Privacy Policy

Updated: October 2025

1. Purpose

This Privacy Policy (hereinafter the “Privacy Policy”) demonstrates the commitment of Experimental Group, a simplified joint-stock company with a share capital of €20,100,900.00, registered with the Paris Trade and Companies Register under number 524 095 064, with VAT number FR48824023063, and whose registered office is located at 14-16, Boulevard Poissonnière, 75009, Paris, France (hereinafter the “Company”).

This Privacy Policy informs you of the processing of personal data, the types of data collected, and your rights when using our website: www.experimentalgroup.com (hereinafter the “Site”), operated by the Company.

The Site allows you to:

• Choose the language of the website (French or English)
• Browse the websites of all hotels in the group
• Make a reservation
• Access contact information for the various restaurants, bars, spas, shops, and beaches of each hotel in the group
• Subscribe to the newsletter
• Join the Experimental Group team
• Access the photo gallery
• Follow us on social media
  ‍

2. Processing of Your Personal Data

2.1. Description of Personal Data Processing

In accordance with applicable laws and regulations, the Company, acting as data controller, collects certain personal data when you visit the Site:

When booking a stay at our establishments, we may collect personal data such as arrival and departure dates, number of travelers, location, and optional extras (e.g., alcohol consumption).

For payment of your stay, we collect your contact and banking information in compliance with security standards.

If you need to contact us, you can provide your name, first name, phone number, and email via a form accessible under the “Contact Us” section.

If you wish to follow our latest news, you may subscribe to the newsletter by providing your email address. This allows you to receive our news and offers, with the possibility to unsubscribe at any time.

To join our team, you can submit a spontaneous application via “Work with Us,” which allows us to collect personal data such as your name, email address, CV, and cover letter. These data will be used to manage your application.

When visiting the Site, the Company also collects the following personal data: connection logs, login information, and IP address.

The Company uses your personal data for the following purposes:

2.2. Recipients / Transfers of Your Personal Data

Access to your personal data is restricted to authorized personnel for the purpose of processing, including the communication, HR, and sales departments, as well as IT/technical service providers supporting the Company.

For bookings, information about your stay and payment may be shared with teams handling reservations, billing, customer follow-up, and post-stay services to ensure proper processing.

Your personal data may also be shared with third parties: if required by law or legal proceedings, in response to public or judicial authority requests, or when necessary to ensure safety or protect the public.

Your personal data is transferred to Webflow, which hosts the Site in the United States, and to Namastay, our online payment manager. Such transfers occur outside the European Economic Area.

The Company ensures an equivalent level of protection in compliance with GDPR, including the use of EU Standard Contractual Clauses (updated June 2021) and additional security guarantees as required by the CJEU “Schrems II” ruling of 16 July 2020.

Social media buttons on the Site may collect data according to the privacy policies of these third-party platforms. We encourage you to review their privacy policies.

2.3. Security of Your Personal Data

The Company implements appropriate technical and organizational measures to ensure the security of your personal data, including: pseudonymization and encryption, confidentiality, integrity, availability, and resilience of systems, data recovery procedures, and regular testing and evaluation of security measures.

2.4. Retention of Your Personal Data

Your personal data is retained only as long as necessary for the purposes for which it was collected, to meet your needs, comply with legal obligations, exercise rights, or for statistical/historical purposes. Data will be deleted or anonymized at the end of the retention period.

2.5. Your Rights Regarding Personal Data

You have the following rights:

• Access and rectification: Request access or correction of your data, know its origin, and complete incomplete data.
• Deletion: Request deletion when data is no longer necessary, consent is withdrawn, data is processed unlawfully, or required by law.
• Objection: Object to the processing of personal data within legal obligations.
• Restriction: Request restriction if data accuracy is contested, no longer needed, or if objection is raised.
• Automated decisions: Opt out of decisions based solely on automated processing that significantly affect you.
• Portability: Request your data in a structured, machine-readable format or transfer to another data controller when processing is based on consent and automated.
• Advance directives after death: Define instructions regarding your personal data after death and designate a person to exercise your rights. In absence of instructions, your heirs may exercise these rights.
• Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Complaints: Submit a complaint to the CNIL (https://www.cnil.fr/en/online-complaints) or contact them at 3 Place de Fontenoy, 75007 Paris, Tel: 01 53 73 22 22. You are encouraged to inform the Company’s Data Protection Officer first.

Requests can be made to the Data Protection Officer at gdpr@expegroup.com or by post at 14-16, Boulevard Poissonnière, 75009, Paris, France. Identity verification may be requested via a valid ID copy, which will be deleted after processing your request unless retained for legal proof.

2.6. Links to Third-Party Sites

The Site may include links to third-party websites. These websites have independent privacy policies. We encourage you to read their privacy policies.

2.7. Language

This Privacy Policy is written in French. In case of translation, the French version prevails in case of dispute.

2.8. Cookies

Cookie management is detailed in the Site’s Cookie Policy.

2.9. Modification of the Privacy Policy

The Company reserves the right to modify this Privacy Policy at any time. It is recommended to consult this page regularly. Significant changes will be notified.