City of Paris, December 23^rd, 2016

Dear Sir,

You have lodged a complaint with the CNIL since you have been requested to show an identity document and a bank card to get in the Spa Privatif Empire Paris whereas you would have previously paid online your booking.

From 15^th December 2015, the CNIL repeatedly intervened to ask for the reasons why such data was collected and remind the Act n°78-17 of 6^th January 1978 on Information Technology, Data Files and Civil Liberties, called “Informatique et Libertés”.

On 6^th June 2016, the CNIL carried out an on-site control in the company Empire Paris to see if its personal data processing is in line with the Act “Informatique et Libertés”.

The CNIL’s delegation has noted that the company Empire Paris collected police single forms for every customer together with bank card information.

However, the article R.611-42 of the Code for Entry and Residence of Foreigners in France and the Right of Asylum (CESEDA) provides the collection of police forms only for foreign citizens and does not stipulate to collect information about bank cards.

On 8^th December 2016, the CNIL consequently addressed a mail to the company Empire Paris reminding the provisions of the Act “Informatique et Libertés” and requesting to strictly respect the provisions of the article R.611-42 of CESEDA.

On this basis, I close your complaint against the company Empire Paris. You can dispute this decision of closure to the Council of State within 2 months starting from the edition of this mail.

Yours sincerely,