‍

As of October 28, 2025

A summary of how we protect your personal data

This Biografy Privacy Policy is an appendix to the General Terms and Conditions of Sale (GTC) and is therefore legally binding. In the event of any conflict between the GTC and this policy, the GTC shall prevail, which users of our websites acknowledge and agree to.

This Privacy Policy reflects Biografy ’s commitment to being fully transparent with website users regarding how it handles their personal data and incorporates the latest requirements set forth in applicable laws and regulations, including the European General Data Protection Regulation (GDPR).

Biografy 's Data Protection Officer is: Mr. Romain BINET - Email: privacy@biografygroup.com

If you have any questions regarding this privacy policy, please send an email to privacy@biografygroup.com

Table of Contents

Section 1. What is the purpose of the Privacy Policy?

I. Personal Information

• Article 2. What is personal data?
• Section 3. What personal data does Biografy collect, and for what purposes?
• Section 4. Who has access to the user's personal data?
• Section 5. What are users’ rights regarding the personal data collected?
• Section 6. How long are personal data collected?
• Section 7. What measures are in place to protect users' personal data?

II. Cookies

• Article 8. What is a cookie?
• Section 9. What tracking systems does the Biografy use, and for what purpose?
• Section 10. How do I enable or disable cookies?

III. Changes to the Privacy Policy

• Article 11. What is the purpose of the Privacy Policy?

Privacy Policy

Section 1. What is the purpose of the Privacy Policy?

The purpose of this Privacy Policy is to inform Users about how the Biografy handles the personal data of users of its websites, whether or not they are customers (hereinafter “Users”).

I. Personal Information

Article 2. What is personal data?

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, personal data means “any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); an “identifiable natural person” means a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.”

Section 3. What personal data does the Biografy collect, and for what purposes?

The Biografy collects personal data on the following website: https://www.biografygroup.com

Purpose of data processing: Sending exclusive offers and communications

• Personal data processed: Email address
• Purpose: Commercial
• Legal basis: Legitimate interest / contract (following a stay)
• Retention period: 3 years from the date you last interacted with us in any way

Data processing involved: Newsletter

• Personal data processed: Email address
• Purpose: Commercial
• Legal basis: Consent
• Retention period: For the duration of the registration

Data processing involved: Initial contact prior to the stay

• Personal data processed: Last name, first name, email address, phone number
• Purpose: Commercial
• Legal basis: Contract
• Shelf life: 3 years

Data processing involved: Initial contact and monitoring of services during the stay -- satisfaction tracking

• Personal data processed: Last name, first name, email address, phone number
• Purpose: Commercial
• Legal basis: Contract
• Shelf life: 3 years

Data processing involved: Booking, tracking, and payment

• Personal data processed: Last name, first name, email address, bank account information, credit card information, identification document
• Purpose: Commercial
• Legal basis: Contract
• Retention period: 5 years (banking data is deleted after 15 days)

Data processing involved: Hiring new employees

• Personal data processed: Last name, first name, email address, phone number, resume information (required information)
• Purpose: Recruitment
• Legal basis: Performance of pre-contractual measures
• Retention period: 2 years after the last contact (except for recruitment)

Section 4. Who has access to the User's personal data?

The only recipients of Users' personal data are:

• the relevant departments and employees of Biografy and the Biografy Group Biografy including: IT, sales/marketing, and operations) who are bound by specific data protection obligations;
• companies that assist the Biografy in the operation and/or management of the sites;
• Our hotels' subcontractors.

These entities receive only the personal information strictly necessary for making reservations and, if necessary, contacting customers.

The processing of personal data by these entities is carried out in accordance with applicable laws and regulations.

Section 5. What are users’ rights regarding the personal data collected?

The User has the rights set forth in Chapter III of the GDPR, including the following rights:

• Right to access personal data collected on the Website
• Right to modify or correct them,
• Right to erasure (“right to be forgotten”), unless there is a legal basis requiring us to retain the data,
• Right to restriction of processing, that is, the right to ask us in certain cases to suspend the processing of personal data,
• The right to data portability, that is, the right to request a copy of one's personal data in a commonly used format (for example, a .csv file),
• Right to object to the processing of personal data,
• Rights related to automated decision-making and profiling, meaning the right to ask us to be transparent about any profiling we conduct or any automated decisions we make,

These rights apply to all data processing carried out through the Biografy website that involves the collection of personal information (registration forms, contact requests, booking confirmations, etc.). Any user may contact the Biografy by sending an email to privacy@biografygroup.com or by mail to: 12-14 Rue Joseph de Maistre, 75018 Paris.

The User also has the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority for data protection matters in France (www.cnil.fr).

However, the Biografy would like the opportunity to address your concerns before you contact the CNIL. Therefore, please contact us first.

Section 6. How long are personal data collected?

Users' personal data is stored in accordance with applicable laws and regulations.

For more information, users can contact the Biografy by sending an email to privacy@biografygroup.com

Article 7. How is personal data protected?

The Biografy takes the security of personal data very seriously and takes all reasonable precautions to prevent any unauthorized access, disclosure, alteration, or destruction of personal data.

The personal data collected is stored by the Biografy or its service providers and is protected by physical and electronic access controls, firewall technology, and other reasonable security measures.

However, such measures cannot prevent all risks of loss, unauthorized access, misuse, or alteration of the personal information collected. Where required by law, the Biografy will notify the User of any instance of loss, unauthorized access, misuse, or alteration of their personal data, so that the User may take appropriate steps to enforce their rights. The Biografy will notify the User via email, mail, or telephone, if permitted by law.

Users are advised not to send payment information or sensitive data via email or through sections not intended for that purpose (for example, sending a credit card number via email).

Users are also informed that they always have the option to choose which personal data they wish to provide.

However, your decision not to provide certain information may affect your experience with our services. For example, we cannot make anonymous reservations, and if we are not authorized to share your personal information with the hotels in our group, we may be unable to provide certain services, including reservations and other services.

Similarly, if the User does not authorize us to disclose their personal data to third parties, such as Biografy subcontractors (transfer services, concierge services, etc.), we may not be able to provide the full range of available services, or the provision of these services may be delayed. We will make every effort to respond to your request as soon as possible.

II. Cookies

Article 8. What is a cookie?

According to the French Data Protection Authority (CNIL), a cookie is a piece of information stored on the user’s device by the server of the website or app they are visiting.

A cookie contains several pieces of data:

• the name of the server that uploaded it,
• a unique identifier in the form of a number,
• possibly an expiration date.

This information is sometimes stored on a storage device in a simple text file that a server accesses to read and write data.

Section 9. What tracking systems does the Biografy use, and for what purposes?

Users are informed that the Biografy uses the following tracking tools:

• Google Analytics
• Google Tag Manager
• Google Search Console
• DoubleClick
• LoungeUp
• Bing
• WebFlow

The Biografy website, online services, interactive applications, emails, and advertisements may use "cookies" and other technologies such as web beacons and tracking pixels.

These technologies help us better understand user behavior, show us which parts of our websites are visited, and facilitate and measure the effectiveness of advertisements and web searches.

We treat information collected by cookies and other technologies as non-personal information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information under local law, we also treat these identifiers as personal information.

Similarly, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this privacy policy.

The Biografy also uses cookies and other technologies to remember personal information when you use our website, online services, and apps.

Our goal in these cases is to make your experience more convenient and personalized. For example, knowing your country and language helps us provide a personalized and more useful marketing experience.

We use this information to understand and analyze trends, administer the site, track user behavior on the site, improve our products and services, and gather demographic information about our user base as a whole. The Biografy may use this information for its marketing and advertising activities.

Pixel tags allow us to deliver targeted ads in a format that customers can view. We can use this collected information to reduce or eliminate the number of messages sent to customers.

Users are informed that they have the right to access their personal data related to cookies at any time, as well as the right to object, allowing them to choose at any time whether or not to accept cookies.

However, if the User does not accept cookies, the Services (and in particular browsing the Sites) may not function properly.

Section 10. How do I enable or disable cookies?

Users can manage, disable, and enable cookies at any time by adjusting their web browser settings. For example:

• For smartphones or Mac tablets: Go to Settings, select the browser in question, then choose Accept Cookies > Never, or From websites I visit, or Always.
• For Android smartphones: After opening the browser, tap the menu button (at the bottom left of the mobile device), then select /More/Settings/Accept cookies or Do not accept.
• for computers:
  • In Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
  • In Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
  • In Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDes...
  • In Firefox: https://support.mozilla.org/fr/kb/desactiver-cookies-tiers
  • In Opera: http://help.opera.com/Windows/10.20/fr/cookies.html

For more information on protecting and disabling cookies, users can consult their browser’s help section.

If you encounter any difficulties exercising your right to access or object to cookies, please contact the Biografy at the following email address: privacy@biografygroup.com

The maximum duration of a cookie is thirteen months.

III. Changes to the Privacy Policy

The Biografy reserves the right to change, modify, or revise this policy at any time.

This document was last updated on May 23, 2023.

If there are any significant changes to this policy, we will post a notice on the Sites indicating that our privacy policy has been updated.

If we make significant changes to how we use your personal data, we will notify you by email at the address listed in your account (if applicable) or through a notice on the homepage of our Sites, and we will give you the opportunity to opt out of this new use.

Any changes made to this privacy policy will take effect upon their publication on the Sites.

Your continued use of our Sites after these changes take effect constitutes your acceptance of this privacy policy as amended.

‍