{"id":5066,"date":"2026-08-22T00:13:43","date_gmt":"2026-08-22T00:13:43","guid":{"rendered":"https:\/\/pearlresorts.com\/?page_id=5066"},"modified":"2026-08-22T01:49:38","modified_gmt":"2026-08-22T01:49:38","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/pearlresorts.com\/fr\/privacy-policy-2\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n
\n
\n \t\t\t

The company S.A. \"PEARL RESORTS OF TAHITI\" is committed to ensuring that the processing of your personal data collected via the website https:\/\/www.pearlresorts.com complies with Law No. 78-17 of 6 January 1978 (as amended) relating to information technology, data files and civil liberties, and with the General Data Protection Regulation (GDPR).<\/p>\n\t\t\t\t\t

This Privacy Policy applies only to the website https:\/\/www.pearlresorts.com.<\/p>\n\t\t\t\t\t

Third-party websites or mobile applications to which you may be redirected while using the website have their own policies. We therefore encourage you to review the legal notices and privacy policy of those websites.<\/p>\n\t\t\t\t\t

This Privacy Policy explains our policies and practices regarding how we collect and use the personal data we gather on our digital platforms.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n

\n
\n \t\t\t

Definitions<\/p>\n\t\t\n<\/div>\n

\n
\n \t\t\t

Data Controller<\/p>\n\t\t\t\t\t

The natural or legal person, public authority, agency or other body which, alone or jointly with others (joint controllers), determines the purposes and means of the processing of personal data.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

General Data Protection Regulation<\/p>\n\t\t\t\t\t

Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the \"GDPR\"), together with any legislation and\/or regulation implemented or created pursuant to the GDPR and online privacy legislation, or which amends, replaces, re-adopts or consolidates any of them, and all other applicable national laws relating to the processing of personal data and privacy protection (French Data Protection Act \u2014 \"Loi Informatique & Libert\u00e9s\").<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Processor<\/p>\n\t\t\t\t\t

A natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Recipient<\/p>\n\t\t\t\t\t

A natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Third Party<\/p>\n\t\t\t\t\t

A natural or legal person, public authority, agency or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Supervisory Authority<\/p>\n\t\t\t\t\t

An independent public authority established by a Member State pursuant to Article 51 of the GDPR (the CNIL in France).<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Personal Data<\/p>\n\t\t\t\t\t

Any information relating to an identified or identifiable natural person (\u201cdata subject\u201d). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Processing<\/p>\n\t\t\t\t\t

Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Standard Contractual Clauses<\/p>\n\t\t\t\t\t

A set of standard contractual clauses for transfers, adopted by the European Commission for the international transfer of personal data.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Personal Data Breach<\/p>\n\t\t\t\t\t

A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data transmitted, stored or otherwise processed.<\/p>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n

\n
\n \t\t\t

Data controller<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

The data controller is the entity that determines the purposes and means of the processing of personal data.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

The data controller is S.A. \"PEARL RESORTS OF TAHITI\", a simplified joint-stock company (soci\u00e9t\u00e9 par actions simplifi\u00e9e), whose registered office is located at 24 rue Paul Gauguin, Papeete, registered with the Papeete Trade and Companies Register under number TPI 96 115 B, and identified in the Territorial Business Register under number TAHITI 368 340.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

In accordance with applicable regulations, in particular the General Data Protection Regulation adopted in Europe, we are committed to complying with its principles.<\/p>\n\t\t\n<\/div>\n

\n \t\t\t

Lawfulness, fairness and transparency<\/p>\n\t\t\t\t

\n\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tProcessing based on a legal basis<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tRespect for the rights of individuals<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
  • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tInformation provided to data subjects<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n
    \n \t\t\t

    Data minimisation<\/p>\n\t\t\t\t

    \n\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tOnly data necessary for the processing is collected<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n
      \n \t\t\t

      Storage limitation<\/p>\n\t\t\t\t

      \n\t\t\t\t\t\t\t
        \n\t\t\t\t\t\t\t
      • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tData is retained only for as long as necessary for the intended processing or to comply with legal obligations<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n
        \n \t\t\t

        Data security<\/p>\n\t\t\t\t

        \n\t\t\t\t\t\t\t
          \n\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tPhysical, logical and organisational security measures are implemented to protect your data<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n
          \n
          \n \t\t\t

          The different processing activities of personal data<\/p>\n\t\t\n<\/div>\n\t\t

          \n\t\t\t\t\t
          \n \n \n \n \n \n \n \n \n \n \n
          Purpose<\/th>\n Legal basis for processing<\/th>\n Categories of data processed<\/th>\n Retention period<\/th>\n Source<\/th>\n <\/tr>\n <\/thead>\n
          Management and improvement of website security (cookies)<\/td>\n Consent \/ Legitimate interest<\/td>\n Connection data: session number, IP address, browser type, operating system<\/td>\n 13 months<\/td>\n <\/td>\n <\/tr>\n
          Booking management<\/td>\n Performance of a contract<\/td>\n Identification data (including minors), booking details, email and phone contact details, card type, special requests which may contain sensitive data<\/td>\n 3 years from the booking date \/ 10 years for accounting obligations and dispute management<\/td>\n Website booking form<\/td>\n <\/tr>\n
          Newsletter management<\/td>\n Consent<\/td>\n Name, first name, country, email address<\/td>\n Until consent is withdrawn via the unsubscribe link at the bottom of the email<\/td>\n Newsletter sign-up form<\/td>\n <\/tr>\n
          Commercial prospecting<\/td>\n Performance of a contract (pre-contractual step)<\/td>\n Email address<\/td>\n 3 years from last contact, or until unsubscription via the link included at the bottom of the email<\/td>\n Business relationship<\/td>\n <\/tr>\n
          Social media interaction<\/td>\n Legitimate interest<\/td>\n Identification data and username<\/td>\n Linked to the existence of the relevant social media page<\/td>\n Social media platform concerned<\/td>\n <\/tr>\n
          Organisation of competitions<\/td>\n Legitimate interest<\/td>\n Depending on the type of competition: identification, contact details, username<\/td>\n Linked to the competition rules<\/td>\n Competition entry form, social media<\/td>\n <\/tr>\n <\/tbody>\n <\/table>\n<\/div>\n\n