Legal notice

Data controller. The personal data collected on the website ecrinsousleschenes.com is processed by “L’écrin sous les chênes”, the sole proprietorship of Julien Lacombe, as data controller (contact details above). “L’écrin sous les chênes” implements appropriate technical and organisational measures to protect this data against alteration, destruction and unauthorised access. As the internet is not an entirely secure environment, however, the security of the transmission of information cannot be guaranteed.

Data collected and purposes.

• Through the contact form: name, email address and message, in order to respond to the request.
• When booking: surname, first name, email address, telephone number, country and, where applicable, comments and the details of the company to be invoiced. This data is used to manage the booking, the stay and invoicing, and to send messages related to the stay (confirmation, payment request, arrival and departure information, by email and text message).
• When paying: card details are entered directly on SumUp’s secure page; “L’écrin sous les chênes” never has access to them.
• Automatically, when visiting the website: IP address and information about the browser and operating system, for the proper functioning and security of the website.

Legal bases. This processing is based on the performance of the rental contract or of pre-contractual measures taken at the user’s request (booking, stay, payment), on compliance with the legal obligations of “L’écrin sous les chênes” (invoicing, accounting) and on its legitimate interest in responding to contact requests and ensuring the security of the website (Article 6 of the General Data Protection Regulation, GDPR).

Recipients. The data is intended for “L’écrin sous les chênes”. It is passed on, only to the extent necessary, to its processors:

• OVH, for website hosting and sending emails and text messages;
• SumUp, for card payments;
• Google, to protect the contact form against automated submissions (reCAPTCHA). Google may process the IP address outside the European Union.

It may also be disclosed to the authorities where required by law. It is never sold.

Retention periods.

• Data of customers and of people who have made contact: three years from the last contact.
• Invoices and accounting records: ten years, in accordance with the French Commercial Code (Code de commerce).
• IP address and connection data: thirty days.

Rights. In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), users have the right of access, rectification, erasure, restriction of processing, objection and portability of their data in a structured, commonly used and machine-readable format. They may set out instructions regarding what happens to their data after their death. Where processing is based on their consent, they may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

Users may exercise these rights by contacting:
Address: “L’écrin sous les chênes” – 17 chemin du Solarium 33170 GRADIGNAN
Tel.:

Email:

Proof of identity may be requested if there is reasonable doubt about the identity of the person making the request. A reply is given within one month. Users may also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, or with the supervisory authority of the Member State of their habitual residence, place of work or place of the alleged infringement.

When using the website, users undertake not to collect personal data unlawfully, not to misuse it and, in general, not to infringe the privacy of others.

Cookies. The website uses neither advertising cookies nor audience measurement tools. The booking process sets a technical cookie that is necessary for it to work. On the contact page, Google’s reCAPTCHA service, which protects the form against automated submissions, may set or read its own cookies.