Published on 14/11/2025

Your privacy is of the utmost importance to us. We understand that your trust in us is our priority and that is why this privacy statement applies to our website https://www.yonahotel.com (hereinafter the "Site") and to all relationships or otherwise existing between Yona and its customers as well as its partners. We take the protection and respect of the privacy of the users of our website seriously and take the necessary measures to guarantee this. Yona ensures the protection of users’ personal data in accordance with the provisions of the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation (GDPR: No. 2016-679).

What is a privacy policy? It is a written document that explains to you, as a user of our website, the personal information we collect about you, when you browse our Site. We are therefore committed to respecting the confidentiality of the personal information we collect as described below. Our users will find in this "Privacy Policy" the personal information that we collect about them, the purposes for which this information is used, the means of collecting it, the means available to users to object to the collection, and the security measures taken to protect their personal information. "Personal information" or ""personal data" means any information that can be used to identify a user, such as surnames, first names, postal and e-mail addresses, telephone numbers, an IP address, a computer connection identifier, etc.

Through the Site, Yona may collect the personal data of any person sending a question to Yona via the "Contact" section of the Site, booking a stay online or subscribing to the Site’s newsletter. The collection and processing of personal data transmitted by the user to Yona are subject to the provisions of the French Data Protection Act of January 6, 1978 as amended and the General Data Protection Regulation (GDPR: No. 2016-679).

The Site provides you with a form allowing you to appeal to your rights relating to the protection of your privacy. Simply click on the following link: https: //www.yonahotel.com/fr/formulaire-GDPR.

Please read this "Privacy Policy" carefully in conjunction with Yona’s "Cookies Policy".

1 – Collection of personal data

Yona may collect and process personal data, see below, when you fill in a contact form, or others, on our website https://www.yonahotel.com.

• Last name
• First name
• Civility
• Company name
• Postal address
• E-mail address
• Telephone number (landline/mobile)
• Comfort data
• Information concerning your use of the Site such as IP address, browser type, software, hardware, geographical location data and the web page you were visiting when you received access to the website.

In addition, Yona automatically collects anonymous information about your use of our Site and its services. For example, Yona will automatically record which parts of the website you visit, which web browser you use, which website you were visiting when you received access to the website, and your IP address. We cannot identify you on the basis of this data, but it does enable Yona to compile statistics on website usage and audience, and to send more targeted communication. The personal information we collect is gathered through the methods described below, in section "2 – Methods of collecting personal data".

2 – Personal data collection methods

Your personal information is collected through the following methods:

• Collaboration with Yona
• Visiting the https://www.yonahotel.com website
• Creation of a customer account
• Contact form(s)
• Quote request form
• Your use of Yona’s services
• Verification of your identity
• Subscription to communications and newsletter (via the Site)
• Correspondence with and from Yona
• Exchange of business cards
• Reception of and exchanges with Yona staff
• Opinion polls
• Cookies (for more information: "Cookies policy")
• Competitions

The personal data collected by Yona is therefore expressly and voluntarily provided by you.

3 – Use of personal data

https://www.yonahotel.com may process all or part of the data collected in order to:

• Allow navigation on the Site, management and traceability of services ordered by the user.
• Optimize the user experience, quality, management, navigation and content of the Yona website.
• Customer account creation and confirmation.
• Customer/lead relationship follow-up on bookings.
• Provision of Yona goods and services.
• Improve customer service and your care needs.
• Contact you by e-mail and/or telephone.
• Conduct satisfaction surveys, studies and optional polls on the Site.
• Send targeted marketing campaigns and advertisements from Yona, updates and promotional offers based on your communication preferences and consent.
• Provide personalized advertising content.
• Send quotations, receipts and invoices.
• Collect statistical data.
• Prepare an offer.
• Administer a competition.
• Fulfill a contract with Yona.
• Prevent and combat computer fraud (spamming, hacking, etc.).

4 – Confidentiality of personal data

Yona is the sole owner of the information collected on the Site. Your personal data will not be sold, exchanged, transferred, or given to third parties for any reason whatsoever, without your consent, other than what is necessary to respond to a request and/or transaction within the framework of customer relationship management, the provision of Yona’s services and their optimization.

5 – Person responsible for the collection of personal data

For Personal Data collected as part of the creation of the User’s personal account and browsing on the Site, the person responsible for processing personal data is: Maxime Wucher.

As the party responsible for processing the data it collects, https://www.yonahotel.com undertakes to comply with the legal provisions in force. In particular, it is its responsibility to establish the purposes of its data processing, to provide its leads and customers with complete information on the processing of their personal data, once their consent has been obtained, and to maintain an accurate data processing register.

Whenever the Site processes personal data, Yona takes all reasonable steps to ensure that the personal data is accurate and relevant to the purposes for which the Site processes it.

6 – Disclosure of personal data to third parties

Yona refrains from processing, hosting or transferring information collected on its customers to a country outside the European Union or recognized as "inadequate" by the European Commission without informing the customer in advance. For all that, the Site remains free to choose its technical and commercial subcontractors on condition that they present sufficient guarantees with regard to the requirements of the General Data Protection Regulation (GDPR: n° 2016-679).

The Site does not sell your personal data, which is therefore only used by necessity or for statistical and analysis purposes. We undertake not to sell, trade or transfer your personally identifiable information to third parties. If it is necessary for Yona to disclose your personal data to third parties, the relevant third party will be required to use your personal data in accordance with the provisions of this "Privacy Policy". We believe it is necessary to share information in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of use, or when we are required to do so by law.

Notwithstanding the foregoing, Yona may disclose your personal data:

• To the competent authorities when Yona is required to do so by law or in connection with legal proceedings or future legal proceedings and to secure and defend our rights.
• Where Yona or substantially all of its assets are taken over by a third party, in which case your personal data, which Yona has collected, will constitute one of the transferred assets.

The Site undertakes to take all necessary precautions to preserve the security of the information and in particular to ensure that it is not communicated to unauthorized persons. However, if an incident affecting the integrity or confidentiality of the customer’s information is brought to the attention of Yona, the latter must inform the customer as soon as possible and inform him of the corrective measures taken. Furthermore, the Site does not collect any "sensitive data".

The User’s personal data may be processed by the Site’s subsidiaries and subcontractors (service providers), exclusively in order to achieve the purposes of the present "Privacy Policy", such as:

• The service provider in charge of the reservation and payment system(s) for the management and validation of your request.
• Diadao Productive, digital agency, for the creation and maintenance of the website.

Within the limits of their respective responsibilities and for the purposes mentioned above, the main people likely to have access to the data of https://www.yonahotel.com users are mainly our customer service agents.

In all other cases, Yona will not sell, rent or transmit your personal data to third parties, except when it has obtained your authorization in this respect and has entered into a data processing contract with the third party concerned, which contains the necessary guarantees regarding confidentiality and compliance of your personal data with the protection of your private and professional life. If you do not wish your personal data to be shared with third parties, you may object to this at the time of collection or at any time thereafter, as mentioned in section "8 – Rights relating to the protection of your privacy".

7 – Storage of personal data

Except when a longer retention period is required or justified by law or by compliance with another legal obligation such as 10 years for accounting records, Yona will retain your personal data for one from the last contact with the hotel for a lead and for a period of 5 years for Yona’s customers in order to achieve and fulfill the purposes as described in the "Privacy Policy" statement, under point "3 – Use of personal data".

8 – Your privacy rights

In accordance with the provisions of the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation (GDPR: no. 2016-679), users of the Site may appeal to their rights relating to the protection of privacy, as stipulated below:

• Right of access (Article 15 GDPR) and rectification (Article 16 GDPR), update, completeness of Users’ data right to block or erase Users’ personal data (Article 17 GDPR), when they are inaccurate, incomplete, equivocal, outdated, or whose collection, use, communication or storage is prohibited.
• Right to withdraw consent at any time (Article 13-2c GDPR).
• Right to limit the processing of Users’ data (Article 18 GDPR).
• Right to object to the processing of Users’ data (Article 21 GDPR).
• Right to portability of data provided by Users, where such data is subject to automated processing based on their consent or on a contract (Article 20 GDPR).
• Right to define the fate of Users’ data after their death and to choose to whom Yona should communicate (or not) their data to a third party that they have previously designated.

As soon as the Site becomes aware of a User’s death, and in the absence of instructions from the User, Yona undertakes to destroy the User’s data, unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.

If the User wishes to exercise these rights on the Site, you may send us a notice stating the right(s) you wish to enforce in the use of your personal data. You may exercise these rights free of charge by contacting Maxime Wucher, in his capacity as Managing Director, by e-mail at info@yonahotel.com, or by post at Yona, 169 route d’Ottrott, 67210 Obernai, France, specifying in the subject line of the e-mail or post "Rights relating to the protection of your privacy" or by completing the request form at the following address: https: //www.yonahotel.com/fr/formulaire-GDPR.

In this case, the User must indicate the personal data he/she would like Yona to correct, update or delete, identifying him/herself precisely with a copy of an identity document (identity card or passport). Requests for the deletion of personal data will be subject to the obligations imposed on Yona by law, in particular as regards the retention or archiving of documents.

In addition, you can always update, modify and/or verify, via your account, your personal data that you were required to provide when creating your customer account. If you no longer wish to receive newsletters, service bulletins or advertisements, you may unsubscribe at any time by clicking on the "unsubscribe" button at the bottom of any Yona e-mail.

9 – Protection of personal data

Yona undertakes to take reasonable physical, technological and organizational precautions to prevent unauthorized access to, loss, misuse or alteration of your personal data. We use state-of-the-art encryption to protect sensitive information transmitted online. We also protect your information offline. Only employees who need to perform a specific job (for example, billing or customer service) have access to personally identifiable information.

Data collected and stored via the Site is hosted by an external company, Forever – Micrologic, which provides PMS (Property Management System) software for hotel management and customer relationship management.

Founded in 1985, Micrologic is an IT services and engineering company specializing in the design and development of professional and educational software. Forever Gestion Hôtel/Restaurant software enables technical and organizational measures to be defined within the hotel to protect user data appropriately.

Despite our best efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

Should we become aware of a security breach, we will notify the users concerned so that they can take appropriate action. Our incident notification procedures take account of our legal obligations, whether at national or European level. We are committed to keeping our customers fully informed of all matters relating to the security of their account, and to providing them with all the necessary information to help them meet their own regulatory reporting obligations.

No personal information of the user of the Site is published without the user’s knowledge, exchanged, transferred, ceded or sold on any medium whatsoever to third parties.

10 – Updating of the "Privacy Policy" declaration

Yona is entitled to update the present "Privacy Policy" declaration by installing a new version on the https://www.yonahotel.com website. It is particularly recommended that you regularly consult the website and the relevant page on which the "Privacy Policy" is reproduced, to ensure that you are aware of the new terms.

11 – Hyperlinks to other websites

The Site may contain hyperlinks to other websites. In no event shall Yona be responsible for the "Privacy Policy" or privacy practices of any third party.

12 – Consent

By using our website https://www.yonahotel.com, you are obliged to accept the present "Privacy Policy" as well as the "Terms and Conditions of Use" through the check boxes present when collecting information in order to benefit from Yona’s services.

13 – Complaints

If you have any complaints about the way in which Yona collects, uses and/or processes your personal data, you can contact us, in the first instance, so that we can resolve the complaint(s). If this is not sufficient, Users of the Site may lodge a complaint with the supervisory authorities and in particular with the Commission Nationale de l’Informatique et des Libertés (CNIL) by following the link below: https: //www.cnil.fr/fr/plaintes

14 – Contact Yona

If you have any questions about the "Privacy Policy" or about the way Yona collects, uses or processes your personal data, please contact us by e-mail at info@yonahotel.com, or by post at Yona, 169 route d’Ottrott, 67210 Obernai, France.