Privacy Policy

This page explains what happens to information when you read this website, and what happens to a message if you send one. It is written for this site and this hotel, which is a 36-room villa at 14 Avenue du Petit Port, 74000 Annecy, France. If anything is unclear, write to [email protected] or telephone +33 4 50 27 61 40.

Who publishes this site

Mirelac, at the address above, publishes and controls mirelac.com. The same company runs the hotel and the gaming room in the east wing. Questions about this policy go to the manager at the postal address, or to the email above with “privacy” in the subject line.

There is no booking engine on this site

It is worth stating this at the outset because it decides most of what follows. The site has no reservation system, payment page, shopping basket, guest account, login or password. You cannot buy anything on mirelac.com, and it never asks for a card number, a passport number or a date of birth. Rooms are arranged by telephone or by email with a person at the desk.

What is collected

If you only read

Nothing is collected about you personally. No tracker runs, no analytics tag fires and no profile is built. Advertising and measurement are switched off by default and stay off unless you turn them on from the cookie bar.

The two values kept in your browser

Two entries may be written into your browser's local storage. They sit on your device, they are not transmitted to us, and they are not readable by any other website:

• an_age_ok: records that you confirmed you are 18 or over, so the age panel does not appear again on this device.
• an_consent: records whether you accepted or declined measurement and advertising, so the cookie bar stops asking.

Clearing your browser data removes both, and the site then asks again. If your browser refuses storage, as private windows often do, nothing breaks and you are asked on every visit.

Server logs

The hosting provider records an entry for each file served: the IP address of the request, the time, the page requested, the HTTP status, the referring page if the browser sends one, and the browser's user-agent string. These logs exist for security and for diagnosing faults. They are not combined with anything else, not used to build a profile, and not sold or shared for marketing.

What you type into the contact form

The form on the contact page sends what you write (your name, your email address, any dates you mention and the body of the message) to the reception mailbox. It becomes an ordinary email. Please do not put card details, identity-document numbers or health information into it; if you do, we will delete that part and reply asking you to telephone instead.

Analytics and advertising, only after consent

No measurement or advertising tag is present on the site as it stands today. The pages do carry Google Consent Mode v2 defaults, which set storage permissions to denied before anything else runs, so that if a tag is ever added it starts switched off. If and when a tag is added, it will fire only after you choose Accept. Choosing Decline, or ignoring the bar, leaves everything off. You can change your mind at any time with the Cookie settings link in the footer of every page.

Lawful bases

• Legitimate interest for server logs: keeping the site available and defending it against abuse, which cannot be done without them.
• Consent for the two local-storage values that are not strictly necessary, and for any future measurement or advertising.
• Steps prior to a contract, and legitimate interest for handling an enquiry you have sent us about a stay.

How long things are kept

• Server logs: 30 days, then overwritten by the provider.
• The two local-storage values: twelve months, or until you clear your browser.
• Enquiry emails: 24 months after the last message in the thread, so that we can answer a guest who comes back the following summer. Longer only where accounting law requires it of an invoice.

Who else sees it

The hosting company that serves these files, and the company that runs the reception mailbox. Both act on our instructions under written contracts and neither is permitted to use the data for anything of its own. Beyond that, nobody sees it, unless a French authority makes a lawful demand in writing, which we would answer only to the extent the law requires. Fonts, stylesheets, scripts and photographs are all served from this domain, so loading a page sends nothing to any third party.

Your rights

Under the GDPR and the French data protection act you may ask for a copy of what we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to restrict what we do with it, object to processing based on legitimate interest, and withdraw consent at any time without that affecting what was lawful before. Write to [email protected] and we will answer within a month. You also have the right to complain to the French supervisory authority, the CNIL.

Children

This site is for adults. It describes a hotel with a gaming room where the legal age is 18, and it is not directed at children. We do not knowingly collect anything from anyone under 18. If you believe a child has sent us a message through the form, tell us and we will delete it.

Transfers

The server and the mailbox are inside the European Union. Nothing described on this page is transferred outside it. Should that ever change, this page is updated before the change takes effect.

Changes

When this policy changes, the review date at the top changes with it, and a short note describing what changed stays on this page for sixty days. A change that materially affects you will also bring the cookie bar back so that you can decide again.

See also the Cookie Policy, the Terms of Use and the Responsible Gaming page.