Privacy Policy

June 06, 2024

The Shop Marriott website is published by Hotels At Home SAS.
Hotels At Home - simplified joint stock company with a capital value of 37 000 €
Commercial Registry: n° 477 579 874 RCS (Pontoise)
Head office: HOTELS AT HOME 163, rue de la Belle Etoile - Business Park Paris Nord 2 – Bât 6B - 95700 ROISSY EN FRANCE - France.
VAT registration number: FR 67 477 579 874
In accordance with the Anti-Waste and Circular Economy law (most commonly called in French « Loi AGEC »), the unique registration code (URC) recorded by the Agency for Ecological Transition (ADEME) is : FR025830_10ACTI
Phone: +33 (0)1 41 51 51 53
Publication Manager: Steven Ware
Email address: customer.service@shopmarriott.com
Web host: Amazon Services Europe SARL 38 avenue John F. Kennedy, L-1855, Luxembourg

The Shop Marriott website (the "Website") is operated by Hotels At Home SAS ("us", "we" or "our") on behalf of Marriott International, Inc Group. We comply with data protection legislation such as the EU General Data Protection Regulation, which regulates the processing of personal data relating to you and grants you various rights in respect of your personal data.The aim of this Privacy Policy is to inform you of our policies regarding the collection, use and disclosure of your personal data when you use our Website, in connection with the services provide on the Website (the "Services") based on the choices you have associated with that data. We also inform you about your rights under applicable data protection law with respect to the handling of your Personal Data by us. Before providing us with Personal Data we recommend that you read this Privacy Policy which also forms part of our Terms and Conditions that govern the provision of the Services Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meaning as our General Sales Conditions, accessible from https://europe.shopmarriott.com/en/help/privacy-policy

1. Definition

Cookies: mean small pieces of data stored on your device (computer or mobile device). Data Controller: means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, Hotels at Home SAS is a Data Controller of your Personal Data Processors (or Service Providers): means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively. For the purpose of this Privacy Policy, Hotels at Home SAS is a Data Processor of your Personal Data Subject (or User): means any individual who is using our Service and is the subject of Personal Data.

2. What is Personal Data?

For the purposes of this Privacy Policy, “Personal Data” means any information provided by you when interacting with us, through our Website or when calling us, or data is collected about you through your use of our Website and allowing you to be identified personally, either directly (e.g. your name) or indirectly, because the data references an identifier such as your name, an identification number, location data, an online identifier (e.g. telephone number) as an individual person. We may also collect personal data about you in other instances which relate to the provision of the Services.

3. When is and what kind of data is stored and processed for what reason?

Whenever you navigate our Website, data is collected and processed about you. We collect the following data:

  • Information related to the browser or device you use to access our website
  • IP address
  • Country you are browsing from
  • Browsing habits, including sites visited
  • Other demographics and statistical information
  • Email address
  • Phone number
  • Address, State, Province, ZIP/ Postal code, City

The data is collected through the session cookies (with regard to cookies see also below) we use on our Website. It is anonymised, before we use it to build anonymous utilisation profiles, for marketing purposes and to optimise our Website and the services we provide. This data shall not be used in order to identify the visitor of this Website personally.

4. Interacting with us

Every time you interact with us (e.g. placing an order through our Website, by phone, signing up for our newsletter) we may collect and process the Personal Data you provide to us.

4.1 Purchase orders

When you place a purchase order, we collect Personal Data, which includes:

  • Your full name
  • Your address, including city and country
  • Your telephone number
  • Your e-mail address, and
  • Your credit card details
  • The list of the items purchased

We use this Personal Data to handle your purchase order and to establish and fulfil our contract with you. This includes verifying your identity, taking guarantee and/or payment information We take the protection of your Personal Data very seriously and therefore have kept the mandatory required fields to a minimum.

4.2 Newsletter and Special offers

If you provide your contact information to us (e.g. when placing a purchase order with us or when signing up for our newsletter via our Website), we may use this Personal Data to send you our newsletters and details of other special offers which may be of interest to you, based on previous interactions with us. If you sign up for our newsletter via our Website, you are required to provide your email address only. Any additional information is voluntary and will be used solely for a personalisation of the newsletter. By providing your email address and subsequent confirmation, you consent to receiving our newsletter. You can revoke your consent and opt out of receiving the newsletter at any time by clicking on the unsubscribe link included in every newsletter. For any further objections, kindly address the contact stated at the end of this policy. We also include web beacons in HTML-formatted e-mail newsletters in order to count how many newsletters (or particular articles, links, etc.) are being accessed, and on our website to count users who have visited these pages. If you do not want to receive information, you could stop subscribing using a link incorporated into our electronic system or sending a mail to:  HOTELS AT HOME - Shop Marriott - 163, rue de la Belle Etoile - Business Park Paris Nord 2 – Bât 6B - 95700 ROISSY EN FRANCE - France.

4.3 “Contact Us” functionality

You can get in contact with us via our Website by using the “Contact Us” functionality, or by telephone, or by chat. To contact us you are required to provide the following information:

  • Your full name
  • Your telephone number and your e-mail address,
  • Your enquiry, and
  • ReCAPTCHA, to confirm you are an actual person, and not a robot

Any additional information (e.g. home address) is provided voluntarily. We use your information to reply to your enquiry

5. Sharing Personal Data

The processing of information collected on the Shop Marriott Site is the subject of a declaration to CNIL, the French data protection agency, under no. 1039081.The information provided on the website Shop Marriott allows Hotels At Home Company to process and carry out orders. Hotels At Home is dealing all information with privacy. We inform you that Hotels At Home SAS can outsource the processing of your data to Hotels At Home, Inc., located in the United States, in order to process your orders and/or send you marketing emails if you choose to receive them. Hotels At Home agrees to be in accordance with the French and the European law concerning protection of data with personal features and also provides an appropriate level of protection to the processing done. We will share neither your email address nor your postal address, phone number or other personal information with any companies without your consent.Your Personal Data may be shared:

  • Within Marriott International, Inc group to establish and fulfill our contract with you or to the extent you consented to such sharing of data, for example. This includes verifying your identity, taking payments getting in contact and communicating with you.
  • With our third party service providers who process your data on our behalf. Shop Marriott's third party service providers hosting providers (including Amazon Web Services), and providers of data analysis, IT services, and other similar services requested by Shop Marriott to provide the Website and other business-related services to you. Any data processing on our behalf complies with the applicable laws.

We will not transfer your personal data to third party recipients, unless you consent to such transfer of data or such transfer is permitted under applicable laws.

5.1 Transfers of Personal Data to a third country

Where information is transferred outside the European Economic Area, we will ensure that appropriate safeguards are implemented. If your Personal Data is transferred to a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, or a third party’s Binding Corporate Rules.

6. Cookies

This Cookie policy describes the different types of cookies and similar technologies that may be applied on the Website.

6.1 What are cookies?

A cookie is a data file, which often includes a unique identifier, that is sent to your browser from a web server and is then stored on the hard drive of the device you are using to browse the website. Each website you visit can send its own cookie to your browser if your browser’s preferences allow it, but to protect your privacy your browser only permits a website to access cookies it has already sent to you, not cookies sent to you by other websites. On the Website, users have the option of agreeing to the use of cookies in principle and thus being able to use all functions of the website without restrictions, the option of not receiving cookies at any time or of personalizing cookies by agreeing to the use of certain cookies. Please be aware that if you do not accept or deactivate the use of cookies which are subject to consent, this may lead to a situation that these cookies cannot do what they are intended for. In particular, if you deactivate functionality cookies, the respective functions of the website cannot be used. Therefore, your consent is required if you want to use certain functions provided by cookies.

6.2 How we use cookies

You can find more information about the categories of cookies we generally use and the purposes for which we use them through this link. For the individual cookies of each category, we have further set forth the cookie name, duration of the operation of the respective cookie, description of what this cookie does and, if applicable, what personal information is concerned as well as the name of the third party(ies) having access to the cookie.

6.3. How to control and delete cookies

With the banner, we offer you a convenient option of rejecting or approving individual cookies or groups of cookies generally used on the Website. You can also block and delete cookies at any time by changing settings on your browser. To manage cookies, most browsers allow you to accept or reject all cookies or accept only certain types of cookies. Information about the procedure to follow in order to enable or disable cookies can be found on your Internet browser provider’s website via your help screen. You can also find out how to do this and find more information on cookies at www.allaboutcookies.org. for information on how to manage cookies within commonly used browsers. Please be aware that if cookies are disabled, not all features of the Website may operate as intended. If you would like more information about interest-based advertising, including how to opt-out of these cookies, please visit https://youronlinechoices.eu/.

6.4. Google Signals

Google Analytics may collect certain information through the use of Google Signals, which includes features such as cross-device tracking and advertising personalization for users who have opted-in to such features. The data collected through Google Signals is aggregated and depersonalized before being used for analytical purposes. This means that individual user identities are removed, and the information is presented in a way that protects user privacy. The aggregated data may be shared with other Google services, and Google may use this information to contextualize and personalize the ads of its own advertising network.

7. What kind of security measures for the compliance with data protection?

We strive to maintain the appropriate standards of security and we have put in place robust technical and organisational measures for the protection of your Personal Data in accordance with the current state of the art technologies, especially to protect the data against loss, falsification or access by unauthorised third persons. For the transfer of particularly sensible Personal Data via the internet, we exclusively use encrypted transmission routes and we comply with the Payment Card Industry Data Security Standards (PCI DSS) which is a set of policies and procedures intended to optimise the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal information.. However the transmission of information via the internet is not completely secure. So, whilst we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website. Any transmission is at your own risk. Once we have received your personal data we will use strict procedures and security features to prevent unauthorised access. Our internal processing takes place inside a VPN which is firewalled against the open internet and inside of which any kind of communication is processed in an encrypted way. As far as third parties (i.e. external companies) are rendering data processing services for us, we have committed them to the compliance with our data privacy regulations. We provide paid products and we use a third party services processor for payment processing. We will not store or collect your payment card details. That information is provided directly to our third party payment processor whose use of your personal information is governed by its Privacy Policy. This payment processor adheres to the standard set by PCI DSS.The payment processor we work with is IngenicoTheir Privacy Policy can be viewed at: https://www.ingenico.com/privacy-policy

8. Your Rights

In accordance with the Computer French law and liberties n° 78-17 of January 6, 1978, you are in a position to access and amend data related to you. You can exert this right sending a mail to: HOTELS AT HOME - Shop Marriott - 163, rue de la Belle Etoile - Business Park Paris Nord 2 – Bât 6B - 95700 ROISSY EN FRANCE - France.In respect of the collection and use of your personal data, you may:

  • withdraw your consent at any time for example by unsubscribing from the newsletter
  • ask us whether we processes Personal Data about you, for which purposes, the categories of Personal Data concerned, to which categories of recipients the information has been disclosed, where possible, the envisaged period for which the personal data will be stored (or, if not possible, the criteria used to determine that period),
  • inquire with us about the appropriate safeguards relating to the transfer to a third party, ask us for a copy of the Personal Data undergoing processing and ask to receive your Personal Data in a structured, commonly used and machine-readable format and to transmit those data to another controller without any hindrance from us.
  • have inaccurate data rectified,
  • object against the further processing and request erasure of your Personal Data,
  • request that the processing of your personal data is restricted by Shop Marriott,
  • request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

If you have any further questions on your personal data which has been stored with us or would like to exercise your rights please refer to our Customer Service by telephone, by email or by chat.

9. Retention and deletion of Personal Data

We will retain your personal data only for a limited period of time needed to fulfil the purposes of processing mentioned above. After that time your personal data will be erased. If we process your personal data based on your consent we will retain your personal data for a limited period of time needed to fulfil the purposes of processing it. Where we enter into a contract with you , we will keep your information for the duration of the contractual relationship you have with us, and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this notice. The criteria to determine the storage period are statutory and contractual requirements, the nature of our relationship with you, the nature of the data concerned and the technical requirements. Laws may require us to hold certain information for specific periods. Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future. In other cases, we may retain data for an appropriate period after any relationship with you ends to protect itself from legal claims, or to administer its business.

10. Updates

This Privacy Policy may be updated periodically. We will update the date at the top of its first page accordingly and encourage you to check for changes that we have made, which will be available at https://europe.shopmarriott.com/en/help/privacy-policy. On some occasions, we may also actively advise you of specific data handling activities or significant changes to this Privacy Policy, as required by applicable law.

11. Links to Other Sites

Our Website may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or service therefore we strongly advise you to review the Privacy Policy of every site you visit.