Privacy policy

Last updated: August 2026

This page explains what personal data we collect when you use www.montourdumontblanc.com, why we process it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

Data controller

Association des Gardiens du Tour du Mont-Blanc (AGRGTMB)

PAE du Mont-Blanc - 648 chemin des Près Catons - 74190 Passy

Contact: admin@montourdumontblanc.com

The data we collect

When you make a booking

  • Identity : first and last name.
  • Your contact details : email address, phone number, nationality and, in some cases, postal address.
  • Stay details : dates, accommodations selected, number of people and services purchased.
  • Payment, handled directly by Stripe : no bank card data passes through our servers or is stored on them.

Via the contact form

Name, email address and the content of your message.

Via the newsletter

Your email address only, collected with your explicit consent.

While you browse

Technical connection data (IP address, browser type, pages viewed) and anonymised audience statistics.

Why we process your data

  • Performance of the contract : managing your booking, forwarding it to the accommodation concerned and following up on your stay, including any changes, cancellations and refunds.
  • Legal obligation : keeping accounting records related to payments and refunds (10 years, in accordance with the French Commercial Code).
  • Your consent : sending the newsletter, which you may withdraw at any time by clicking the unsubscribe link in each email, or by writing to us at admin@montourdumontblanc.com .
  • Legitimate interest : ensuring the security of the site, preventing fraud and measuring audience anonymously.

Who has access to your data

Your data is neither sold nor transferred to third parties for commercial purposes. It is shared only in the following cases.

  • With the accommodations you book, to prepare your arrival and manage your stay. Only the information necessary for this purpose is shared with them.
  • With Stripe , our payment provider, to process the transaction and any refunds. Stripe is PCI-DSS certified and governed by standard contractual clauses guaranteeing an adequate level of protection. To find out more: stripe.com/fr/privacy .
  • With our insurer Assurmix (Bastion Insurance Company Ltd), if you take out cancellation insurance or trip interruption insurance: first name, last name, email address, booking amount and stay dates are shared for the purpose of managing the insurance contract.
  • With Brevo (Sendinblue SAS - 7 rue de Madrid, 75008 Paris), our email and marketing automation provider. As part of the setup and operation of post-booking automations, your email address, first name, last name and account language are shared with them to send you communications related to your booking and, with your consent, the newsletter. The legal basis is the performance of the contract for transactional communications and your consent for the newsletter. Brevo acts as a data processor within the meaning of the GDPR. To find out more: brevo.com/fr/legal/privacypolicy .
  • With 2le (SARL 2le - 3 rue du Sauvage, 68100 Mulhouse), our development and technical maintenance provider, strictly within the scope of its platform operation and maintenance duties.
  • With our technical hosting provider, strictly within the scope of hosting the data.

Transfers outside the European Union

Stripe is based in the United States. This transfer is governed by standard contractual clauses adopted by the European Commission, guaranteeing a level of protection equivalent to that required within the European Union.

How long we keep your data

  • Booking data (identity, contact details, stay details): two years from the date of the stay.
  • Accounting records related to payments and refunds: ten years, in accordance with legal obligations.
  • Messages received via the contact form : two years from receipt of the message.
  • Newsletter subscription : until you unsubscribe, or three years of inactivity.
  • Browsing data and audience statistics : thirteen months maximum.

Your rights

In accordance with the GDPR, you have the following rights over the data concerning you: right of access, right to rectification, right to erasure (the “right to be forgotten”), right to restriction of processing, right to object, and right to data portability.

To exercise any of these rights, write to us at admin@montourdumontblanc.comspecifying your request and enclosing a copy of your ID if necessary. We will respond within one month of receiving your request.

If our reply does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr- 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Cookies and audience measurement

Strictly necessary cookies

The site sets cookies that are strictly necessary for it to function: your login session, your booking cart and your language choice. These cookies cannot be disabled without impairing the site's operation.

Audience measurement — Matomo

The site uses Matomo, an audience measurement tool hosted on our own servers. The data collected (pages visited, session duration, browser type, anonymised IP address) is processed exclusively for statistical purposes and is not shared with third parties. In its current configuration, Matomo does not require prior consent, as the IP address is anonymised and the data is not cross-referenced with other processing. You can still object to this tracking by enabling the “Do Not Track” option in your browser.

Google Tag Manager and CookieBot

The site may use Google Tag Manager to manage third-party tags and scripts, as well as the CookieBot CMP to collect and manage your consent to non-essential cookies. CookieBot lets you set your preferences and withdraw your consent at any time via the cookie management panel available at the bottom of every page on the site.

Changes to this policy

We reserve the right to update this policy at any time, in particular to reflect legal or technical developments. The update date at the top of the page indicates the version in force.

A question about your data?

Write to us: any request relating to your personal data receives a reply within one month. Booking conditions are set out in the terms and conditions of sale.