Privacy Policy

Ask Marty Privacy Policy

Updated September, 18th 2020


Your privacy is important to us. This Privacy Policy explains how we collect and process your personal data when you visit our website, use our services or interact with us.

1. Who is responsible for your personal data?

Ask Marty, a French company with registered office at 30 rue Philippe de Girard, 75010 Paris (France) and company number 879 660 744 RCS Paris (“Ask Marty” or “we”), is the controller of your personal data.

2. Minimum age

Protecting the safety and privacy of children is very important to us. We do not knowingly collect or use personal data from anyone under the age of 16 years old, without the consent of both the child and the holder of parental responsibility. Therefore, you represent that you are at least 16 years old or above when you provide your personal data in relation to our products or services. If you are not at least 16 years old, you must ask the consent of your parent or legal guardian to provide us with your personal data. In this case, please contact the contact details indicated in Article 7 below.

3. What data do we collect about you?

We collect information that you provide to us, such as your contact details, your booking information and any other information you share with us when you use the Ask Marty app or contact us. Note that when you share your booking information with us, we may use your reservation number to access additional information regarding your booking (if any) on the relevant third-party platform.

We also collect certain information automatically when you visit our website or use our app and services. We use matomo.org for activity tracking on our website. You can choose to opt-out of tracking by following this link.

4. How do we use your personal data and for how long?

We use your personal data for the purposes listed below. Whenever we process your personal data, we do so on the basis of a lawful "justification" (or lawful basis) for processing, which we have identified in the table below.

Our general approach is to retain your personal data only for as long as required to fulfill the purposes for which it was collected. We generally retain your personal data for the duration strictly necessary for the management of our relationship with you. However, we may in addition retain personal data for longer periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements, or where such data is necessary to establish the existence of a right or contract. In that case, your personal data will be archived and retained for the duration imposed by applicable law, or for the duration of the applicable statute of limitations. When your personal data will no longer be necessary, we will delete or anonymize them.

Purpose for processing Lawful basis Retention period
To manage your Ask Marty personal account and provide you with our services, including access to the Ask Marty app. This processing is necessary to perform our contract with you. Duration of our relationship with you (i.e., as long as you have an active account with us)
To respond to your queries or complaints. This processing is based on your consent. Duration necessary to process and respond to your query or complaint
To send you electronic marketing communications regarding our services. If you are an existing user, we have a legitimate interest in keeping you up to date on the latest announcements provide you with other information we think you would like to hear about from us.
If you have not used our services in the past, then we will ask for your consent.
3 years from the end of our relationship with you, unless you object.
If you have not used our services in the past, we will only keep your data for 3 years since you consented to receiving marketing communications or from your last contact with us, unless you withdraw consent
To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested We consider that we have a legitimate interest in showing our users personalized content in order to ensure a great user experience and maintain their interest in our services. Duration of our relationship with you, unless you object
To help us better understand the use of our services and improve them, by conducting reviews and statistical analysis. We consider that we have a legitimate interest in improving our service offering in order to ensure that we are providing our users with what they need, helping us to preserve our business operations or grow our business. 1 year
To respond to your requests to exercise your data protection rights and manage an objection list. This processing is necessary to comply with our legal obligations. 3 years from the exercise of your objection right
To comply with our accountability and record-keeping obligations. This processing is necessary to comply with our legal obligations. Archived for duration imposed by applicable law (e.g., 10 years for accounting purposes)
In contemplation of and/or in connection with an asset or corporate operations (e.g., merger or acquisition, our reorganization or liquidation) We consider that we have a legitimate interest, as we need to be able to make decisions relating to the future of our business in order to preserve our business operations or grow our business. As necessary to carry out the business operation
To notify you in the event of an incident such as a data breach. This processing is necessary to comply with our legal obligations. As necessary to inform you

5. Who do we disclose your personal data to?

Your personal data is only accessible to the relevant personnel within our company. Your personal data may also be shared with our service providers and professional advisors (such as lawyers, accountants and auditors) when required in providing their services, with authorities and regulators where required, as well as with relevant third-party platforms when you confirm your wish to rebook an accommodation.

In case of any asset or corporate operations (e.g., merger or acquisition, our reorganization or liquidation), customer data will likely be one of the transferred assets and we may share them with any of our legal successors, to the extent permitted by law based on our legitimate interest.

Please note this list is non-exhaustive and there may be other examples where we need to share with other parties where justified by our legitimate interest, permitted by applicable law, or necessary for compliance with a legal obligation to which we are subject.

In this context, your personal data may be transferred outside the European Economic Area (EEA), to countries not offering a level of protection of personal data equivalent to that offered within the EEA, such as the US. In the absence of an adequacy decision of the European Commission, the transfer of your personal data will be made pursuant to standard contractual clauses adopted by the European Commission, as appropriate. You can obtain a copy of the relevant safeguard by contacting dpo@askmarty.io, although some details may be redacted for confidentiality reasons.

The transfer of your personal data to third-party booking platforms established outside the EEA is necessary for the implementation of pre-contractual measures taken at your request to book a new accommodation with such platform.

6. What are your rights?

You have a number of rights in relation to your personal data. More information about each of these rights is set out below:

Withdrawal of consent. You can withdraw at any time your consent in respect of any processing of personal data based on your consent, without affecting the lawfulness of processing based on your consent before its withdrawal.

Access. You can ask us to confirm whether we process your personal data and, as the case may be, inform you of the characteristics of such processing, allow you to access such data and give you a copy of it.

Rectification. You can ask us to rectify or complete inaccurate or incomplete personal data.

Erasure. You can ask us to erase your personal data in the following cases: where it is no longer necessary for the purposes for which it was collected; you withdrew your consent; you objected to the processing of your personal data; your personal data has been processed unlawfully; or to comply with a legal obligation. We are not required to comply with your request notably if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

Restriction. You can ask us to restrict the processing of your personal data (i.e., keep but not use your personal data) where: the accuracy of your personal data is contested; the processing is unlawful, but you do not want it erased; it is still necessary to establish, exercise or defend legal claims; to verify the existence overriding grounds following the exercise of your right of objection. We can continue to use your personal data following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

Portability. You can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it 'ported' directly to another data controller, but only where the processing is based on your consent or on the performance of a contract with you, and the processing is carried out by automated means.

Digital legacy. You have the right to define (general or specific) directives regarding the fate of your personal data after your death.

Right to object to processing justified on legitimate interest grounds. Where we are relying upon legitimate interest to process personal data (see Article 3), then you have the right to object to that processing. If you object, we must stop that processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defense of legal claims.

Right to object to processing for marketing purposes. Where we process personal data for direct marketing purposes, then you have the right to object to that processing at any time.

You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable law. In France, the supervisory authority for the protection of personal data is the CNIL (www.cnil.fr).

7. Contact and complaints

For further information regarding your rights, to exercise any of your rights, or if you have any complaints or questions regarding the processing of your personal data, please contact dpo@askmarty.io.

8. Changes to this Privacy Policy

We may occasionally change this Privacy Policy, for example, to comply with new requirements imposed by the applicable laws, technical requirements or good commercial practices. We will notify you in case of material changes.