.
• Notify you about changes to our services.
Chalet Pecchio will not use any of the personal information we collect from you to make automated business decisions.
The legal basis on which we collect and process the personal data described above depends on the personal information concerned and the specific context in which we collect it. However, we will only use your personal information where we:
• Have your consent to do so.
• Need the personal data to perform a contract with you.
• Need to process your personal information for our legitimate interests and only where our legitimate interests are not overridden by your data protection interests or fundamental rights and freedoms.
• Have a legal obligation to collect personal information from you.
• Need the personal information to protect your vital interests or those of another person.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time, and advise you whether the provision of your personal information is mandatory or not (as well as the possible consequences if you do not provide your personal information).
Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:
• Internal record keeping.
• Improvement of our products / services;.
• Transmission by email of marketing materials that may be of interest to you.
We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).
For the delivery of direct marketing to you via email, we’ll need your consent, whether via an opt-in or soft-opt-in:
• Soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular product/service, and we are marketing similar products/services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out.
• For other types of e-marketing, we are required to obtain your explicit consent; that is, you need to take positive and affirmative action when consenting by, for example, checking a tick box that we’ll provide.
• If you are not satisfied about our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent, see the section headed “The data subject’s rights” below.
Chalet Pecchio will take all steps reasonably necessary including policies, procedures and security features to ensure that your data is treated securely and protected from unauthorised and unlawful access and/or use, and in accordance with this notice.
Unfortunately, the transmission of information via the internet is not completely secure and, although we will do our best to protect your personal data transmitted to us via the internet, we cannot guarantee the security of your data transmitted to our websites from your device. Any transmission is at your own risk.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of the websites, you are responsible for keeping this password confidential. We ask you not to share such a password with anyone.
We will use technical and organisational measures to safeguard your Data, for example:
• Access to your account is controlled by a password and a user name that is unique to you
• We store your Data on secure servers.
• Payment details are encrypted using SSL technology (typically you will see a lock icon or green address bar (or both) in your browser when we use this technology.
• Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this email address: [email protected]
Where any payments are being collected on our behalf, we require our payment providers to be compliant with the Payment Card Industry’s Data Security standards (PCI-DSS). We are using Stripe who are certified as a PCI Level 1 Services Provider, which is the highest level of PCI compliance.
Recipients of data
We may share information about you with some of our suppliers who process data on our behalf to help us to provide services to you. We undertake this data sharing on the basis of our legitimate interests.
Categories of organisation and purpose
• Database hosting companies – to host Chalet Pecchio digital platforms (e.g. Chalet Pecchio website) and associated customer databases to enable customers to log in and interact with the websites.
• Email broadcasting companies – to send emails to our customers.
• Chalet Pecchio partners delivering products and/or services to our clients (e.g. lift pass company, ski lesson provider) and communications with them.
Changes of business ownership and control
We may also disclose Data to a prospective purchaser of our business or any part of it.
In the above instances, we will take steps with the aim of ensuring your privacy is protected.
Data retention period
We will hold information about you in our data systems only for as long as we need it for the purpose for which we collected it, which is as follows:
• As long as you continue to log into our websites or use our services (including engaging with emails, booking holidays) we will retain and process information about you. In such cases, you will be considered to be an ‘active’ customer. If you have not been ‘active’ as a customer for a period of six years, Chalet Pecchio will deactivate your customer account and anonymise any personal data relating to you.
• Personal data linked to the processing of insurance claims, subject access requests, disputes, safeguarding investigations, disciplinary or police matters will only be kept for as long as it necessary for those purposes, as each is applicable.
• Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Our Privacy and Cookie Policies only apply to our websites and not Third Party websites. You should refer to their Privacy and cookie Policies for further information.
Links to other websites
The data subject’s rights
Data protection laws grant you, as a Data Subject, certain ‘information rights’, which are summarised below:
• Right of access – You have the right to obtain a copy of information we hold about you. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
• Right of rectification or erasure – If you feel that any data that we hold about you is inaccurate, you have the right to ask us to correct or rectify it. You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. Please note that we may be entitled to retain your personal data despite your request, for example if we are under a separate legal obligation to retain it. Your right of rectification and erasure extends to anyone to whom we have disclosed your personal information, and we will take all reasonable steps to inform those with whom we have shared your data about your request for erasure.
• Right to restriction of processing – You have a right to request that we refrain from processing your data where you contest its accuracy; or the processing is unlawful and you have requested its erasure; or where we do not need to hold your data any longer but you need us to in order to establish, exercise or defend any legal claims; or we are in dispute about the legality of our processing your personal data.
• Right to Portability – You have a right to receive any personal data that you have provided to us in order to transfer it onto another data controller where the processing is based on consent and is carried out by automated means. This is called a data portability request.
• Right to Object – You have a right to object to our processing your personal data where the basis of the processing is our legitimate interests including but not limited to direct marketing and profiling.
• Right to Withdraw Consent – You have the right to withdraw your consent for the processing of your personal data where the processing is based on consent.
• Right of Complaint – You also have the right to lodge a complaint about any aspect of how we are handling your data with the Commission Nationale de l’Informatique et des Libertés – CNIL, which can be contacted at
• Right to Opt-out of Marketing Communications – You have the right to opt-out of marketing communications we send to you at any time. You can exercise this right by contacting us via this e-mail address: [email protected]
• To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: [email protected]
• It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.
Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
This Agreement will be governed by and interpreted according to French law. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the French courts.
How to contact us
If you wish to contact us about your personal data or exercise any of the rights described above please contact: [email protected]
Chalet Pecchio, Le Miroir, Ste Foy Tarentaise, 73640 Savoie, France.