Personal data protection policy
As of November 3, 2025
In summary about the protection of your personal data
This Madison Hotel Personal Data Protection Policy is an appendix to the General Terms and Conditions (“General Conditions”) and therefore has contractual value. In the event of a contradiction between the GTC and this policy, the GTC will prevail, which the user of our sites acknowledges and accepts.
This personal data protection policy reflects the desire of Hotel Madison to be completely transparent to the user of the site on how to manage their personal data and integrates the latest requirements from applicable legislation and regulations and in particular from the European regulation on the protection of personal data (RGPD).
The contact person for the protection of personal data at Hotel Madison is: Mr. Romain Binet - Email: privacy@biografygroup.com
For any questions from the user regarding this personal data protection policy, the user is invited to ask his question by sending a message to privacy@biografygroup.com
Summary
Section 1. What is the purpose of the Personal Data Protection Policy?
I. Personal data
Section 2. What is personal data?
Section 3. What personal data is collected by Hotel Madison and for what purposes?
Section 4. Who has access to the user's personal data?
Section 5. What are the rights of Users concerning the personal data collected?
Section 6. For how long is personal data collected?
Section 7. What measures are in place to protect users' personal data?
II. Cookies
Section 8. What is a cookie?
Section 9. What are the tracking systems used by Hotel Madison and for what purpose?
Section 10. How do I authorize/deactivate cookies?
III. Modification of the data protection policy
Section 11. What is the purpose of the Personal Data Protection Policy?
Protection of personal data
Section 1. What is the purpose of the Personal Data Protection Policy?
The purpose of this Personal Data Protection Policy is to inform the User about how Hotel Madison manages the personal data of users of its websites, whether or not they are customers (hereinafter “Users”).
I. Personal data
Section 2. What is personal data?
According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, personal data is “any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); is deemed to be an “identifiable natural person” a natural person who can be identified, directly or indirectly, a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his physical, physiological, genetic, psychological, psychological, economic, cultural or social identity”.
Section 3. What personal data is collected by Hotel Madison and for what purposes?
Hotel Madison collects personal data on the following website: https://www.hotel-madison.com
Processing of the data concerned: Sending exclusive offers and communication
Personal data processed : Email address
Purpose : Commercial
Legal basis : Legitimate interest/contract (following a stay)
Shelf life : 3 years from the date you were active with us, in any way, for the last time
Processing of the data concerned : Newsletter
Personal data processed : Email address
Purpose : Commercial
Legal basis : Consent
Shelf life : Registration time
Processing of the data concerned : Contact before the stay
Personal data processed : Name, first name, email, telephone
Purpose : Commercial
Legal basis : Contract
Shelf life : 3 years
Processing of the data concerned : Contact and follow-up of services during the stay — monitoring of satisfaction
Personal data processed : Name, first name, email, telephone
Purpose : Commercial
Legal basis : Contract
Shelf life : 3 years
Processing of the data concerned : Booking, follow-up and payment
Personal data processed : Name, first name, email, bank details, bank card, identity document
Purpose : Commercial
Legal basis : Contract
Shelf life : 5 years (deletion of bank data after 15 days)
Processing of the data concerned : Recruiting new employees
Personal data processed : Name, first name, email, telephone, telephone, CV data (mandatory data)
Purpose : Recruiting
Legal basis : Execution of pre-contractual measures
Shelf life : 2 years after the last contact (except recruitment)
Processing of the data concerned : Phone call management
Personal data processed : Name, first name, telephone number, email address (if provided), audio recording of calls, notes and tags associated with calls.
Purpose : Management of requests from customers and prospects, monitoring the quality of service, training of teams and security of exchanges.
Legal basis : Execution of a contract (article 6.1.b RGPD) and legitimate interest (article 6.1.f RGPD).
Shelf life : Records and associated data are kept for a maximum of 24 months.
Section 4. Who has access to the User's personal data?
The only recipients of Users' personal data are:
- the services and employees concerned of Hotel Madison and the Biografy group (in particular: IT, sales/ marketing, operational department) bound by specific data protection obligations;
- companies that assist Hotel Madison in the operation and/or operation of the sites;
- The subcontractors of our hotels.
These structures only receive the personal information that is strictly necessary for making reservations and for the possible reminder of customers.
The processing of personal data by these structures is carried out under conditions in accordance with applicable legislation and regulations.
Section 5. What are the rights of Users concerning the personal data collected?
The User has access to the rights detailed in Chapter III of the RGPD, including the following rights:
- Right to access personal data collected on the Website
- Right to modify/rectify them,
- Right to erasure (“right to be forgotten”), unless there is a legal reason that requires us to keep them,
- Right to the limitation of processing, i.e. the right to ask us in certain cases to suspend the processing of personal data,
- Right to data portability, i.e. the right to request a copy of your personal data in a current format (for example, a.csv file),
- Right to object to the processing of personal data,
- Rights relating to individual decision-making and profiling, i.e. the right to ask us to be transparent about any profiling that we carry out or any automated decision,
All of these rights are exercised for data processing carried out using the Hotel Madison site and requesting personal information (registration forms, contact requests, reservation confirmation, etc.). Any user can contact Hotel Madison by sending an email to privacy@biografygroup.com or at the postal address: 143 Bd Saint-Germain, 75006 Paris.
The User also has the right to file a complaint with the Commission Nationale Informatique et Libertés (CNIL), the supervisory authority for data protection issues in France (www.cnil.fr).
However, Hotel Madison would like to have a chance to address your concerns before you contact the CNIL. Also, contact us first.
Section 6. For how long is personal data collected?
Users' personal data is stored under conditions in accordance with applicable legislation and regulations.
For more information, any user can contact Hotel Madison by sending a message to privacy@biografygroup.com
Section 7. How is personal data protected?
Hotel Madison is very vigilant about the security of personal data and takes all reasonable precautions to prevent unauthorized access and disclosure, alteration, or destruction of personal data.
Personal data collected is stored by Hotel Madison or its service providers, and is protected by physical and electronic access controls, firewall technologies, and other reasonable security measures.
However, such measures cannot prevent all risks of loss, access, misuse, or alteration of the personal information collected. In cases where required by law, Hotel Madison will notify the User of any case of loss, access, abusive use or alteration of his personal data, so as to allow him to take the appropriate steps to enforce his rights. Hotel Madison will notify the User electronically, by post or by telephone, if authorized by law.
The User is invited not to transmit payment information or sensitive information by email or in sections not provided for this purpose (for example, sending a credit card number by email).
The User is also informed that he always has the possibility to choose the personal data he wishes to provide.
However, his decision not to transmit certain data could alter the experience he will have with the services. For example, we cannot make anonymous bookings and, if we are not authorized to disclose your personal data to hotels in our group, we may not be able to provide certain services, reservations, or otherwise.
Likewise, if the User does not authorize us to disclose his personal data to third parties, such as to Hotel Madison's subcontractors (transfer service, concierge service, etc.), we may not be in a position to provide all possible services or the provision of these services may be delayed. We will do our best to respond to your request as soon as possible.
II. Cookies
Section 8. What is a cookie?
According to the Commission Nationale de l'Informatique et des Libertés, a cookie corresponds to information placed on the User's means of Access by the server of the Website or Application that he is visiting.
A cookie contains several pieces of data:
- the name of the server that deposited it,
- an identifier in the form of a unique number,
- possibly an expiration date.
This information is sometimes stored on an access device in a simple text file that a server accesses to read and save information.
Section 9. What are the tracking systems used by Hotel Madison and for what purposes?
The User is informed that Hotel Madison uses the following tracking tools:
- Google Analytics
- Google Tag Manager
- Google Search Console
- DoubleClick
- LoungeUp
- Bing
- WebFlow
The Hotel Madison website, online services, interactive applications, interactive applications, email messages, and advertisements may use “cookies” and other technologies such as pixel tags and web beacons.
These technologies help us better understand user behavior, tell us what parts of our websites are visited, and facilitate and measure the effectiveness of advertising and web searches.
We treat information collected by cookies and other technologies as non-personal information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal information under local law, we also treat these identifiers as personal information.
Likewise, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this data protection policy.
Hotel Madison also uses cookies and other technologies to remember personal information when you use our website, online services, and applications.
Our aim in these cases is to make your experience more convenient and personal. For example, knowing your country and language helps us provide a personalized and more useful marketing experience.
We use this information to understand and analyze trends, administer the site, learn about user behavior on the site, improve our products and services, and gather demographic information about our user base as a whole. Madison Hotel may use this information in its marketing and advertising services.
Pixel tags allow us to deliver targeted advertising messages in a format that customers can read. We may use this collected information to reduce or eliminate messages sent to customers.
The User is informed that he has, at any time, a right to access data concerning him concerning cookies and to object, allowing him at any time to choose whether or not to accept cookies.
However, if the User does not accept cookies, the use of the Services (and in particular the navigation on the Sites) may not be carried out correctly.
Section 10. How do I authorize/deactivate cookies?
The User can manage, deactivate and authorize cookies at any time by configuring their internet browser.
For example:
- for smartphone or Mac tablet: via the Settings sections/Then select the browser concerned/Accept cookies/Never/or Sites visited/or Always.
- for Android smartphones: by pressing, after launching the browser, on the menu button (at the bottom left of the Mobile Device) /More/Settings/Accept cookies or do not accept cookies.
- for computer:
• under Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
• under Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
• in Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDes...
• in Firefox: https://support.mozilla.org/fr/kb/desactiver-cookies-tiers
• under Opera: http://help.opera.com/Windows/10.20/fr/cookies.html
For more information on the protection and deactivation of cookies, the User can use the help section of their browser.
In case of difficulty exercising their right of access or opposition to cookies, the User can contact Hotel Madison via the email address: privacy@biografygroup.com
The maximum duration of a cookie is thirteen months.
III. Modification of the data protection policy
Madison Hotel reserves the right to change, modify, or revise this policy at any time.
The date the document was last updated is May 23, 2023.
If there is a material change to this policy, we will post on the Sites that our data protection policy has changed.
If we make material changes to how we use your personal information, we will notify you by email to the address in your account (if applicable) or by means of a notification on the home page of our Sites while giving you the opportunity to opt out of this new use.
Any changes made to this data protection policy will take effect at the time of their publication on the Sites.
Your use of our Sites after the entry into force of these changes means acceptance of this data protection policy in accordance with the new terms made public.