Privacy Policy

This Privacy Policy explains how CHEZ GIROUD, which operates Le Grand Som, collects and uses personal data when visitors browse the website and use its forms.

Last updated: 12/10/2026

1. Data Controller

The data controller is:

CHEZ GIROUD, a French simplified joint-stock company (SAS) with a share capital of €14,000
336 route du Dauphiné, 38380 Saint-Pierre-d’Entremont, France
Email: legrandsom@orange.fr
Telephone: 04 79 36 76 20

Dedicated data protection contact: [TO BE COMPLETED if different from the contact details above].

2. Data Collected and Purposes of Processing

Contact Form

The information requested through the contact form, such as name, email address, telephone number where provided, and message content, is used to respond to the user's enquiry and manage any subsequent correspondence.

Booking Enquiries

The information entered in the booking enquiry form, including contact details, preferred dates, number of guests and any additional information provided, is used to review the enquiry, contact the user and manage any necessary follow-up. Submitting the form does not constitute a confirmed booking.

Quotation Requests and Events

Information relating to an event or quotation request, including contact details, date, type of event, number of participants, venue and services requested, is used to prepare a response and, where appropriate, provide a commercial proposal.

Website Analytics

The website uses Google Analytics 4 to analyse visitor traffic and better understand how its pages are used. The data that may be collected depends on the actual configuration of the tool and the choices made by the user.

Actual GA4 configuration: [TO BE COMPLETED: measurement ID, enabled settings, data collected, configured retention period and consent arrangements].

3. Legal Basis for Processing

Contact, booking and quotation enquiries: pre-contractual measures taken at the request of the individual, where applicable, or legitimate interest in responding to enquiries and managing subsequent correspondence.
Legal obligations: where certain data must be retained to comply with a legal obligation.
Google Analytics 4 and associated cookies: prior consent where required by applicable regulations. Any potential exemption must be justified by the actual configuration of the tool and compliance with the applicable criteria.

4. Mandatory and Optional Information

Mandatory fields are identified in the forms. The information requested is limited to what is necessary to process the enquiry. If the required information is not provided, the establishment may be unable to respond.

5. Data Recipients

Personal data may be accessed, within the scope of their respective responsibilities, by authorised CHEZ GIROUD personnel and technical service providers necessary for the operation of the website and the processing of enquiries.

Website hosting: IONOS
Website maintenance and development: EURL Week4all, trading as Net-tendance, according to the access actually granted and the services provided.
Website analytics: Google Analytics 4, according to the settings and terms of service actually in use.
Other recipients: [TO BE COMPLETED, if applicable].

6. Data Transfers Outside the European Economic Area

Depending on the configuration of the services used, certain data may be processed outside the European Economic Area. Any such transfers, the countries concerned and the applicable safeguards must be specified after verifying the services actually enabled and their contractual terms.

Information on data transfers: [TO BE COMPLETED after verifying the settings and contracts of the relevant service providers].

7. Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it was collected, subject to applicable legal obligations.

Contact enquiries: [RETENTION PERIOD TO BE DEFINED].
Unconfirmed booking enquiries: [RETENTION PERIOD TO BE DEFINED].
Quotation and event enquiries: [RETENTION PERIOD TO BE DEFINED].
Customer data and accounting records: in accordance with applicable legal obligations and relevant retention periods.
Google Analytics 4: [CONFIGURED GA4 RETENTION PERIOD TO BE COMPLETED].

8. Your Rights

Under the conditions provided for by applicable regulations, you may request access to your personal data, its correction or deletion, restriction of its processing, object to certain types of processing, or request data portability where this right applies. Where processing is based on consent, you may withdraw your consent at any time, with effect for the future.

To exercise your rights, please contact: legrandsom@orange.fr. Reasonable verification of your identity may be requested where necessary.

You may also lodge a complaint with the French Data Protection Authority (Commission nationale de l'informatique et des libertés – CNIL): www.cnil.fr.

9. Cookies and Consent Management

Certain cookies or tracking technologies are necessary for the website to function properly. Others, particularly those used for website analytics, may require your prior consent depending on their purpose and configuration.

Where consent is required, the relevant tracking technologies must not be stored or accessed before you have given your affirmative consent. You must be able to accept, reject and change your preferences with comparable ease.

To change your preferences, use the "Manage Cookies" link available in the website footer.

Consent management platform used: [CMP NAME TO BE COMPLETED].

10. Security

CHEZ GIROUD implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. The measures actually implemented depend, in particular, on website access permissions, hosting arrangements and the tools used.

11. Updates to This Policy

This Privacy Policy may be updated to reflect changes to the website, data processing activities or applicable regulations. The date of the most recent update is displayed at the top of this page.

Back