- Home
- Privacy Policy
Last updated: 2 October 2026.
This policy explains how personal data is processed when you use the Grand Hôtel-Dieu website. It does not cover third-party websites reached through external links.
1. Data controller
SCAPRIM PROPERTY MANAGEMENT, a French simplified joint-stock company with share capital of €1,000,000, registered with the Nanterre Trade and Companies Register under number 434 219 218, whose registered office is at Cœur Défense, 90-102 avenue du Général-de-Gaulle, 92400 Courbevoie, France.
Establishment operating the Grand Hôtel-Dieu website: 9 rue Juliette Récamier, 69006 Lyon, France — SIRET 434 219 218 00279.
General and data-protection contact: ghd.scaprim.pm@gmail.com — telephone: +33 (0)4 72 83 65 56.
2. Processing activities
Browsing, operation and security
When the website is accessed, technical services may process the IP address, date and time, requested URL, browser and device type, and information needed to diagnose errors and prevent abuse. This processing is based on SCAPRIM PROPERTY MANAGEMENT’s legitimate interest in providing and securing the website. Production application logs are retained for no more than 30 days.
Contact form
The form processes your name, email address, optional subject, message, source page and reCAPTCHA security token. Name, email and message are required; without them, the request cannot be processed.
The data is used solely to receive, route and respond to the request. Processing is based on the legitimate interest in answering enquiries or, where a request precedes a contract, on taking pre-contractual steps. Messages are retained for 12 months after the last exchange, unless a legal obligation or the establishment, exercise or defence of legal claims requires specific material to be kept.
Messages are sent to authorised SCAPRIM PROPERTY MANAGEMENT staff and to its technical provider responsible for monitoring successful delivery. An undelivered notification may remain in a secured technical queue for up to 14 days.
Prize competitions
The website may publish competition rules, while participation may take place on Instagram. The rules for each operation identify the organiser, procedure, required data, recipients and applicable retention periods. When SCAPRIM PROPERTY MANAGEMENT organises a competition, participation data and, for winners, the contact details needed to deliver the prize are processed to administer the competition and perform its rules. Unless the applicable rules specify otherwise, participant data is deleted within three months after prizes are delivered; information strictly required as evidence or to meet a legal obligation may be archived for the applicable statutory period.
3. Cookies, local storage and external services
Non-essential services are loaded only after you consent. Accept and reject are presented at the same level. Your choice is stored locally in your browser for six months, after which you are asked again.
- Google Analytics 4: audience measurement, only with consent. Google Signals and advertising features are disabled. Audience data is retained for 14 months and Analytics cookie lifetime is limited to 13 months without automatic renewal.
- Google reCAPTCHA: protects the form from automated submissions, only with consent. If you refuse, the online form remains unavailable; you may email the contact address above directly.
- YouTube: videos are blocked and no request is sent to YouTube before consent.
You may withdraw consent at any time using this button. Withdrawal does not affect processing lawfully carried out beforehand.
4. Recipients, processors and transfers
Data is accessible only to authorised SCAPRIM PROPERTY MANAGEMENT staff and, depending on the service, to its technical provider for contact-form delivery monitoring, Amazon Web Services for website hosting and delivery, and Google for Gmail, Google Analytics, reCAPTCHA and YouTube. Primary application storage is configured in AWS’s Paris region; CloudFront is a global content-delivery network.
Some providers may process data outside the European Economic Area. Where this occurs, the transfer relies on a mechanism recognised by the GDPR, such as an adequacy decision or standard contractual clauses, depending on the service. See also Google’s Privacy Policy and AWS Privacy information.
5. Your rights
You may request access to, rectification or erasure of your data, restriction of processing, object to processing based on legitimate interests and, where the relevant conditions are met, request portability. You may withdraw consent at any time for processing that relies on it.
To exercise your rights, email ghd.scaprim.pm@gmail.com and describe your request. Proof of identity will be requested only where there is reasonable doubt. We will reply within the statutory period, generally one month.
You may also lodge a complaint with the French data-protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or with your local supervisory authority.
6. Security and policy changes
Proportionate technical and organisational measures are used to reduce unauthorised access, loss, alteration and disclosure. Since no system can offer absolute security, incidents are handled in accordance with applicable requirements.
This policy may change to reflect updates to the website, providers or the law. The date at the top identifies the current version.