Privacy Policy
1. GENERAL INFORMATION
The company PUY DU FOU FRANCE, a simplified joint stock company with its registered office at lieudit Puy du Fou, 85590 LES EPESSES, registered with the Trade and Companies Register of LA ROCHE-SUR-YON under number 347 490 070, represented by Mr. Olivier Strebelle in his capacity as Managing Director, as well as THE ASSOCIATION POUR LA MISE EN VALEUR DU CHÂTEAU ET DU PAYS DU PUY DU FOU, a non-profit association (Law of 1901) with its registered office at Puy du Fou - CS 70025 – 85590 LES EPESSES, SIREN 312 772 981, represented by Mr. Nicolas de Villiers in his capacity as President (hereinafter collectively referred to as “Puy du Fou” or individually as “Puy du Fou France” or “the Association du Puy du Fou”) have created this Personal Data Protection Policy to communicate Puy du Fou’s policies and practices regarding the collection and disclosure of information about you obtained through the puydufou.com website, its call center, or any other physical reception point in the park.
For internal operational reasons, certain processing operations concerning you are carried out by Puy du Fou France and the Association du Puy du Fou as joint data controllers. Others are carried out solely by one of the two entities as an independent data controller.
The processing jointly carried out by Puy du Fou is governed by a joint responsibility agreement. This agreement outlines the respective roles and relationships of the joint controllers with regard to the data subjects.
The main points of this agreement will also be made available to the data subjects upon simple request.
Puy du Fou attaches great importance to respecting your privacy and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.
2. PURPOSES AND LEGAL BASES FOR THE COLLECTION OF YOUR DATA
Your personal data is collected based on your explicit consent, legitimate interest, or when necessary for the performance of a contract.
Thus, your personal data is collected in order to:
• Respond to your questions submitted via the “contact us” form or through our call center;
• Send you our brochures following your request via the “Brochure” form or through our call center;
• Manage your purchases and reservations;
• Ensure the security of online transactions, prevent fraud, and manage payment incidents;
• Gather your feedback regarding our services;
• Carry out loyalty and personalized marketing activities;
• Contact you in case of an abandoned cart to allow you to complete your order later;
• Subject to your consent, send you information about offers, news, and events from Puy du Fou and other companies in the Puy du Fou group1;
• If applicable, manage the safety of property and people in the park, provide emergency assistance, handle lost persons and lost-and-found items, and record visits to our infirmary.
The Personal Data required to achieve the purposes described above is indicated on our online forms, by our telephone operators, or by any reception staff in the Park. If you do not provide this data, Puy du Fou will not be able to respond to your requests.
1Puy du Fou Signature, Le Grand Tour, Puy du Fou Editions, Puy du Fou Films, Puy du Fou Nederlands, Puy du Fou España, Puy du Fou UK
3. RECIPIENTS OF YOUR PERSONAL DATA
Your Personal Data is accessible only to those who need to know it in the context of the processing operations. Access by authorized personnel is limited to their responsibilities and duties, and they are bound by a confidentiality obligation.
In particular, the categories of recipients of personal data processed by Puy du Fou are:
Internal:
• Sales & Reservations Department;
• Marketing and Digital Department;
• Operations Department;
• Information Systems Department;
• Administrative and Financial Department;
• The Association for the Promotion of the Château and the Puy du Fou Region.
External:
• Possible subcontractors of Puy du Fou for exclusively technical and logistical reasons (transporters, routers, security, hosting, catering and site maintenance providers, payment and fraud management providers, insurers, etc.);
• Insurance company (in case of cancellation insurance subscription).
Finally, Puy du Fou may disclose your Personal Data to third parties when such disclosure is required by law, regulation, or court order, or if it is necessary to ensure the protection and defense of its rights.
4. TRANSFERS OF PERSONAL DATA OUTSIDE THE EU AND EEA
Puy du Fou does not use service providers located outside the European Union and the European Economic Area (EEA: EU Member States, Iceland, Liechtenstein, and Norway).
If Puy du Fou were to use service providers located outside the European Union and the EEA, it would ensure that such data transfers are carried out lawfully, using transfer tools provided for by data protection laws and implementing appropriate safeguards and protection measures. In this context, either the providers are located in a country deemed adequate by the European Commission, or standard contractual clauses approved by the European Commission have been signed with these recipients. In the latter case, Puy du Fou undertakes, with the help of the concerned provider, to assess the protection level offered by the local legislation and to take into account the practices of authorities in the third country by conducting a transfer impact assessment (“TIA”).
Puy du Fou undertakes to provide, upon request by the data subjects, a copy of the applied safeguards or indicate where they can be accessed.
5. RETENTION PERIODS
Puy du Fou undertakes to use Personal Data only for the time necessary to achieve the purposes described above.
• Reservation data will generally be retained by Puy du Fou for a period not exceeding the applicable statutory limitation periods.
• Video surveillance data is retained for no more than 1 month from the date of collection.
• Your banking data will be securely stored for the validation of your order and payment. It will then be retained for a maximum of 13 months (15 months in the case of deferred debit card payment).
• Your data used, with your consent, for marketing purposes will be retained for three years from the date of your visit if you made a reservation at Puy du Fou, or from its collection or your last contact if you never made a reservation. A contact is defined as a request for documentation, a call to our Visitor Relations service, or a click on a hyperlink contained in an email; opening an email alone is not considered contact. After this three-year period, Puy du Fou may contact you again to ask whether you wish to continue receiving commercial communications.
• Data recorded in the case of a lost person is deleted 1 month after video footage capture.
• Data recorded in the case of a lost item is retained for 3 years from the date of loss or theft.
• Data related to a found item is retained for 3 years from the date the item is claimed.
• Data recorded in the case of a visit to the infirmary is retained for up to 20 years.
• Data recorded in the case of a job application is retained for up to 2 years after the end of the recruitment process.
Once your personal data is no longer necessary for the purposes outlined above or for archiving purposes, Puy du Fou will ensure it is completely destroyed or anonymized.
6. SECURITY
Puy du Fou has implemented appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of your Personal Data.
Puy du Fou’s IT systems are protected both physically and digitally according to best practices. Physical and electronic data backup procedures are implemented in accordance with current French data protection legislation and industry standards. Puy du Fou employees who, due to their duties, have access to your Personal Data are bound by strict confidentiality obligations and receive training in data protection.
Please note, however, that no data transmission over the Internet is 100% secure, and all information shared online may potentially be intercepted and used by persons other than the intended recipient.
7. AUTOMATED DECISION-MAKING
Puy du Fou does not carry out any automated decision-making.
8. YOUR RIGHTS REGARDING THE COLLECTED DATA
In accordance with current regulations, you have the following rights concerning your personal data:
Right of access: The right (I) to obtain confirmation whether personal data concerning you is being processed; and when it is, (II) to obtain a copy of such personal data.
Right to rectification: The right to obtain correction of personal data that is inaccurate or incomplete.
Right to object: The right to object to the processing of your personal data for legitimate reasons, except where the processing is carried out as part of the data controller’s public interest missions. The processing must cease unless there are compelling legitimate grounds for Puy du Fou to continue, or if the data is necessary for the establishment, exercise, or defense of legal claims, or for scientific, historical, or statistical purposes in the public interest.
This also includes the right to object at any time and without condition to the use of your personal data for marketing communications (e.g., information about Puy du Fou activities/services, event invitations, newsletters, etc.).
You can unsubscribe from emails at any time by contacting us at mesdonnees@puydufou.com or by clicking the unsubscribe link in each email. This applies to all electronic communications from Puy du Fou except those necessary for processing reservations and sending travel documents.
Right to erasure: The right to request the deletion of personal data when it is no longer necessary for the intended purpose, if it has been unlawfully processed, to comply with a legal obligation under EU or French law applicable to Puy du Fou, to withdraw your consent, or when you object to processing and there is no overriding legitimate reason, or when data is processed for marketing purposes.
Right to restriction: The right to obtain restriction of processing, particularly when you dispute the accuracy of your data during a period allowing Puy du Fou to verify it; when processing is unlawful, and you oppose deletion; when Puy du Fou no longer needs your data but you require it for legal claims; or when you have objected to processing pending verification of legitimate grounds.
Right to data portability: The right to receive the personal data you provided to Puy du Fou in a structured, commonly used, and machine-readable format and to transmit that data to another controller, as set out in Article 20 of the GDPR.
Right not to be subject to a decision based solely on automated processing: The right not to be subject to a decision based solely on automated processing, including profiling, producing legal effects concerning you or significantly affecting you.
There are exceptions to this right (e.g., when the decision is necessary for a contract between you and Puy du Fou, when authorized by EU or French law, or when based on your explicit consent).
Right to define instructions regarding your personal data after your death: The right to define general or specific instructions regarding the retention, deletion, and communication of your personal data after your death.
These rights can be exercised directly with Puy du Fou by email at mesdonnees@puydufou.com or by mail at Puy du Fou – Personal Data Management – Human Resources Department - CS 70025 - 85590 Les Epesses. Proof of identity may be requested in case of reasonable doubt about the requester’s identity.
In addition, you have the right to lodge a complaint with the supervisory authority, the CNIL in France, if you believe your GDPR rights have been violated or have reason to suspect so.
9. CHANGES AND UPDATES TO THE PERSONAL DATA PROTECTION POLICY
By using our website, contacting our call center, Visitor Relations service, or any reception staff at Puy du Fou, and by conducting transactions with our services, you agree to the collection and use of your data as described in this Personal Data Protection Policy. This Policy reflects Puy du Fou’s current professional practices. In the event of any modification or update, the revised Policy will be published on the puydufou.com website with the date of the latest update indicated.
10. DATE OF UPDATE OF THE PERSONAL DATA PROTECTION POLICY
September 2025