1. Scope
This policy describes the behaviour of the supplied Curiosityzestory static website. It is an independent editorial guide, not a hotel, casino, booking agent or payment service.
The Hôtel de Paris Monte-Carlo address shown on the contact page and in the footer identifies the travel destination only. It is not the publisher’s office, registered address or correspondence address.
2. Information collected and purposes
The site does not create accounts, request payment information or run visitor analytics. Its JavaScript reads and writes a browser preference recording your cookie choice and the time you made it. This is used only to remember your selection. When you complete the contact form, your name, email and message remain in the current page while a draft email link is prepared. The form does not submit information to a website server.
If you choose to open that draft, your email application receives its contents. Information is sent to the recipient only if you send the email yourself. Do not include passport details, medical records, card numbers or sensitive reservation documents. A deployed web host may process IP addresses, request times and security logs to deliver and protect the site; no particular hosting provider or log configuration has been selected in these files.
3. Cookies, storage and legal bases
Essential preference storage supports your request to remember a privacy decision. No optional tracking is activated by either acceptance or rejection because no such services are installed. See the Cookie Policy for the storage key and expiry behaviour. Where applicable, an operating publisher would rely on legitimate interests for proportionate security and correspondence, consent for optional tracking, and legal obligations where retention is required by law. Those purposes must be reassessed against the actual deployment.
4. Third-party services, photography and external sites
Styles, scripts and the static map illustration are served locally, and the site uses system fonts. There are no embedded maps, advertising networks or remote booking widgets. Photographs on the homepage load from images.unsplash.com. Loading those images makes a direct request from your browser to that external image-delivery service, which receives your IP address and ordinary connection and browser information necessary to deliver the file.
The photograph elements use a no-referrer policy to avoid sending the referring page URL. Image requests are not analytics scripts, but they are third-party network requests and are not blocked by the site’s cookie-choice controls. The image provider’s own processing and retention practices apply. See the Unsplash Privacy Policy, new tab. A live operator should review this service and may instead host appropriately licensed photographs locally.
External links take you to independently operated websites, including the hotel’s official site. Those destinations apply their own privacy policies and may collect data when visited. The site does not transmit your contact-form contents to them. A live operator’s hosting and email suppliers may act as processors and require appropriate contracts and international-transfer safeguards.
5. Retention and security
The consent preference is treated as expired after 180 days and removed when the site next checks it. You can remove it sooner through browser settings. Contact drafts are not saved in this site’s local storage; your browser or email application may retain them under its own settings. No server-side contact archive exists in this build. A live publisher must publish appropriate retention periods for received messages and hosting logs. No website or email system can promise absolute security.
6. GDPR and California rights
Depending on jurisdiction and applicability, you may request access, correction, deletion, restriction or portability, object to certain processing, and withdraw consent without affecting earlier lawful processing. California residents may have rights to know, delete and correct personal information and to opt out of sale or sharing. This build does not sell or share information for behavioural advertising. It does not discriminate on the basis of a privacy choice. Applicable exemptions and proportionate identity verification may affect a request.
7. Privacy contact and complaints
For privacy enquiries, contact [email protected]. No statutory Data Protection Officer has been appointed. You may also complain to the competent data-protection authority, including the Information Commissioner’s Office, new tab where relevant. Material changes to site functionality should be accompanied by an updated policy and, where necessary, a fresh consent request.