PRIVACY POLICY

www.villahegra.org
Last updated on 23/09/2025.

PREAMBLE

This privacy policy informs you about how VILLA HEGRA uses and protects the information you provide to us, if any, when you use this website accessible via the following URL: www.villahegra.org (hereinafter the "Site").
Please note that this privacy policy may be amended or supplemented at any time by VILLA HEGRA, notably to comply with any legal or technological changes. In such a case, the update date will be clearly indicated at the top of this policy. These changes will bind the User as soon as they are posted online. Therefore, the User should regularly consult this privacy policy to inform themselves of any possible modifications.

PARTIES

This privacy policy is applicable between the publisher of the Site, namely the French Agency for the Development of AlUla, hereinafter "VILLA HEGRA," and any person connecting to the Site, hereinafter the "User."

ARTICLE 1. DEFINITIONS

"Site Content": any elements of any kind published on the Site, protected or not by intellectual property rights, such as texts, images, designs, presentations, videos, diagrams, structures, databases or software.
"User": any person connecting to the Site.
"Site": the internet site accessible at the URL www.villahegra.org, as well as related sub-sites, mirror sites, portals, and URL variations.

ARTICLE 2. SCOPE

This privacy policy applies to all Users. Simply browsing the Site implies your full and unconditional acceptance of it.
The User acknowledges the evidential value of VILLA HEGRA's automatic recording systems and, unless proven otherwise by the User, waives the right to contest them in case of dispute.

Acceptance of this privacy policy assumes that Users have the necessary legal capacity for this or are at least 16 years old, or otherwise have the authorization of a guardian or curator if they are incapacitated, of their legal representative if under 16, or hold a mandate if acting on behalf of a legal entity.

ARTICLE 3. PERSONAL DATA

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on April 14, 2016, and applicable national legislation, VILLA HEGRA provides you with the following information:

3.1 Identity of the data controller

The person responsible for collection and processing of data is the French Agency for the Development of AlUla (VILLA HEGRA), SASU, headquartered at 82 Rue de Courcelles, 75008 PARIS, SIREN: 841 021 454, represented by Gérard Mestrallet.

3.2 Identity of the Data Protection Officer

The Data Protection Officer is

3.3 Data collection by VILLA HEGRA

3.3.1 Data collected

3.3.1.1 Data collected during browsing

While browsing the Site, you consent to VILLA HEGRA collecting information related to:

• your usage of the site;
• the content you view and click on;
• your device and software environment;
• your geographical location;
• your connection data (times, pages visited, IP address).

3.3.2 Legal basis for processing

The data collected during site browsing is processed based on VILLA HEGRA's legitimate interest in analyzing site behavior and improving security and operation. Regarding data from certain cookies, Users are invited to refer to the Villa Hegra cookie policy https://www.villahegra.org/cookies-statement.

3.3.3 Internal data recipients

Collected data are accessible only to VILLA HEGRA's management members and personnel responsible for website management and are never made freely viewable by any third party.

3.3.4 Data retention period

Personal data collected during browsing are retained for a reasonable duration necessary for proper Site administration and a maximum of 12 months or until withdrawal of consent.
Personal data collected via the contact form are kept for a reasonable time needed to handle the User's request, with a maximum of 12 months.
After these periods, VILLA HEGRA will archive the data and retain it as long as its liability may be engaged. After the retention period, VILLA HEGRA commits to permanently deleting personal data of the concerned individuals.

3.4 Respect of rights

You have the following rights concerning your personal data, which you can exercise by writing to our postal address or by email at: rsvp@villahegra.org

3.4.1 Right to information, access, and communication of data

You may access your personal data. Due to obligations for security and confidentiality in personal data processing, your request will only be processed if you provide proof of identity, including a scan of valid ID (for email requests) or a signed photocopy of valid ID (for written requests), both accompanied by the statement "I certify on my honor that this copy is true to the original. Done at ... on ...," followed by your signature.
For assistance, see here for a letter model by CNIL.

3.4.2 Right to correction, deletion, and data erasure ("right to be forgotten")

You may request correction, updating, locking, or deletion of your personal data if they are inaccurate, incomplete, outdated, or erroneous.
You can also set general or specific directives regarding the fate of your personal data after death. Heirs may request updates or adjustments.
See here for a letter template.

3.4.3 Right to object to data processing

You can object to the processing of your personal data by sending an email to: rsvp@villahegra.org.
Your email must specify which data you want deleted and the reasons, except for commercial prospecting.

3.4.4 Right to data portability

You have the right to receive the personal data you provided in a transferable, open, and readable format.

3.4.5 Right to restrict processing

You may request that VILLA HEGRA limit the processing of your personal data, meaning your data will only be retained but no longer used.

3.4.6 Withdrawal of consent

Your consent is necessary for VILLA HEGRA to process your data. You may withdraw consent at any time, which will lead to deletion of your personal data.
Services requiring your data processing will no longer be accessible.

3.4.7 Response time

VILLA HEGRA commits to respond to access, correction, objection, or any other complementary requests within a reasonable time, not exceeding one month from receiving your request.

3.4.8 Complaint to supervisory authority

If you consider VILLA HEGRA fails to meet obligations regarding your personal information, you may file a complaint with the competent authority. In France, this is CNIL, accessible here.

3.5 Transfer of collected data

3.5.1 Transfer to partners

VILLA HEGRA informs you that it uses authorized service providers to help collect and process data you submit. These providers may be located outside the European Union and have access to data collected on the Site.

VILLA HEGRA has ensured that these providers implement appropriate guarantees and comply with strict confidentiality and data protection conditions.
The User consents to data transfers to VILLA HEGRA's partners, who process this data as part of their third-party services, namely:

3.5.2 Transfer on government or judicial request

The User also consents to VILLA HEGRA sharing collected data with any person upon request from a government authority or court decision.

3.5.3 Transfer in case of merger or acquisition

If VILLA HEGRA is involved in a merger, asset sale, financing operation, liquidation, bankruptcy, or acquisition of activity by another company, the User consents to data transfer to the acquiring company, which may process this data under this privacy policy instead of VILLA HEGRA.

ARTICLE 4. INTELLECTUAL PROPERTY

4.1 Legal protection of Site Content

Site Content may be protected by copyright and database rights. Any unauthorized representation, reproduction, translation, adaptation, or transformation, in whole or in part, without VILLA HEGRA's consent or that of its rights holders constitutes a violation of Books I and III of the Intellectual Property Code and may lead to legal proceedings for infringement.

4.2 Contractual protection of Site Content

The User undertakes contractually with VILLA HEGRA not to use, reproduce, or display the Site Content, whether protected by intellectual property rights or not, for any purpose other than reading by a robot or browser. This prohibition does not apply to indexing robots solely scanning the Site content for indexing purposes.

ARTICLE 5. FINAL PROVISIONS

5.1 Modifications

This Privacy Policy may be changed at any time by VILLA HEGRA. Conditions applicable are those in force when the User connects to the Site; each new connection implies acceptance of any new conditions.

5.2 Entirety

The nullity of one clause does not affect the rest of the contract clauses or the contract as a whole, which will retain full effect. Parties should replace the invalid clause by a valid one corresponding to the original intent.

5.3 Non-waiver

Failure by VILLA HEGRA to exercise rights does not imply waiver of those rights.

5.4 Languages

These conditions are offered in French, English and Arabic.

5.5 Unfair clauses

These conditions apply subject to mandatory consumer protection laws concerning abusive clauses in contracts between professionals and consumers.

ARTICLE 6. DISPUTES

6.1 Applicable law

This Privacy Policy is governed by French law and European regulations, notably the GDPR.

6.2 Disputes

According to ordinance no. 2015-1033 of August 20, 2015, any dispute arising from the execution of these general conditions not resolved amicably will be submitted to an accredited mediator.

6.3 Arbitration

Any dispute relating to this contract or connected to it will be resolved by arbitration according to the rules of FastArbitre of the digital arbitration and mediation institute.