Skip to content

Personal data policy

We hold and use a client database as part of our work. It has been declared to the CNIL, the French data protection authority.

Data collection

Who is concerned?

  • Individuals and companies registered with the RCS that run a property or own equipment audited, checked, inspected or trained by us.
  • Individuals not registered with the RCS who own property audited, checked, inspected or trained by us.

Which data?

  • Company names, addresses, SIRET numbers, phone numbers and email addresses of operators, owning companies, agents and clients.
  • Trading names, addresses, phone numbers, email addresses and websites of the properties audited, checked or inspected.

We only collect the data needed to set up and perform service contracts.

Use and publication

Official ratings

Records must be published in State databases: Atout France for collective accommodation, and the national network of departmental destinations for holiday rentals.

Other work

  • The DGE, for Qualité Tourisme.
  • Labelling bodies, for quality labels.
  • Prefectures and regional health agencies, where a compliance check or training concerns them.
  • Funding bodies, for subsidised training.

Data protection

  • The client database and reports are stored on our computers and a secure server.
  • Data is never sold, transferred or shared with third parties for marketing purposes. Clients may, however, receive offers or alerts sent directly by us.
  • As ratings and labels are public, we cannot be held responsible for how data published by local or national bodies is used.
  • Data may be consulted by the supervisory bodies that regularly audit our work.

Updating, retention and erasure

  • Under the French Data Protection Act of 6 January 1978, you may access and correct your data at any time.
  • Proof of identity and supporting evidence may be requested before any change.
  • Data is kept for at least 10 years.
  • You can ask for erasure at the end of the rating, label or compliance period if you no longer wish to use our services or stop trading. Erasure takes place within one month at most.
  • Completed work is kept for at least 10 years, for the traceability required by ISO/IEC 17020.

Access to data

  • Anyone can request the data held about them, following the GDPR request process.
  • We reply within one month at most. If the search has not succeeded by then, you are told why by email.
  • Proof of identity may be required for requests from an unknown address.
  • Data is sent as a structured record containing all the information held.

Data controller

The organisation’s management system manager is the data controller. Contact: rsm@2bgqualite.fr, or by post: 2 B & G Qualité SARL, 380 rue Clément Ader, local 14, 27930 Le Vieil-Évreux, France.