-p-1080.webp)
Privacy Policy
The website accessible at the URL https://www.cowleymanor.com/ (hereinafter the “Website”) is published by the company Experimental, a société par actions simplifiée, with a share capital of €20,085,900 register in the Paris Trade and Companies Register under number 524 095 064, whose registered office is located at 14-16, boulevard Poissonnière, 75009, Paris, France (hereinafter “Experimental ).
References in this privacy policy to “Experimental”, “we”, “us” or “our” means Experimental and its subsidiaries, including Experimental Manor Amethyst Ltd (Company number: 13998745) of 19 Gerrard Street, London, England, W1D 6JG, which operates C-Side Spa.
The persons who can access the Website and/or C-Side Spa are referred to as “Users”.
Our privacy policy applies to the personal data that we collect and use when Users visit our Website and/or C-Side Spa.
Collection of Personal Data
Experimental may collect and process, on its own behalf, the User’s(or the User’s parent) or may have been collected following the sending of a collection form available on the Website (including, without limitation, contact forms or spa treatment forms or bookings) and/or the completion and submission of a membership form, (ii) subsequently in the context of its various exchanges with Experimental, (iii) though the mere use of the Website provided a valid consent has been given by the User and (iv) through your visits on our premises (including with respect to data that may be collected via CCTV recordings).
When providing certain services to Users, we may collect information that is special category personal data (for instance, if Users are asked to complete a health questionnaire (whether about their and/or their children’s health) or provide information about a medical condition prior to a spa treatment or when attending a fitness class). This information is only processed where you provide explicit consent., Iit is necessary to protect your vital interests or the data was manifestly made public by the User.
Experimental will not process any personal data other than those described in this privacy policy (hereinafter the “Privacy Policy”) without the express consent of the User.
Legal Basis for Processing
In accordance with the applicable legislation on the protection of personal data, the processing of personal data implemented by Experimental is based on one of the following legal bases.
The performance of the contractual relations of Experimental with the Users
In order to use the Website, attend C-Side Spa and benefit from the services we offers, Users must accept the general terms and conditions of the Website and/or C-Side Spa (as applicable) available at https://www.cowleymanorexperimental.com/terms-and-conditions and https://www.cowleymanorexperimental.com/terms-conditions-spa , and the terms of our privacy policy at https://www.cowleymanor.com/privacy-policy/.
These documents formalise a contractual relationship between each of the Users and Experimental.
The personal data collected and processed by Experimental in this context (including, for instance, when a User provides us a completed membership form) are necessary for the performance of these contracts, the purposes of which are specified in Article 4 – “Purposes of the processing” hereunder.
User’S consent
When Users browse the Website, Experimental may read and/or write trackers on their device (e.g., computer, mobile device).
Before installing cookies on the User’s device, Experimental collects the User’s consent through a “cookie banner”.
A User may also provide explicit consent for us to use certain special category personal data, for instance, where a User elects to share in a clear statement information regarding a medical condition so that we may adapt a spa treatment accordingly.
PROTECTION OF A USER'S VITAL INTERESTS
If a User suffers an accident on our premises (such as a life-threatening allergic reaction), we may need to process and provide details of a User’s personal data to inform emergency services of the User’s condition, to the extent it is necessary to protect the User’s vital interests.
Compliance with a legal obligation to which Experimental is subject
The processing of User’s personal data implemented by Experimental may be imposed by a legal obligation (e.g., Decree No. 2011-219 of February 2011 on the retention of the data identifying any person who has contributed to the creation of online content).
Legitimate interest of Experimental
Experimental may have a legitimate interest authorizing it to collect and process the personal data of Users who visit the Website (e.g., implementation of commercial prospecting operations with its prospects).
In this context, Experimental ensures that the processing implemented is necessary for the achievement of its legitimate interest and that it does not infringe the interests and fundamental rights of Users.
Categories of Personal Data Collected and Processed
Experimental may collect, store and process the following categories of personal data:
- identification data (e.g., name, surname, date of birth);
- contact data (e.g., phone number, e-mail address, postal address);
- economic and financial information (e.g., card number, transaction details);
- personal life and lifestyle data;
- Experimental may collect information related to the User’s meal preferences, which could indirectly give indications regarding the User’s religious beliefs, ethnic origin or health status and thus qualify as sensitive / special category data underhe GDPR. Such data would only be gathered when the User willingly decides to formulate a specific request in this respect;
- data related to professional life (e.g., curriculum vitae);
- location data (e.g., GPS);
- connection data (e.g., IP address, logs).
- Experimental may collect information related to the User’s (and/or their children’s) health, which qualifies as special category data under the GDPR. Such data would only be gathered when the User willingly decides to provide it;
- Video images (CCTV imaging) of Users that may be taken when you attend our premises. CCTV is only installed in public areas (not, for instance, changing areas).
Experimental does not collect any information relating to political opinions, morals, sexual orientation or genetic characteristics.
Purpose of the Processing
The processing of User’s personal data by Experimental is necessary to enable it to accomplish the following purpose.
Processing for the purpose of online or in-person booking
- optimisation of the Website for the Users’ browsing;
- creation of a customer account by Users on the Website;
- confirm and process the User’s reservation in one of the Experimental establishments;
- process the payment of the reservation in one of the Experimental establishments;
- sending confirmation or message prior to the arrival of the User;
- conduct a customer satisfaction survey.
Processing for the purpose of managing applications
The processing of personal data of the User by Experimental is necessary if the User accesses the job application service or applies for a membership :
- receipt of job applications;
- recruitment of a candidate.
- receipt of a membership application;
- contacting applicants about their membership application;
- issuing a membership (including membership card) and contacting members about their membership..
Processing for the purpose of sending the newsletter and marketing communication
- sending Experimental newsletters, the User may unsubscribe at any time from any marketing message by clicking on the unsubscribe link at the end of said message;
- measurement statistics and marketing analysis;
- communication with a User who fills in a contact form on the Website;
- constitution of a file of customers and prospects;
- informing Users in the event of changes affecting the services offered via the Website.
Processing for the purpose of rights management
- prevention and fight against fraud during the payment of the order;
- management of disputes;
- to comply with a legal requirement or in the context of legal proceedings or litigation;
- informing Users in the event of changes affecting the services offered via the Website;
- management of requests to exercise the rights.
Processing for the purpose of ensuring your safety and security
- to adapt any treatment, food, fitness class or other service to any health condition, food allergy or preference Users may share with us (whether about themselves or, where applicable, their children);
- to ensure security on our premises and protect the vital interests of Users by operating CCTV in public areas.
Rights of the Data Subjects
Users have a right of access, modification, opposition, limitation, portability, rectification to define guidelines for the fate of their data after their death and deletion of their personal data, the latter being subject to compliance with the following rules:
- The request is made by the person concerned or the next of kin and is attached to a copy or a current identity document.
- The request must be made in writing to the following address: gdpr@expegroup.com
For the purpose of the right to data portability, the information requested by the User will be provided to him/her in electronic form, unless expressly requested otherwise.
With regard to the right to the deletion of the User's personal data, this will not be applicable in cases where the processing is implemented to meet a legal obligation.
Data Retention
The User’s personal data in relation to a request for information on or booking the services offered by Experimental (e.g., name, surname, email address) are kept for a period of three (3) years from their collection.
The statistical data of audience measurements are not kept for a period longer than thirteen (13) months.
CCTV recordings are stored on a secure server for a maximum of 1 month for security purposes.
In the event of litigation, all information, documents, and exhibits containing the User’s personal data tending to establish the disputed facts may be kept for the duration of the proceedings, including for a period longer than those indicated above.
Some data may be archived beyond the periods provided for the needs of research, the establishment and prosecution of criminal offenses for the sole purpose of providing the judicial authority with these data as necessary.
Archiving implies that these data are anonymised and can no longer be consulted online but are extracted and stored on an independent and secure support.
Data Recipient
The User’s personal data collected and processed by Experimental are communicated to the following recipients for the sole purpose described above.
Internal services of Experimental
Experimental shares Users’ Personal Data with its internal departments, solely for the purpose defined in Article 4 above for which they are authorized.
The members of the internal department who process Users’ personal data are subject to an obligation of confidentiality regarding such data.
Affiliates of ExperimentaL
Experimental shares Users’ personal data with its affiliates, strictly for the purpose of:
- Managing reservations, privatisation requests and group reservations in each establishment managed by a subsidiary;
- Managing applications for job vacancies in each establishment managed by a subsidiary.
In accordance with European and French legislation on the protection of personal data (European Regulation No. 2016/679 of April 27, 2016, on the protection of personal data, and the French Data Protection Act No. 78-17 of January 6, 1978), the subsidiaries of the Experimental process User’s personal data.
Third party suppliers and service providers
Experimental may transfer temporarily and securely to third parties some of the User’s personal data when necessary:
- for the operation and maintenance of the Website (e.g., Influence Society);
- with partners with whom Experimental have contracted to enable the execution of its contacts with Users (e.g., Synxis, Zenchef, OTAs);
- with partners with whom Experimental have contracted to enable it to manage its customers and prospects (e.g., advertising platforms, Sendethic, Influence Society);
- with some regulated professionals such as accountants, auditors or lawyers.
As such, when the third party concerned is located outside the European Union, or in a country that does not have adequate regulation within the meaning of the GDPR, Experimental provides a framework for its contractual relationship with third party by implementing an appropriate contractual arrangement containing appropriate safeguards.
Administrative and judicial authorities
Only in cases where such disclosure is required by a legal obligation, Experimental will disclose a User’s personal data to the administrative or judicial authorities that require it.
Cookies
Experimental also uses web analytics cookies to better understand User behaviour. These tools collect information and generate reports on Website usage statistics without Users necessarily being personally identified by the third party providing the cookie (e.g., Google).
In addition to generating reports on Website usage statistics, these audience analysis cookies also make it possible, in combination with certain other advertising cookies (placed by third-party website and/or content when accessed by the User), to display more relevant ads on the Website.
Each User has the possibility of refusing cookies by configuring their Internet browser:
- InternetExplorer™: http://windows.microsoft.com/fr-fr/internet-explorer/use-tracking-protection#ie=ie-11
- Safari™: http://support.apple.com/kb/PH11952;
- Chrome™: https://support.google.com/chrome/answer/114836? ;
- Firefox™: https://support.mozilla.org/fr/kb/comment-activer-option-ne-pas-pister;
- Opera™: http://help.opera.com/Windows/12.10/fr/notrack.html;
- Edge™: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy.
Statistical Use of Anonymous Data
As part of its activity, Experimental collects, processes and stores statistical data relating to the use of the Website and relating to the activities of Users.
This utilisation data which may be transmitted to third parties, is anonymous and does not allow for the identification of Users, even indirectly.
Modification of the Privacy Policy
Experimental has the right to make, at any time, any changes to the Privacy Policy that it deems necessary and useful.
In case of modification of the Privacy Policy, Experimental undertakes, as applicable, to notify Users of such changes and/or, with respect to Website Users, to make the User accept the new Privacy Policy again when the User accesses the Website.
The Privacy Policy will also be accessible by the User on the Website.
