Privacy Policy

As of August 5, 2026

SUMMARY ON THE PROTECTION OF YOUR PERSONAL DATA

This privacy policy for the Artus Hotel is an appendix to the T&C (“Terms and Conditions”) and, as such, has contractual force. In the event of any conflict between the T&C and this policy, the T&C shall prevail, which users of our websites acknowledge and accept.

This privacy policy reflects the commitment of the Hôtel Artus to be fully transparent with website users regarding how it handles their personal data, and incorporates the most recent requirements of applicable laws and regulations, in particular the European General Data Protection Regulation (GDPR).

The data protection officer for the Artus Hotel is Mr. Romain BINET. Email: privacy@biografygroup.com

If you have any questions about this privacy policy, please send them to privacy@biografygroup.com

‍

TABLE OF CONTENTS

Article 1. What is the purpose of the Personal Data Protection Policy?

I. PERSONAL INFORMATION

Article 2. What Is Personal Information?

Article 3. What personal data does the Hôtel Artus collect, and for what purposes?

Article 4. Who has access to the user's personal data?

Article 5. What rights do Users have regarding the personal data collected?

Article 6. How long is personal data retained?

Article 7. What measures are in place to protect users' personal data?

II. COOKIES

Article 8. What is a cookie?

Article 9. What tracking systems does the Artus Hotel use, and for what purpose?

Article 10. How do I enable or disable cookies?

III. AMENDMENTS TO THE PRIVACY POLICY

Article 11. What is the purpose of the Personal Data Protection Policy?

‍

Privacy Policy

Article 1. What is the purpose of the Personal Data Protection Policy?

The purpose of this Privacy Policy is to inform Users about how the Hôtel Artus handles the personal data of users of its websites, whether or not they are customers (hereinafter, “Users”).

‍

I. PERSONAL INFORMATION

Article 2. What Is Personal Information?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, “personal data” means “any information relating to an identified or identifiable natural person (hereinafter, ‘the data subject’); an identifiable natural person is any person whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.”

Article 3. What personal data does the Hôtel Artus collect, and for what purposes?

Artus Hotel collects personal data through the following website: https://www.artushotel.com/

Related Data Processing: Sending exclusive offers and communications

Personal data processed: Email address

Purpose: Commercial

Legal basis: Legitimate interest / contract (following a stay)
Retention period: 3 years from the date of your last interaction with us, in any form

‍

Related Data Processing: Newsletter

Personal data processed: Email address

Purpose: Commercial

Legal basis: Consent
Retention period: For the duration of the subscription

‍

Related data processing: Tracking email opens (tracking pixel)

Personal data processed: Email address , date emails were opened, clicks on links

Purpose: Audience measurement , content personalization, adjustment of mailing frequency

Legal basis: Consent (other than consent to receive the newsletter)

Shelf life: Only the date of the last opening, overwritten each time the package is opened

‍

Related Data Processing: Contact Prior to the Stay

Personal data processed: First name, last name, email address, phone number

Purpose: Commercial

Legal basis: Contract
Retention period: 3 years

‍

Related data processing: Contact and follow-up regarding services during the stay – satisfaction follow-up

Personal data processed: First name, last name, email address, phone number

Purpose: Commercial

Legal basis: Contract
Retention period: 3 years

‍

Data processing involved: Reservation management, tracking, and payment

Personal data processed: First name, last name, email address, bank account information, credit card information, identification document

Purpose: Commercial

Legal basis: Contract
Retention period: 5 years (banking information is deleted after 15 days)

‍

Data Processing in Question: Hiring New Employees

Personal data processed: First name, last name, email address, phone number, resume information (required information)

Purpose: Recruitment

Legal basis: Performance of precontractual measures
Retention period: 2 years after the last contact (except in recruitment processes)

‍

Data Processing Involved: Use of Data for Advertising and Remarketing Purposes

Personal data processed: First name, last name, email address, phone number

Purpose: Targeted marketing and advertising, creating lookalike audiences, measuring the effectiveness of advertising campaigns

Legal basis: Performance of the contract (customers who have made a reservation) / Consent (newsletter subscribers)

Retention period: 3 years after the last contact for customers who have made a reservation / Until cancellation or withdrawal of consent for newsletter subscribers

‍

Data Processing Involved: Telephone Call Management

Personal data processed: First name, last name, phone number, email address (if provided), audio recordings of calls, notes, and tags associated with calls.

Purpose: Managing requests from customers and prospects, monitoring service quality, team training, and communications security.

Legal basis: Performance of a contract (Article 6(1)(b) of the GDPR) and legitimate interests (Article 6(1)(f) of the GDPR).

‍Retention period: Records and associated data are retained for a maximum period of 24 months.

Article 4. Who has access to the User's personal data?

The only recipients of Users' personal data are:

- the relevant departments and employees of the Artus Hotel and the Biografy Group (in particular: IT, sales/marketing, and operations) who are subject to specific data protection obligations;

- companies that assist Hôtel Artus in the operation and/or management of the sites;

- Our hotels' subcontractors.

These entities receive only the personal information strictly necessary to process the reservation and, if necessary, to contact customers.

These entities process personal data in accordance with applicable laws and regulations.

‍

Article 5. What are Users’ rights regarding the personal data collected?

The User has the rights set forth in Chapter III of the GDPR, which include the following:

- Right of access to your personal data collected on the Website

- Right to modify or correct them,

- Right to erasure (“right to be forgotten”), unless there is a legal basis requiring us to retain the data,

- Right to restriction of processing, that is, the right to request that we suspend the processing of your personal data in certain cases,

- Right to data portability, that is, the right to request a copy of your personal data in a commonly used format (for example, a .csv file),

- Right to object to the processing of personal data,

- Rights related to individual decision-making and profiling, that is, the right to request transparency from us regarding any profiling we conduct or any automated decision-making,

All of these rights apply to the processing of data carried out through the Hotel Artus website that requests personal information (registration forms, contact requests, reservation confirmations, etc.). Any user may contact Hotel Artus by sending an email to privacy@biografygroup.com or by mail to: 34, rue de Buci - 75006 Paris.

The User also has the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority for data protection matters in France (www.cnil.fr).

Artus , however, would like the opportunity to address your concerns before you contact the CNIL. Therefore, we ask that you contact us first.

Article 6. How long is personal data collected?

Users' personal data is stored in accordance with applicable laws and regulations.

For more information, guests can contact the Hôtel Artus by sending an email to privacy@biografygroup.com

Article 7. How Is Personal Information Protected?

Artus Hotel takes the security of personal data very seriously and takes all reasonable precautions to prevent any unauthorized access, disclosure, alteration, or destruction of personal data.

The personal data collected is stored by the Hôtel Artus or its service providers and is protected by physical and electronic access controls, firewall technologies, and other reasonable security measures.

However, such measures cannot prevent all risks of loss, unauthorized access, misuse, or alteration of the personal information collected. Where required by law, the Hôtel Artus will notify the user of any instance of loss, unauthorized access, misuse, or alteration of their personal data, so that the user may take the necessary steps to exercise their rights. The Hotel Artus will notify the user electronically, by mail, or by phone, if permitted by law.

Users are advised not to transmit payment information or sensitive data via email or in sections not intended for that purpose (for example, sending a credit card number via email).

Users are informed that they always have the option to choose which personal data they wish to provide.

However, your decision not to provide certain information may affect your experience with our services. For example, we cannot make anonymous reservations, and if we are not authorized to disclose your personal information to the hotels in our group, we may be unable to provide certain services, whether related to reservations or otherwise.

Similarly, if you do not authorize us to disclose your personal information to third parties, such as subcontractors of the Artus Hotel (transportation service, concierge service, etc.), we may not be able to provide all available services, or the provision of such services may be delayed. We will make every effort to respond to your request as soon as possible.

II. COOKIES

Article 8. What is a cookie?

According to the National Commission for Information Technology and Civil Liberties (CNIL), a cookie is a piece of information stored on the user's device by the server of the website or application they are visiting.

A cookie contains various pieces of data:

- the name of the server that uploaded it,

- a unique numerical identifier,

- optionally, an expiration date.

This information is sometimes stored on a storage medium as a simple text file that a server accesses to read and save data.

Article 9. What tracking systems does the Artus Hotel use, and for what purposes?

Users are hereby informed that the Hôtel Artus uses the following tracking tools:

- Google Analytics

- Google Tag Manager

- Google Search Console

- DoubleClick

- LoungeUp

- Bing

- WebFlow

The Hôtel Artus website, online services, interactive applications, emails, and advertisements may use “cookies” and other technologies, such as web beacons and tracking pixels.

In accordance with the CNIL’s recommendation of April 14, 2026, regarding tracking pixels in emails, the pixels embedded in our marketing emails and newsletters (for tracking open rates and personalization) are used only with the recipient’s prior and separate consent. This consent may be withdrawn at any time by clicking the link provided for this purpose in each of our emails, or by writing to privacy@biografygroup.com. The pixels in our transactional emails (reservation confirmations, invoices, communications related to the stay) are not subject to this requirement, provided they are used solely for deliverability measurement purposes.

These technologies help us better understand user behavior, show us which parts of our websites are visited, and facilitate and measure the effectiveness of ads and web searches.

We treat information collected through cookies and other technologies as non-personal information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information under local law, we will also treat such identifiers as personal information.

Furthermore, to the extent that non-personal information is combined with personal information, we will treat the combined information as personal information for the purposes of this privacy policy.

Artus also uses cookies and other technologies to remember personal information when you use our website, online services, and apps.

Our goal in these cases is to make your experience more practical and personalized. For example, understanding your country and language helps us provide a personalized and more useful marketing experience.

We use this information to understand and analyze trends, manage the site, understand user behavior on the site, improve our products and services, and gather demographic information about our user base as a whole. The Hôtel Artus may use this information for its marketing and advertising purposes.

Pixel tags allow us to deliver targeted ads in a format that customers can read. We can use this collected information to reduce or eliminate the number of messages sent to customers.

Users are hereby informed that they have the right to access their personal data related to cookies and to object to their use at any time, which allows them to choose at any time whether or not to accept cookies.

However, if the User does not accept cookies, the Services (and, in particular, browsing the Sites) may not function properly.

Article 10. How do I enable or disable cookies?

Users can manage, disable, and enable cookies at any time by adjusting their web browser settings. For example:

- For Mac smartphones or tablets: Go to the Settings section, then select the appropriate browser, and choose "Accept cookies," "Never," "From visited sites," or "Always."

- For Android smartphones: After opening the browser, tap the menu button (in the lower-left corner of the mobile device), then select [More] > [Settings] > [Accept cookies] or [Do not accept].

- for computers:

• In Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

• In Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

• In Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDes...

• In Firefox: https://support.mozilla.org/fr/kb/desactiver-cookies-tiers

• in Opera: http://help.opera.com/Windows/10.20/fr/cookies.html

For more information on protecting against and disabling cookies, Users can consult their browser's help section.

If you have difficulty exercising your right to access or object to cookies, you may contact the Hôtel Artus via email at: privacy@biografygroup.com

The maximum duration of a cookie is thirteen months.

III. AMENDMENTS TO THE PRIVACY POLICY

Artus Hotel reserves the right to change, modify, or revise this policy at any time.

The document was last updated on August 5, 2026.

In the event of significant changes to this policy, we will post a notice on the Sites indicating that our privacy policy has been updated.

If we make significant changes to the way we use your personal data, we will notify you by email at the address listed in your account (if applicable) or through a notice on the home page of our Sites, giving you the option to opt out of this new use.

Any changes made to this privacy policy will take effect upon their publication on the Sites.

Use of our Sites after these changes take effect constitutes acceptance of this privacy policy in accordance with the newly published terms.