Privacy Policy (general data protection policy) of B&B HOTELS in France

Last update: 18/09/2025

Previous version

This page can be printed at the end

Recitals

1. In the context of its business activity, B&B HOTELS is led to collect and process personal data concerning its contacts, prospects, customers, suppliers and partners. 
    
2. The main aim of this document is to allow you to understand the conditions for the processing of your data.
   
   
3. This privacy policy is intended for web users, customers and prospective customers (hereinafter “you”) in the scope of (i) the use of the website https://www.hotel-bb.com/ (hereinafter the “Site”) and the B&B HOTELS mobile application (hereinafter the ”App”) presenting the platform for the online reservation of B&B hotel rooms (hereinafter the “Platform”), (ii) the supply of our loyalty programmes in France and (iii) stays in hotels operated by B&B HOTELS in France. 
   
   Its aim is to inform you, in accordance with Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “Regulation” or the “GDPR”), as to the manner in which your personal data may be collected and processed in the context of (i) reserving your stay (whether via the Platform or not), (ii) managing your stay in one of our hotels in France, (iii) managing the loyalty programmes, and (iv) evaluating and improving our services.
   
   The precise purposes are listed and specified in detail in Article 6 of this policy.
    
4. When your personal data are collected, you will be informed if certain data items are required or if they are optional. The possible consequences of failing to provide information is indicated at the time the data is collected, on the associated forms.
   
   
5. The protection of your personal data is a priority for B&B HOTELS, and that is why it undertakes to process them in the strictest compliance with the Regulation and applicable domestic laws. 

1.    Definitions 

6.    App: means the B&B HOTELS mobile App, available in IOS and Android versions.

7.    Platform: means the central online reservation system operated by the B&B HOTELS Group on the Site and via the App.

8.    Controller: means the companies listed in article 2 below acting in their capacity as data processing controllers.

9.    Services: means the services offered by B&B HOTELS via the Platform. The Services are specified in detail in the general terms of use (“ToU”) accessible here.

10.    Site: means the website accessible at the URL address: https://www.hotel-bb.com/

11.    User: means any person who accesses or browses the Site and the App, whether a customer, operator or mere web user, with or without an account. 
 

2.    Identity of the controllers
 

1. The controller, within the meaning of the GDPR, is the person who determines the purposes and means of the processing of personal data. If more than one person jointly determine the purposes and means of processing, they are joint controllers for the processing (or co-controllers). For some purposes, the French operating companies of the B&B HOTELS group, cited below, will each respectively be the controller for a single act of processing. For others, the French operating companies of the B&B HOTELS group are each joint controllers, acting jointly with other companies.
    

Single controller

• B&B HOTELS FRANCE, a société à responsabilité limitée (limited liability company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 378 047 500;

• B&B DREAMLAND HOTEL, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 808 416 960;

• TANDEM SAS, a société par actions simplifiée (simplified form limited company) having its registered offices at 9 boulevard Romain Rolland, 75014 Paris, France, registered in the Trade and Companies Register of Paris under the number 908 119 746;

• B&B TAKEOVER, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 904 728 649;

• BBHO THIONVILLE YUTZ CAROLINGIENS, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 254 467;

• BBHO REIMS CENTRE GARE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 283 821;

• BBHO THIONVILLE YUTZ VIEUX BOURG, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 284 043;

• BBHO BOULOGNE SUR MER CENTRE LES PORTS, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 282 120;

• BBHO LILLE VILLENEUVE D’ASCQ, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 249 210;

• BBHO BLOIS VALLEE MAILLARD, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 248 618;

• BBHO LILLE ROUBAIX, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 283 086;

• BBHO LIMOGES NORD, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 283 201;

• BBHO ORLEANS NORD SARAN, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 283 763;

• BBHO LE MANS CENTRE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 282 781;

• BBHO ORLEANS CENTRE FOCH, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 281 114;

• BBHO ANNEMASSE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 279 779;

• BBHO BORDEAUX AEROPORT IB, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 280 652;

• BBHO TOULOUSE UNIVERSITE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 255 704;

• BBHO LOURDES, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 283 136;

• BBHO NIMES CAISSARGUES, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 254 236;

• BBHO VIRY CHATILLON, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 254 806;

• BBHO VITRY SUR SEINE A86 BORDS DE SEINE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 247 792;

• BBHO NIORT MARAIS POITEVIN, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 251 075;

• BBHO CERGY PIERRELAYE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 282 278;

• BBHO MARSEILLE BONNEVEINE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 254 269;

• BBHO GRENOBLE UNIVERSITE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 819 282 682;

• B&B HOME FRANCE, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 920 291 150;
  
  

hereinafter referred to together as “B&B HOTELS”, are each respectively sole controllers for the following purposes:

(1)    Processing reservations not made via the Platform;
(2)    Managing accommodation contracts;
(3)    The exercise of the rights of data subjects under the GDPR;
(4)    Managing insurance-related events; 
(5)    Managing individual police forms; and 
(6)    Putting a CCTV/videoprotection system in place.
 

In addition, B&B HOTELS operates a reservations call centre that is common to the hotels operated under the B&B HOTELS trademark in France (hereinafter the “Reservations Call Centre”).

Joint controllers
 

B&B SERVICES WESTERN EUROPE, a société par actions simplifiée (simplified form limited company) of the B&B HOTELS Group, having its registered offices at 271 rue du Général Paulet, 29200, Brest, France, registered in the Trade and Companies Register of Brest under the number 904 630 902, intervenes individually alongside each of the companies listed above as joint controller for the following purposes:

(1)    Managing the wifi;
(2)    Managing customer complaints and claims; 
(3)    Managing the collection of unpaid sums outstanding.
 

Some hotels in France are operated under franchising agreements. In this context, B&B HOTELS, a société par actions simplifiée (simplified form limited company) having its registered offices at 271 rue du Général Paulet, 29200, Brest, Frence, registered in the Trade and Companies Register of Brest under the number 378 047 500, intervenes alongside each of the franchisee companies which operate the hotel in which you are staying, as joint controller for the following purposes: 

(1)    Processing reservations, whether or not they are made via the Platform;
(2)    Managing the accommodation contracts;
(3)    Managing direct marketing; 
(4)    Managing the loyalty programmes;
(5)    Managing the individual police forms.
 

B&B HOTELS operates the Platform which constitutes the central reservation system, common to the hotels. 

Other companies in the B&B Hôtels group intervene as joint controllers for the following purposes:

(1)    Managing the Platform and processing reservations made through it;
(2)    Managing direct marketing; 
(3)    Managing the centralisation of reservations;
(4)    Managing the loyalty programmes.
 

The companies in the list accessible by clicking here intervene as joint controllers for (i) managing the Platform and the processing of reservations made through it, (ii) managing direct marketing and (iii) managing the centralisation of reservations.

The companies in the list accessible by clicking here intervene as joint controllers for managing the paying B&B HOTELS loyalty programme. 

The companies in the list accessible by clicking here intervene as joint controllers for managing the free B&B HOTELS loyalty programme. 

B&B HOTELS has entered into co-responsibility agreements with its joint controllers, determining their respective obligations, the broad outlines of which are available on request made to B&B HOTELS at the following address: privacy.france@hotelbb.com or its data protection officer at the following address: dpo-france@hotelbb.com.

Information concerning the processing undertaken in this framework is provided in detail below.

3.    Fair and transparent collection of your data
 

2. Out of concern for fairness and transparency, B&B HOTELS takes care to inform data subjects about the processing that it carries out by providing information at the time the personal data is collected.
    
3. These data are collected fairly. No collection is made without the knowledge of data subjects and without them being informed.

4.    Legitimate and proportionate use of your data
 

4. When B&B HOTELS is induced to process personal data, it does so for specific purposes: each act of data processing is therefore for a legitimate, determined and explicit purpose, as specified in Article 6 of this policy.
   
   
5. For each act of processing carried out, B&B HOTELS undertakes to collect and exploit only data that are adequate, relevant and limited to what is necessary for the purposes for which they are processed. B&B HOTELS ensures that the data are updated and that processes are implemented to allow for the erasure or rectification of inaccurate data.

5.    The processed data 
 

6. In the framework of personal data processing for the purposes presented to you below in Article 6, B&B HOTELS collects and processes the following categories of data: 
    

• Data concerning your identity and private life: title, surname, forename, telephone number, e-mail address, date and place of birth, sex, age, city, country, nationality, spoken language, postal address, post code, user name or pseudonym, video images from the videoprotection systems, photograph and signature (for releases that you have signed authorising the use of your likeness);
• Data concerning your professional life: company, work e-mail address, work telephone number, work postal address, job title, status in the company, partner code, 
• Data concerning browsing: logs and connection data (connection URL, date and time), data identifying computer hardware, language settings, geographical location data via your IP address when you connect to the Platform to adapt your browsing and use our Services), data concerning your use of the Platform and the Services, including the IP address, data communicated to our teams when calling upon them (preferred language, etc.), data collected via cookies and other trackers, booking search data. 
• Data concerning your reservation and your customer account: customer identifier, loyalty number, contract number (for BtoB partner contracts), hotel in question, dates of stay, room number, room access code, data concerning other occupants of the reserved rooms such as names and ages, features of the stay with any options (car parking, animal, preferred floor, etc.), reason for the stay (leisure, professional), if a request for invoicing at a different address: name of the company, address, VAT number, disability in the event of choosing the option of an adapted room, telephone conversations with our departments in the event of use of the assistance terminal, data concerning the grant and use of invitations and other vouchers;
• Data concerning transactions: transaction number, data concerning means of payment, bank concerned, details of the purchase, subscription, or service subscribed, date of the cheque, invoices, data concerning the payment of invoices such as method of payment, rebates granted, receipts, outstanding balances and unpaid amounts. The bank card number, expiry date and security code are processed exclusively by our service provider, Adyen, who only provides us with a token to proceed with warranties and reservation payments;
• Data concerning the history of reservations in B&B HOTELS hotels.
• Data concerning the management of social media and customer reviews: public data published on partner platforms (Facebook, Instagram, LinkedIn), interactions with a post or a page (reactions, shares), content of messages and comments made by web users, content of reviews, 
• Data concerning the management of complaints and insurance-related events: complaint form, details of the complaint or harmful event (circumstances, date, place), exchanged with our departments, any substantiating documents and bank details to obtain a refund or compensation.

6.    Purposes, legal bases and periods of storage of processing and data
 

7. Each act of processing carried out by B&B HOTELS corresponds to an explicit, legitimate and determined purpose, which is based on the performance of a contract, compliance with a statutory or regulatory obligation, your consent or legitimate interest. In addition, we store your personal data only for the time required for the stated purposes. 
    
8. The purposes for which your data is processed, their legal basis and their period of storage are specified below:

7.    Recipients of the data
 

9. Within the limit of their respective remits and for the purposes recalled in Article 6, the main persons who may have access to your data are as follows:

• the authorised personnel of our hotel reservation, marketing, sales, administrative, logistics and I.T. departments, responsible for improving our services, customer relations and direct marketing and quality control; the representatives and employees of the hotels in the B&B HOTELS network where you will stay, including franchisee companies and hotel management companies; 
• the authorised personnel of our subcontractors and service providers such as, inter alia, accommodation suppliers and cloud storage, suppliers of payment services, suppliers of mailing services, suppliers of IT maintenance services, suppliers of marketing studies;
• the authorised personnel of the joint controllers;
• where relevant, the competent authorities on request and in particular public bodies, the relevant courts, as well as mediators, chartered accountants, statutory auditors, lawyers, bailiffs, law officials, police officers, organisations responsible for collecting debts, exclusively in order to comply with legal obligations, as well as for cases of seeking the perpetrators of offences committed over the internet;
• third parties who may place cookies on your terminals where you have consented to this. For more details, consult our  Cookie management policy.

8.    Transfer of data outside the European Union
 

10. B&B HOTELS is a company belonging to the B&B HOTELS group, which provides its Services in numerous countries.
    
    
11. In this respect, and in the framework of the purposes described in Article 6 of this policy, we may transfer your data to recipients within and without the group, located outside the European Union.
    
    
12. In the absence of an adequacy decision, B&B HOTELS shall not make transfers outside the European Union unless appropriate safeguards are obtained, in this case standard contractual clauses defined by the European Commission, and in strict compliance with regulations in force.
    
    In particular, B&B HOTELS makes use of a service provider located outside the European Union with which standard contractual clauses have been signed, a copy of which is available by contacting us at the address below.
     
13. You may obtain access to all of the safeguards and documents concerning transfers of your personal data outside the European Union by contacting us at the following e-mail address: privacy.france@hotelbb.com or by contacting our data protection officer at the following e-mail address: dpo-france@hotelbb.com or by post to DPO B&B Hôtels C/O Qualiens Avocats 62-64 boulevard Pereire 75017 PARIS, France. 
     

9.    The security of personal data 
 

14. B&B HOTELS attaches particular importance to the security of personal data. It puts appropriate technical and organisational measures according to the level of sensitivity of the personal data, in order to ensure the integrity and confidentiality of the data and to protect them against malicious intrusion, or any loss, alteration or unauthorised disclosure to third parties.
    
    
15. Nevertheless, the security and confidentiality of the data depend on each person applying good practices, and the data subject is advised to remain attentive to the matter.

10.    Subcontracting
 

16. Some hotels in France are operated under a management mandate agreement entered into between B&B HOTELS and the hotel management company which operates the hotel where you are staying.
     
17. If B&B HOTELS uses a subcontractor, it will only transmit personal data after having received a commitment and safeguards from it concerning its ability to meet these requirements of security and confidentiality.
     
18. B&B HOTELS enters into contract with its subcontractors, in compliance with its statutory and regulatory obligations, which precisely define the terms and conditions for processing data by these subcontractors, in compliance with data protection regulations.
     

11.    Cookies 
 

19. If you use our Site or partner websites or reservation tools provided by B&B HOTELS for your reservation, cookies may be used which may also involve the processing of personal data. 
20. In this respect, we refer you to our Cookie Management Policy Cookie Management Policy . 
     

12.    Social media
 

21. When you browse our Site or our App, you may click on the icons dedicated to the Twitter, Facebook, Instagram, TikTok and YouTube social media.
    
    
22. Social media make it possible to improve the conviviality of the Site and our App, and assist with their promotion via shares.
    
    
23. When you use these buttons, you may access the personal information that you have indicated as being public and accessible from your Twitter, Facebook Instagram, TikTok and YouTube profiles. However, we do not create or use any database independent of Twitter, Facebook Instagram, TikTok and YouTube and do not exploit any data pertaining to your private life via this method. B&B HOTELS is not the controller of processing for these various social media, and privacy policies that are independent of B&B HOTELS will apply to these services.
    
    
24. In order to limit third party access to your personal information on Facebook, Twitter, Instagram, TikTok or YouTube, you should configure the settings of your profiles and/or the nature of your publications via the dedicated spaces on the various social media in order to limit their audience.
     

13.    Exercise of the rights of data subjects
 

25. B&B HOTELS is particularly attentive to respect for the rights that you are granted in the context of its data processing, to ensure that you benefit from fair and transparent processing considering the particular circumstances and the context in which your personal data are processed.
     

13.1    Right of access
 

26. In this respect, you have the right to obtain confirmation that your data are or are not processed and, if they are, you have the right to request a copy of your data and various other information concerning the processing of your personal data, and in particular:
     

• the purposes of the processing;
• the categories of data concerned;
• the recipients or categories of recipients and, where relevant if such communication is to be carried out, the international organisations to which the data have been or will be communicated, in particular the recipients who are located in third countries;
• where this is possible, the planned duration of storage of the personal data or, if this is not possible, the criteria used to determine this duration;
• the existence of the right to ask the controller to proceed with the rectification or erasure of your personal data, the right to require a restriction on the processing of your data, the right to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• information concerning the source of the data if they are not directly collected from data subjects;
• the existence of automated decision-making, including profiling, and in this last case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subjects.
   

13.2    Right to the rectification of your data
 

27. You may request of B&B HOTELS that your data be, as relevant, rectified, completed if inaccurate or incomplete. 
     

13.3    Right to the erasure of your data
 

28. You may request of B&B HOTELS the erasure of your personal data in the cases laid down by laws and regulations, and specifically where (a) data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (b) you withdraw the consent on which the processing is based, (c) you object to the processing, on grounds relating to your particular situation, to processing which is based on Article 6.1 (e) (necessary for the performance of a task carried out in the public interest) or 6.1 (f) (legitimate interests), including profiling based on those provisions, and there are no compelling legitimate grounds for the processing, or you object to processing for marketing purposes.
    
    
29. Your attention is drawn to the fact that the right to erasure of the data is not a general right and your request may only be upheld in the presence of one of the grounds set out in applicable regulations.
     

13.4    Right to the restriction of data processing 
 

30. You may request the restriction of processing of your data in the cases laid down by laws and regulations, specifically where (a) you dispute the accuracy of the data, for a period enabling the Controller to verify the accuracy of the personal data, (b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, (c) the Controller no longer needs the personal data for the purposes of the processing, but you still require them for the establishment, exercise or defence of legal claims, (d) you have objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override yours.
     

13.5    Right to object to data processing
 

31. You have the right at any time to object, on grounds relating to your particular situation, to processing of your personal data which is based on Article 6.1 (e) (necessary for the performance of a task carried out in the public interest) or 6.1 (f) (legitimate interests), including profiling based on those provisions, if there are no compelling legitimate grounds for the processing, or you object to processing for marketing purposes.
    
    
32. In the event that this right to object is exercised, B&B HOTELS will ensure that it no longer processes your personal data in the context of the processing in question unless B&B HOTELS can show that it has compelling legitimate grounds to continue with the processing. These grounds must override your interests, rights and freedoms, or the processing must be justified for the establishment, exercise or defence of legal claims.
     

13.6    Right to the portability of your data
 

33. You have the right to portability of your personal data. This is not a general right. Indeed, not all data from all processing are portable and this right only concerns automated processing, to the exclusion of manual or paper-based processing.
    
    
34. This right is limited to processing on the legal basis of your consent or the performance of steps prior to entering into a contract or the performance of a contract.
    
    
35. This right includes neither derivative data nor inferred data, which are personal data created by B&B HOTELS. 
     

13.7    Right to withdraw your consent
 

36. Where the data processing implemented by B&B HOTELS is based on your consent, you may withdraw consent at any time. B&B HOTELS will then stop processing your personal data, without this undermining any prior operations to which you had given your consent.
     

13.8    Right not to be the subject of a data based exclusively on automated processing 

No decision-making of this type is currently applied by B&B Hôtels.
 

13.9    Right to lodge a complaint
 

37. You have the right to lodge a complaint with the supervisory authority (by post: Cnil – Service des Plaintes - 3 Place de Fontenoy - TSA 80715 – 75334 Paris Cedex 07 – France) without prejudice to any other administrative or judicial remedy.
    
    
38. You may lodge a complaint using this dedicated form: https://www.cnil.fr/fr/plaintes
     

13.10    Right to define instructions in the event of your death
 

39. You have the possibility of setting out instructions concerning the conservation, erasure and communication of your personal data after your death and to designate a person to execute these instructions. That person will then be authorised to examine the instructions and demand their implementation by the controller.
    
    
40. You may inform us of your instructions for the fate of your personal data processed by B&B HOTELS using the methods set out below. You may change or revoke these instructions at any time.
     

13.11    Methods for exercising your rights
 

41. All of the rights enumerated above may be exercised:

• by message to the following e-mail address: privacy.france@hotelbb.com
• or by contacting your data protection officer by e-mail at dpo-france@hotelbb.com or by post to DPO B&B Hôtels C/O Qualiens Avocats 62-64 boulevard Pereire 75017 PARIS, France.
• while providing proof of your identity by any means, and legitimate grounds if this is required by law.