We place great importance on protecting your personal data. This policy describes the data we collect, why we process it, how long we keep it and the rights available to you.
The data controller is the publisher of this website, whose full identity and contact details appear in the legal notice. Any request concerning your data may be sent to gitesdurandonneur@gmail.com.
We collect the data you voluntarily provide: name, email address, telephone number and message through the contact form; name, contact details, stay dates, number of guests and an optional message through the booking form; name, rating and comment through the review form. Our servers also temporarily retain the IP address of incoming requests, for the sole purpose of limiting abusive automated submissions.
Processing your booking requests relies on pre-contractual measures and then on performance of the rental contract (Article 6(1)(b) GDPR). Handling contact requests and publishing reviews rely on your consent (Article 6(1)(a)). Limiting automated submissions relies on our legitimate interest in protecting the service (Article 6(1)(f)), and retaining accounting records on our legal obligations (Article 6(1)(c)).
Your data is used to answer your enquiries, manage your booking and your stay, produce the corresponding accounting documents and, where you have consented, publish your review. It is subject to no automated decision-making and no profiling.
Your data is accessible only to the owners of Gîtes du Randonneur. It is hosted on OVH SAS infrastructure and passes through our email provider for sending confirmations and invoices. No data is sold, rented or transferred to third parties for commercial purposes. Where a booking reaches us through an online booking platform, the data originates from that platform and is also governed by its own privacy policy.
The map tiles on the "Explore" and "Contact" pages come from OpenStreetMap. Displaying them transmits your IP address and your browser's technical characteristics to that service, without which the maps could not be delivered. All other images on the site are served from our own servers; should the owners embed an illustration hosted elsewhere, displaying it would involve the same transmission. None of these services sets a tracking cookie on this website.
This site sets no advertising or behavioural tracking cookies. Only strictly necessary cookies are used: storing your display language and, for owners only, the session cookie of the administration area. Audience measurement, where enabled, operates without cookies and without any data that could identify you; it is exempt from consent under the recommendations of the French data protection authority (CNIL).
Contact messages are kept for three years from the last exchange. Booking data is kept for the duration of the stay and then for three years as evidence and for customer relations purposes. Accounting records and invoices are kept for ten years, in accordance with the French commercial code. Published reviews are kept for as long as they remain displayed on the site.
You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability. You may also issue instructions concerning the fate of your data after your death, and withdraw at any time any consent you have given. To exercise these rights, write to us at gitesdurandonneur@gmail.com; you will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt about your identity.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority: Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr. If you reside in the European Union, you may also contact the supervisory authority of your country of residence.
Exchanges with this website are encrypted using HTTPS. Access to the administration area is password-protected, passwords are stored in encrypted form and the number of login attempts is limited. Backups are kept on media separate from the production server.