Privacy Policy

We take your privacy seriously. This document sets out how Crystalresortgrove gathers, processes and protects personal information belonging to guests and users of this website.

Last updated: 2026-07-13 · In effect from this date.

1. Who we are

Crystalresortgrove ("we", "us", "our") runs the website at https://crystalresortgrove.online/. Our registered address is 58 La Croisette, 06400 Cannes, FR. For privacy matters, write to [email protected].

2. Information we collect

We gather the following types of data:

• Reservation details: full name, postal address, contact details, payment information, stay dates, dietary requirements and accessibility needs.
• Communication data: correspondence sent via our website, email or phone.
• Website usage: IP address, browser type, device, referring URL, pages viewed, timestamps and anonymised analytics events.
• Cookies and similar technologies: described in Section 6 below.

3. How we use information

We process personal data solely to deliver and refine our services, including:

• Handling reservations, payments and the services you request from us.
• Contacting you about your stay, issuing confirmations and answering questions.
• Meeting legal requirements (tax records, anti-money-laundering checks, gaming licence obligations).
• Enhancing our website and services through aggregated, privacy-conscious analytics.
• Sending promotional messages only where you have given clear consent; opt out at any time.

4. Legal basis (GDPR)

For visitors from the European Economic Area and the United Kingdom, we process data under Articles 6(1)(a)-(f) of the General Data Protection Regulation on the grounds of consent, contractual necessity, legal obligation and our legitimate interest in operating a secure, reliable website.

5. Sharing of personal data

We never sell personal data. It is shared only with: trusted processors acting on our instructions (payment gateways, booking platforms, IT hosting) under written contracts; public bodies when the law requires it; and successors following a corporate restructuring.

6. Cookies

Strictly necessary cookies are required for this site to work. Optional analytics and marketing cookies are placed only after you consent via our cookie banner. You may withdraw consent at any time by clearing browser storage for this domain.

7. Data retention

Reservation and financial records are kept for as long as tax and gaming-licence regulations demand (usually 10 years). Marketing data is retained only while consent remains active. Server logs are purged within 30 days.

8. Your rights

Where applicable, you may request access to, correction or deletion of your personal data, restrict or object to processing, and obtain data portability. Contact [email protected] to exercise these rights. You may also file a complaint with your national data protection authority.

9. International transfers

When data leaves the European Economic Area, we secure an adequate level of protection through Standard Contractual Clauses or equivalent mechanisms.

10. Children

This website is meant for adults aged 18 and over. We do not knowingly collect data from anyone under 16. If you believe such information has been submitted, contact us and we will remove it.

11. Changes to this policy

We may revise this policy periodically. The "Last updated" date above reflects the current version. Significant changes will be posted on this website.