Who and what this choice covers
Rhodos Club is operated by IMPACT ALPS, a French société par actions simplifiée (SAS), trading as Les Rhodos. SIREN: 978 140 432. SIRET: 978 140 432 00011. Registered and correspondence address: 18 Rue du Bourg, 74110 Morzine, France. Contact for the club, support and privacy requests: Carl Fithon, carl@morzinelets.com. Public website: https://www.rhodoshotelmorzine.com/. Publication director: Carl Fithon. Selecting the email marketing option authorizes this club operator to use your account email and name to send Rhodos Club offers, venue news and event announcements. The audience for these promotional emails is adults; this does not impose an 18+ requirement for membership registration. It does not authorize marketing for unrelated Morzine Lets services, partner promotions using a transferred contact list, SMS, WhatsApp, push messages, advertising-network matching or sale of your information.
Choice and lawful basis
This is a separate consent under GDPR Article 6(1)(a). It starts off. Leave it off or select Decline optional uses to refuse; membership and ordinary benefits remain available. Accepting membership terms, acknowledging privacy information, claiming a flyer or giving an email address is not marketing consent. We record the notice version, choice, date/time, platform and app version. A new notice version needs a new choice before it can be relied upon.
Email content and personalization
This permission covers ordinary Rhodos newsletters and promotions. Using recorded club activity or preferences to select promotional content also requires the separate personalization permission. Personalization permission by itself does not authorize email. Essential verification, recovery, security and requested service messages are separate from marketing and may still be sent when marketing is off. They must not be used to disguise promotional messages.
Changing your mind
Turn off email marketing in Account and save, or use Withdraw all optional permissions. You can also contact the privacy address. Withdrawal stops subsequent consent-based marketing use and does not affect earlier lawful processing. Any marketing email must provide a simple unsubscribe mechanism that works without signing in. The current app records preferences but contains no campaign sender; before sending campaigns, the operator must implement unsubscribe handling, audience rechecking and timely vendor-side withdrawal.
Recipients, storage and limits
Only IMPACT ALPS personnel and providers assigned to this purpose may use the contact list under the applicable arrangements. Microsoft Outlook is declared for business email; its use for correspondence does not establish a compliant campaign-sending setup. The actual campaign product, unsubscribe handling, recipient controls, processor terms and international-transfer safeguards must be established before campaigns begin. Email open/click tracking is not included in this permission or implemented in the reviewed app. Additional tracking requires separate assessment and information.
The operational account email can remain while the account exists even after marketing withdrawal. Ordinary consent history is linked to the account and removed by account deletion. Before campaigns start, any separate campaign audience, withdrawal cleanup and minimal suppression record must have defined, enforced retention limits and be covered by the Privacy Notice. No app-managed campaign contact list exists in the reviewed implementation; any separately maintained Outlook, Google or other contact copy must also respect applicable choices and deletion obligations. The Privacy Notice explains rights, residual operational records, provider limitations and how to contact the CNIL.