Privacy statement

1. Who are we?

Essentials: Evian Resort is in charge of the processing of your personal data here.

Evian Resort is responsible for the personal data that you share with us. When we say “Evian Resort”, “us”, “our” or “we”, we are referring to Evian Resort. In accordance with regulations applicable to the processing of personal data, Evian Resort (RCS Thonon-les-Bains n° 795 780 113, Quai Baron de Blonay, 74500 Evian-les Bains) is the main “data controller”

However, depending on the pages you visit and the services you use on this website, your personal data may be processed either by Evian Resort or by Association Les Mélèzes, les saisons musicales d’Evian (a non-profit association governed by the French Law of 1 July 1901, SIREN 993723766, Baron de Blonay, 74500 Evian-les Bains) or jointly by both entities for specific purposes. Each entity acts as data controller for the processing activities falling within its own responsibilities, as further described in this Privacy Statement.

3. What personal data do we collect and how?

Essentials: The personal data we collect come directly from you, from partners or affiliates and from cookies and similar technologies. We usually only collect and use basic information such as your contact details (name, email address, etc.), communications with us (by phone, chat etc.), information regarding your interaction with our marketing initiatives, websites, products and services and your interests and preferences.

The personal data we collect varies depending on our relationship with you, the purpose of the collection and the product or service we are providing to you. Please see the section(s) below that best describes our relationship with you for further details of the personal data that we collect.

We may collect your personal data directly from you.

You may give us personal data about yourself by visiting our websites or applications, creating an account with us, ordering products or services from us, registering to receive our newsletters or communications (including marketing messages) by any means (e.g. SMS, phone instant messaging, etc.), entering or participating in a survey, research activity, game, contest or competition run by us, submitting an enquiry or request to us, contacting us by phone, email or other means, filling in our forms (both online and offline), registering for an event, congress or seminar (online or offline) or by posting or commenting on our social media pages (such as Facebook or Instagram) or engaging with our other digital media communications.

Some of this data is collected via cookies and similar tracking technologies - see our Cookie Statement for further details on this. A single consent management platform is used on this website. Depending on the pages visited, cookies and similar tracking technologies may be set either by Evian Resort or by Association Les Mélèzes, les saisons musicales d’Evian, each entity remaining responsible for cookies relating to its own purposes.

We may also receive personal data about you from third parties such as: our business partners, including marketing agencies, market research companies, companies that co-sponsor our promotions, retailers; family, friends and others who provide your personal data to us because you have consented to or they think you may be interested in our products and services or they want to share a product or service with you; and other third parties such as media providers/owners, public and third party websites, social media platforms, advertising platforms, our suppliers or our group companies (referred to in this Privacy Statement as "third parties" or "suppliers").

Statistical m

When you browse and interact with our website, we may also collect aggregated and non-identifying information such as device type, time of the day, country, browser type, page URL and conversion type, which is a metric that identifies an action a user has taken on a website (i.e., making a purchase, registering for an event, or subscribing to a newsletter).

We use these anonymized data to build statistical models, allowing us to infer the impact of our ads on users’ actions, such as purchases, while respecting your privacy.

This helps us refine our advertisements to make them more relevant to our consumers, thereby enhancing their experience on our websites.

It is important to underscore that this method of gathering information does not, under any circumstances, enable users’ identification.

Visitors to our websites and users of our apps and services

We, or third parties on our behalf, may collect and use information about you such as the following:

personal contact data, such as your name, gender, email address, physical address and telephone number(s);
account login details, such as your user ID, email username, password and photo;
communication data between you and us, which may include details of our conversations via chat and contact forms available on our websites and/or apps;
social media or 3^rd party account profile information where you use your social media or 3^rd party account to create an account and login or where you share this with us;
where you submit content to our websites and/or apps (such as a personal testimonial or review);
health data if and where you provide this to us – please also see the "Special categories of data" section below;
your entry into a survey, game, contest, promotion or competition (including the entry itself, which may be a photo, comment or answer to a question);
any information you provide to us when signing-up for, or as a member of, any clubs, communities or schemes offered by us;
information about people other than you, such as personal data about your family members, when you provide such information directly to us;
where we are able to collect this, information about how you engage with our messages and communications (e.g. emails, SMS, instant messages) including whether they are delivered to you, whether you open them, links you click in them and whether you unsubscribe to them;
any updates to data provided to us; and
personal data created and recorded as you use our websites, apps and/or services, including:
1. technical information– this includes the Internet Protocol (IP) address used to connect your device to the internet address; the type of device you use; the website address and country from which you access information; the files requested; browser type and version; browser plug-in types and versions; operating system; and platform; and
2. information about your visit and your behavior on our websites and/or apps (such as the pages that you click on) – this may include time and length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs, information shared with others, including through email and social media), methods used to browse away from the page, traffic data, location data, weblogs and other communication data and information provided when requesting further service or downloads.

Customers and prospective customers in relation to online purchases

We, or third parties on our behalf, may collect and use some information about you such as the following:

the personal data in relation to visitors to our websites and users of our apps and services as set out in the section above;
your age;
your gender;
order information and shipping data, such as your name, email address, postal address and telephone numbers;
information about what products you have purchased from us and products you have added to your basket;
your email subscription preferences;
where we are able to collect this, information about how you engage with our emails, including whether they are delivered to you, whether you open them, links you click in them and whether you unsubscribe to them;
demographic information and interests, such as your age range, gender, preferred products and lifestyle preferences. Lifestyle preferences may include your preferences for some of the products we offer, and your interests related to those products. We may also infer certain preferences and interests about you based on your browsing habits, your purchase history, your feedback and responses to surveys or market research, and your demographic information;
information about people other than you, such as personal data about your family members, when you provide such information directly to us; and
payment information for purchases made on one of our online shops. Payment information generally relates to your billing name, billing address and payment data, such as your credit card details or bank account number.

Ticketing services for events hosted at Evian venues La Grange au Lac or La Source Vive are operated by Evian Resort, acting as data controller for the purposes of ticket sales, access control, safety and customer service, including when ticketing services are performed on behalf of Association Les Mélèzes, les saisons musicales d’Evian or any other third-party event producers.

People w

We, or third parties on our behalf, may collect and use some information about you such as the following:

your name including your title;
your postal address;
your email address;
your telephone number;
your date of birth;
your contact preferences;
information provided when you correspond with us (such as via our care lines and/or customer service lines or social media) which might include call recordings if you call us directly – to the extent this includes information about your health, please see the "Special categories of data" section below;
information about people other than you, such as personal data about your family members, when you provide such information directly to us; and
any updates to information provided to us.

Attend

We, or third parties on our behalf, may collect and use some information about you when attending events, including the following:

personal contact data, such as your name, email address, physical address and telephone number(s);
your employment details (where you are attending on behalf of your employer);
the field of expertise in which you are active, your professional qualifications and activities, and professional details such as data related to your educational/professional employment history;
information you provide in respect of the event itself (such as visitor forms, feedback surveys, recordings or interviews of the event and pictures of the event and content you submit as part of the event (e.g. if you ask a question) and your travel and accommodation details); and
any dietary information you provide to us (when applicable).

People whose personal data we collect from other sources

We may also collect personal data about you from other sources when:

you search for our products and services and when you share content on social media pages, websites or applications related to our products or in response to our promotional material on social media;
we collect your personal data from other public sources (e.g. comments on other websites than ours) that mention Evian Resort or ones of its brands. public figure for business objective purposes;
your data is provided to us by media providers and retailers, such as your purchasing history data and your loyalty card profile; and
your insights data is provided to us by third parties (i.e. media providers, marketing technology or advertising technology solutions), such as your demographic data (e.g. age, parental status), your location, your interests and your purchase intent. Some of this data may have been collected from the use of cookies and other similar tracking technologies.

Special categories of data

In principle Evian Resort does not seek to process sensitive data relating to you. However, some of the personal data that we collect about you or which you provide to us may be special categories of data, often relating to health and wellbeing.

We will only process this type of data for purposes to which you give your explicit consent, or in any other circumstances permitted by law (such as defense of legal claims).

In certain limited cases, Evian Resort may process information relating to accessibility needs (such as requests for adapted access or seating for persons with reduced mobility) or to dietary requirements or restrictions, in particular in the context of events or hospitality services, where such information is voluntarily provided by the data subject and is strictly necessary to ensure appropriate access, safety and accommodation of participants.

In these situations, Evian Resort does not require or collect any medical diagnosis or detailed health information and limits the processing to the information strictly necessary to take the request into account.

4. The purpose and legal basis for collecting and using personal data

Essentials: Your personal data is collected and used for purposes such as performing our agreement with you (e.g. processing orders and payments), responding to your enquiries, personalising your experience with our services and marketing our products and services (e.g. building customer profiles, evaluating marketing campaign effectiveness), improving our products, services and processes, and complying with legal obligations or defending our rights. The reason we process your personal data depends on the precise purpose, but can be based on the agreement with you, based on Evian Resort’s legitimate interests (see detail in the explanation) or based on Evian Resort’s own legal obligations.

We consider that the legal bases for using your personal data as set out in this Privacy Statement are as follows:

Contractual necessity: our use of your personal data is necessary to perform our obligations under any contract with you or to take steps prior to entering a contract with you.
Compliance with legal obligations: our use of your personal data is necessary for complying with our legal obligations.
Legitimate Interests: our use of your personal data is necessary for our legitimate interests or the legitimate interests of others. Our legitimate interests might include the following:
1. 1. the management, growth and development of our business, in particular through the development and roll-out of new products and services, including through the analysis of aggregated and anonymized data, in order to better meet the needs and expectations of our users and customers;
  2. operating and ensuring the security of our websites and apps;
  3. ensuring a safe working environment for our staff and visitors;
  4. marketing, market research and business development;
  5. providing services to our customers;
  6. placing, tracking and ensuring fulfilment of orders with our suppliers;
  7. for internal group administrative purposes; and
  8. to create profiles (e.g. groups that may have common characteristics) and provide you with personalized messages and tips about products directly, as well as through traditional and social media campaigns based on your interests and preferences. More information on how your personal data is used and how to opt out is explained below in the "Profiling and automated decision making" section of this Privacy Statement below.

Whenever we collect and use your personal data on the legal basis of legitimate interests, we take care it does not outweigh your rights as an individual.

Consent: We may process your personal data on the basis of your consent. Where you have given consent, but you later change your mind, you may withdraw your consent by contacting us and we will stop doing processing your personal data in this way. However, if you withdraw your consent, this may impact our ability to provide our products and associated services to you.

The table below shows the purposes for which we collect and use your personal data, as well as the legal bases for our use for your personal data. Further information as to our legal bases is set out below the table. Please note that not all of the uses below will be relevant to every individual:

Our purpose(s) for processing your personal data	Our legal basis
Managing our relationship with you To enable you to access, use and place orders via our apps and websites To facilitate deliveries to you To receive, and respond to, enquiries from you, including through our websites and apps, about our products and services and business. To invite you to meetings, congresses or other events that you have registered for or shown an interest in and manage your participation to such events To ask you to leave a review, provide feedback or complete a customer survey or participate in market research To provide you with, and personalize for you, our products, services and offer To send you service communications: for example, information about your order, information related to a service or club that you have requested from us, information about the availability of a product you wanted to purchase and you have asked us to inform you about or information about any changes to our terms and conditions or this Privacy Statement If you have entered into one of our promotions, prize draws, games, contests or competitions, in order to administer it in accordance with its terms To process your payments To keep track of our interactions with you To verify your credentials, authenticate your identity and create and administer your account(s) with Evian Resort To keep a record of your consent and to manage your data subject rights requests	Contractual necessity Legitimate interests Compliance with legal obligations
Marketing our products or services To send you updates, news, promotional, marketing and other communication materials by any means (e.g. telephone, post, email, social media and instant messaging applications), with consent where required by applicable laws, unless you have told us that you would rather not hear from us To Inform you when a product you wanted to purchase is available and you have asked us to inform you To create profiles (e.g. groups that may have common characteristics) based on your interests, preferences and other information (or a combination of them) that help us to understand which products and services will appeal to you To show you personalized content or advertising either directly or through third party websites and apps as well as through traditional and social media campaigns To create consumer categories (segments) of people that have interests and preferences similar to yours (lookalike audiences) to provide personalized content or advertising either directly or through third party websites and apps as well as through traditional and social media campaigns To create brand communities To display any testimonials or reviews you leave on our websites, apps and services for other customers to see To determine the effectiveness of our communications, promotional campaigns and advertising, including by analyzing information collected with the help of external sources To understand your interactions on social media where you mention one of our brands To understand and build our corporate and brand image/reputation Specific rules applicable to electronic newsletters and similar communications Where electronic communications such as newsletters are sent, users may choose to receive one or more of the following categories of communications, subject to their explicit consent: – communications relating to Evian Resort’s own activities, for which Evian Resort acts as data controller; – communications relating to Association Les Mélèzes, les saisons musicales d’Evian’s activities, for which the Association acts as data controller; – communications relating to a joint project (“Les Mélèzes”), carried out jointly by Evian Resort and Association Les Mélèzes, les saisons musicales d’Evian as joint controllers. Each of these three categories of communications is subject to a specific consent. Users may withdraw their consent at any time, independently for each category, without any impact on their access to the website, ticketing services or other features.	Legitimate interests Consent (where you have given it)
Managing and improving our processes and business operations To provide, improve, maintain, keep secure and provide technical support in relation to our websites and apps To recognize you when you return to our websites and apps, to store information about your preferences, and allow us to customize our websites and apps according to your individual interests To evaluate your visit to our websites and apps and your use of our services and prepare reports to compile statistics to understand the type of people who use our websites, apps and services, how they use our websites, apps and services and how to make our websites, apps and services more intuitive To manage, develop and improve our products, services and communications To manage our network and information security systems For fraud prevention purposes For training and quality control purposes For internal corporate reporting, business administration, ensuring adequate insurance coverage for our business, ensuring the security of company facilities, research and development, and identifying and implementing business efficiencies	Legitimate interests Consent (where you have given it)
Other purposes To follow applicable laws and regulations To respond to requests from competent public authorities To authenticate your identity for security purposes, as well as where we are required to do so in accordance with a legal obligation To comply with our transparency, anti-corruption and antibribery obligations For health and safety management purposes (public-facing premises, etc.), including compliance with applicable legal and regulatory obligations To ensure your safety and security and that of others, by the use of CCTV (video surveillance) To establish exercise or defend our legal rights To investigate and take action against illegal or harmful behavior of users and/or visitors To protect Evian Resort, your vital interests, or those of another person To deliver on our sustainability agenda and to follow all applicable laws and regulations	Legitimate interests Compliance with legal obligations

When we collect and use your personal data for new purposes, we will inform you before or at the time of collection (and ask for your consent when required) unless we reasonably consider that this purpose is compatible with the original one as detailed above.

5. Profiling and automated decision making

Essentials: We may use your information to create profiles to personalize our services and communications for you, and to show you relevant ads, sometimes using automated means. When doing so, we ensure to comply within the frame of applicable legal requirements.

We may analyze information about you in order to create profiles (e.g. by compiling individuals into groups that we believe to have certain common characteristics). We use these profiles to personalize our websites, apps, services or products, as well as our communications to you (e.g. by sending/displaying content that may be relevant and useful to you, subject to applicable data protection and e-privacy laws). We may also use these insights to display relevant advertising to you either on our websites or apps, or via third-party websites.

Where we do this, we will of course inform you and we will give you an opportunity to object to these processes in advance. We will also obtain your consent where this is required by law, for instance where information about you is collected via certain types of cookies that we use – please see our Cookie Statement for further details on our use of cookies. You are also free to contact us for further information on this type of processing.

For some services and products, we may process your personal data using automated means. Essentially this means that decisions are taken automatically without human intervention. We will not make decisions based solely on automated decision making to the extent that they have a legal effect or significant impact on you without first notifying you and providing you with clear information about any such automated decision-making, including our lawful basis for carrying it out and the ability to have a human intervention for reviewing the decision.

6. Links to other websites

Essentials: Our websites and apps may include links to third-party sites, plug-ins, or apps for your convenience. We do not control or endorse these third-party sites and recommend that you review the privacy policies of third-party websites before sharing your personal data.

Our websites and apps may contain hyperlinks to third party websites, plug-ins or applications that are not operated by us. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of such third-party websites or any association with their operators.

This Privacy Statement only applies to the personal data that we collect or which we receive from third party sources and over which we act as a data controller, and we cannot be held responsible for personal data about you that is collected and stored by third parties. Third party websites have their own terms and conditions and privacy policies, and you should read these carefully before you submit any personal data to these websites.

We do not endorse or otherwise accept any responsibility or liability for the content of such third-party websites or third-party terms and conditions or policies.

8. Children's Personal Data

Essentials: We take care not to process the personal data of children without specific safeguards, such as parental or legal guardian consent where required.

Most of our websites are designed and intended for use by adults. Where one of our websites is intended for use by a younger audience, we understand the importance of taking extra precautions to protect the privacy and safety of children.

If our websites are ever intended for young audiences, we will in all cases respect our external commitments on responsible marketing, and we will ensure that before we collect personal data, consent is validly obtained from the parent(s) or legal guardian(s) to the extent that this is required by applicable laws and regulations (the age at which this is necessary varies from country to country).

If we discover that we have collected personal data from a child without consent from a parent or legal guardian where such consent should have been obtained, we will delete that personal data as soon as practical.

Essentials: Subject to adequate safeguards, your personal data may be shared, depending on the purposes of processing, with affiliates, third-party service providers and subcontractors, advertising partners and social media platforms (e.g. when you click on a “Like” or “Share” button), business transfer recipients (e.g. in the event of an acquisition) and legal disclosure recipients (such as authorities, but only where they are legally entitled to demand access).

When we share your personal data with affiliates and other organizations, we make sure we only do so with organizations that safeguard and protect your personal data and comply with applicable privacy laws in the same or similar way that we do.

Your personal data will never be sold or rented.

We may, however, share or disclose your personal data as described in this Privacy Statement. Your personal data will be shared with the following third parties for the purposes described:

Other Evian Resort companies/entities: Where it is in our legitimate interests to do so for internal administrative purposes (for example, ensuring consistent and coherent delivery of products to our customers, corporate strategy, merger and acquisition operations, compliance, auditing and monitoring, research and development and quality assurance).
Ticketing services
1. Secutix: As part of the operation of its online ticketing services, Evian Resort uses a specialized ticketing service provider, Secutix, acting as a data processor within the meaning of Regulation (EU) 2016/679. Secutix acts exclusively on behalf of and in accordance with the instructions of Evian Resort in order to ensure ticket sales, payment processing, access control, customer service, and event security.
2. Cover Genius: In connection with the purchase of tickets, Evian Resort may offer optional refund guarantee or insurance products provided by a third-party partner, Cover Genius (Booking Protect Limited). When the user chooses to subscribe to such a product, the personal data necessary for the management of the guarantee or insurance service (such as identification and transaction data) are collected by Cover Genius, which acts as an independent data controller for these processing activities, in accordance with its own privacy policy available at: https://www.xcover.com/en/privacy-policy. Evian Resort is not responsible for the processing of personal data carried out by Cover Genius in this context.
Other third party service providers and subcontractors: Including those which:
1. assist us to carry out your requests, respond to your inquiries, fulfil your orders, honor coupons, provide you with invites, enable you to participate in sweepstakes, such as logistics providers, sponsors and customer support providers;
2. perform core information technology and other business-related services, such as website/app development providers, cloud hosting providers, management and evaluation service providers, data analysts, payment processors, utility providers, insurers;
3. assist in the organization of our events, marketing, advertising and promotional activities; or
4. provide analytics and optimization services relating to our websites and apps.
Social media platforms: When our web pages use social plug-ins from these businesses (such as the “Like" and "Share" buttons). These other businesses may receive and use personal data about your visit to our sites or apps. If you browse our website or view content on our apps, personal data they collect may be connected to your account on their site. For more information on how these businesses use personal data, please read their privacy policies.
Business transfer recipients: Where we sell or buy any business or assets, (such as a merger/absorption), to the prospective seller or buyer of such business or assets, or where substantially all of our or any of our affiliates' assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets. Where appropriate, in such case, the buyer acting as the new data controller processes your data and its privacy statement governs the processing of your personal data.
Legal disclosure recipients: Where we are obliged by law to disclose your personal data (e.g. to government or law enforcement bodies) or where disclosure is required to protect our rights or those of our staff, customers or other third parties.
Association Les Mélèzes, les saisons musicales d’Evian: Depending on the services used and the pages visited, certain personal data may be transmitted to Association Les Mélèzes, les saisons musicales d’Evian. Data collected via pages fully dedicated to the Association (including donation-related data, analytics and cookies) are processed by the Association acting as data controller. Evian Resort acts solely as a technical service provider (processor) on behalf of the Association for these processing activities. In addition, where Evian Resort operates ticketing services for events produced by the Association Les Mélèzes, les saisons musicales d’Evian (or any other third party producers), Evian Resort acts as an independent data controller for ticketing, access control, safety and customer relationship purposes. In this context, Evian Resort may transmit to the Association certain information strictly necessary for the organization and follow-up of the event (such as aggregated attendance data, reporting information, or lists of identified persons where required), the Association acting as a data recipient for its own purposes.

Save as expressly detailed above, we will never share, sell or rent any of your personal data to any third party without notifying you and, where necessary, obtaining your consent.

11. How We Protect Your Personal Data

Essentials: We take the security of your personal data seriously and make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure. We also contractually require that trusted third parties who handle your personal data for us do the same.

We understand that the security of your personal data is important. We make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure. We have implemented a number of security measures to help protect your personal data, and we require that trusted third parties who handle your personal data for us do the same. For example, we implement access controls, use firewalls and secure servers, and we encrypt personal data.

In the course of provision of your personal data to us, your personal data may be transferred over the internet. Although we make every effort to protect the personal data which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal data transmitted to our website and that any such transmission is at your own risk. Then, once we have received your personal data, we will use strict procedures and security features to prevent unauthorized access to it.

Where we have given you (or where you have chosen) a password which enables you to access your online account, you are responsible for keeping this password confidential.

12. How long we store your personal data

Essentials: We keep personal data until it is no longer needed to fulfil the purpose of processing, taking into account how long we might need to have it as well for evidence purposes or to manage complaints or queries.

We keep your personal data for no longer than necessary for the purposes for which the personal data is processed. The length of time for which we retain personal data depends on the purposes for which we collect and use it, for the duration of your contractual relation with us and/or as required to comply with applicable laws and regulations as well as to establish, exercise or defend our legal rights.

For example, where you make a purchase online with us, we will keep the personal data related to your purchase or registration, so we can perform the specific contract you have entered. After that, we will keep the personal data for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase or registration.

13. Your rights

Essentials: You have various rights in relation to your personal data, such as (depending on applicable laws) access to your personal data (including portability in some cases), the right to correct or delete some personal data, the right to limit our processing in certain cases (e.g. through objecting to direct marketing or through withdrawing consent) and the right to lodge a complaint with a data protection authority.

Where we process your personal data, you are entitled to a number of rights established in the relevant applicable laws and can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you. You can exercise your rights by contacting us here.

We will consider all such requests and, in accordance with the applicable laws, will provide our response within a reasonable period, or within the period prescribed by law. Please note, however, that we may rely on certain exemptions to complying with your requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims. If an exemption applies, we will tell you this when responding to your request. ²

We may request you provide us with information necessary to confirm your identity before responding to any request you make.

The right to

You have the right to obtain clear, transparent and easily understandable information about how we use your personal data, and your rights. This is why we are providing you with the information in this Privacy Statement.

You have the right to access the personal data we hold about you, as well as correct, update or complete it at any time.

The right to deletion of y

You have right to request that we delete your personal data. However, this is not an absolute right and we may have legitimate, legal and regulatory reasons to retain your personal data.

The right to ob

Under certain circumstances, you have the right to object to certain types of processing based on grounds relating to your particular situation when such processing is based on our or another's legitimate interest. If you exercise this right, we will stop using your personal data for this purpose, unless we can demonstrate compelling legitimate grounds to continue processing your personal data that would outweigh your interests, rights and freedoms. You have the right to object to the processing of your personal data for direct marketing activities (for example, by clicking on the unsubscribe link in our emails).

The right to withdr

Where we rely on your consent to process personal data, you have the right to withdraw consent at any time, without affecting our processing of your personal data before you withdrew consent.

The right to res

Under certain circumstances you have the right to restrict the processing of your personal data if:

you do not believe the personal data we have about you is accurate; or
you consider that the personal data is not being processed lawfully, but instead of deleting the personal data, you would prefer us to restrict processing instead; or
we no longer need your personal data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims; or
you have objected to the processing of your personal data and are awaiting verification on whether your interests related to that objection outweigh the legitimate grounds for processing your data.

The right to data

Your personal data is portable. This means it can be moved, copied or transmitted electronically. However, this right only applies to personal data you have provided to us and where the processing: (i) is based on your consent or takes place for the performance of a contract; and (ii) it takes place by automated means.

The right to lodge a complaint with a sup

If you think that we have not met the data protection or privacy requirements, you have the right to make a complaint to the data protection authority in the country where you usually live or work, or where an alleged infringement of applicable data protection laws has taken place.

If you want to bring a specific complaint against Evian Resort for the way your personal data has been processed you can raise a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

The righ

If you are a French resident, you also have the right to provide us with directives regarding our use of your personal data after your death.

14. How to contact us

If you have any questions, comments or complaints regarding the processing of your personal data under your local privacy laws, please contact our local Data Protection Offices by following this link.

If you have any remark concerning this corporate privacy Statement, or any question, comment or complaint related to Evian Resort’s corporate activities, you can reach our Data Protection Office via email at dpo@evianresort.com or write to us at Data Protection Office, Evian Resort , Quai Baron de Blonay, 74500 Evian-les-Bains.

For any question, comment or complaint relating to processing activities carried out by Association Les Mélèzes, les saisons musicales d’Evian, you may contact the Association’s Data Protection Officer or designated contact point by email at dpo@evianresort.com or write to us at Data Protection Office, Evian Resort , Quai Baron de Blonay, 74500 Evian-les-Bains.

Change

We may update our Privacy Statement from time to time (for example, to comply with changes in laws or regulations, our practices, procedures and organizational structures, requirements imposed or recommended by supervisory authorities or otherwise). Any changes we make to our Privacy Statement in the future will be posted on this page and will be applicable on the effective date of implementation. Where we are legally required to do so, we will notify you of any changes. Please check back frequently to see any updates or changes to our Privacy Statement.

This Privacy Statement was last updated on December 15^th, 2025.

Basic principles and our privacy commitment

What this Privacy Statement contains: