Privacy policy

The controller of personal data collected on the site is:

Corentin Cai Private individual, owner of the accommodation 396 Chemin de Castagnès 82150 Saint-Beauzeil Tarn-et-Garonne – France

Corentin Cai determines the purposes and means of the personal data processing carried out in connection with the presentation and seasonal rental of the accommodation.

Depending on the services used, the following data may be collected:

• first and last name; • email address; • phone number; • postal address, when required for a booking; • desired or effective stay dates; • number and composition of travellers; • information shared in messages; • information needed to prepare and follow up the stay; • history of exchanges and requests; • information related to booking and payment; • technical connection and browsing data; • IP address; • device type, browser and operating system used; • information related to cookies and consent preferences.

The site only collects data necessary to handle requests and manage bookings.

Users are asked not to share, in free-text fields, sensitive data or information that is not necessary to process their request.

Personal data may be collected:

• directly from the user when filling in a form; • during an information or booking request; • during exchanges by email or phone; • when entering into and performing a seasonal rental contract; • while browsing the site, through cookies or technical data; • through an external booking platform when the user chooses to book from a third-party service.

When booking or payment is made on an external platform, data is also processed in accordance with that platform's privacy policy.

Personal data may be used for the following purposes:

• respond to information requests; • check accommodation availability; • prepare a price proposal; • process and confirm a booking request; • enter into and perform the seasonal rental contract; • prepare the arrival and welcome of travellers; • communicate practical information about the stay; • manage payments, deposits, refunds and any incidents; • handle administrative and accounting follow-up of rentals; • respond to questions and complaints; • prevent fraudulent or abusive use of the site; • ensure the security and proper functioning of the site; • measure site traffic and performance where audience tools are used; • comply with applicable legal, administrative, tax and accounting obligations; • defend Corentin Cai's rights in the event of a dispute.

Data is not used for purposes incompatible with those for which it was collected.

Depending on the purpose, personal data processing relies on the following legal bases:

Pre-contractual measures Processing is necessary to respond to an information request, check availability, prepare a price proposal or organise a future booking.

Performance of the contract Processing is necessary to conclude and perform the seasonal rental contract, manage the stay, payments, deposit and communication with the traveller.

Legal obligation Certain data may be kept or transmitted in order to comply with administrative, tax, accounting or judicial obligations.

Legitimate interest Certain data may be used to ensure the security of the site, prevent fraud, handle complaints and defend the rights of the accommodation owner.

Consent User consent may be requested for the use of non-essential cookies, external services or the sending of communications not directly related to a booking.

Where processing relies on consent, it may be withdrawn at any time.

Fields identified as mandatory in the forms are necessary to process the request.

Without this information, Corentin Cai may not be able to respond to the request, prepare a proposal or confirm a booking.

Other information is optional. It only helps to facilitate or personalise the handling of the request.

Personal data is primarily intended for Corentin Cai.

Within the limits of their respective missions, it may also be accessed by the following categories of recipients:

• LMS Design SARL, as service provider in charge of design, maintenance and technical support of the site; • OVH SAS – OVHcloud, as the site's host; • email service providers; • external booking platforms; • providers in charge of payment or deposit management; • technical providers necessary for the operation of the site; • insurers, advisors, experts or professionals involved in the event of a claim or dispute; • administrative, tax or judicial authorities legally entitled to receive the data.

These recipients only access the information required to carry out their tasks.

Personal data is neither sold, rented nor transferred to third parties for commercial purposes.

When a booking is paid via a booking platform or an external payment provider, banking data is collected and processed directly by that provider.

Corentin Cai does not receive or store full credit card numbers.

Only information required to track the transaction may be accessible, such as:

• payment amount; • transaction date; • payment status; • transaction reference; • payer identity when disclosed by the provider.

Users are invited to consult the privacy policy and terms of use of the relevant payment provider or booking platform.

Personal data is kept for a period proportionate to the purpose for which it was collected.

Information requests without booking Data related to a request that did not lead to a booking may be kept for a maximum of three years from the last exchange with the user.

Bookings and stays Data required to manage the booking is kept for the entire duration of the contractual relationship. It may then be archived for a maximum of five years from the end of the stay, notably to provide proof of the contract and handle any complaints or proceedings.

Administrative and accounting documents Invoices and documents subject to a legal retention requirement may be kept for a maximum of ten years.

Technical data and security logs Technical data required for the security and operation of the site is kept for a limited period, proportionate to security, maintenance and incident investigation needs.

Cookies and audience measurement The retention period of each cookie is stated in the site's cookie management tool. Where audience measurement trackers configured in line with CNIL recommendations are used, their lifespan is limited to what is strictly necessary. User choices regarding acceptance or refusal of cookies may be kept to avoid asking again on every visit.

Upon expiry of the applicable periods, data is deleted or anonymised, unless further retention is required to comply with a legal obligation or defend a right.

The site may use cookies or similar technologies. A cookie is a small file that may be stored on the user's device when consulting the site.

Strictly necessary cookies Some cookies are essential:

• for the technical functioning of the site; • for browsing security; • to remember privacy preferences; • for correct display of pages; • to prevent errors and abusive use.

These cookies may be placed without prior consent when strictly necessary for the requested service.

Cookies subject to consent Other cookies may be used to:

• measure site traffic; • analyse browsing paths; • display an interactive map; • play a video hosted by an external service; • offer features from third-party platforms; • measure the effectiveness of an advertising campaign.

When required by regulation, these cookies are only placed after user consent.

The user may accept, refuse or customise their choices from the cookie management banner. Their choice may be changed or withdrawn at any time via the "Manage cookies" link or button available on the site.

Refusing non-essential cookies does not prevent access to the main information on the site.

The site may integrate services offered by third parties, for example:

• a geographic map; • a route/itinerary; • a video; • a booking module; • a button linking to a booking platform; • an audience measurement tool; • a payment service; • a form or anti-spam protection.

These services may collect technical data or place cookies when activated by the user.

Where consent is required, the service remains blocked until the user accepts.

Corentin Cai favours providers that host and process data within the European Economic Area.

However, some external services used by the site may process data in countries outside the European Economic Area.

Where such a transfer takes place, it must rely on a mechanism recognised by regulation, in particular:

• an adequacy decision by the European Commission; • standard contractual clauses adopted by the European Commission; • or any other appropriate safeguard provided by regulation.

Information about transfers made by an external provider is set out in its own privacy policy.

Reasonable technical and organisational measures are implemented to protect personal data against:

• unauthorised access; • loss; • alteration; • disclosure; • destruction; • fraudulent use.

These measures may include:

• securing connections to the site; • restricting access to data; • protecting administration accounts and tools; • backing up necessary data; • regular updates and maintenance of the site; • using professional service providers.

Despite these precautions, no computer system or service accessible on the Internet can guarantee absolute security.

In accordance with applicable regulations, any person concerned may, under the conditions set by law, exercise the following rights:

• right of access to personal data; • right to rectify inaccurate or incomplete data; • right to erasure of data; • right to restrict processing; • right to object to processing; • right to data portability; • right to withdraw consent at any time; • right to set directives regarding the fate of data after death.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Some requests may not be granted where processing or retention is necessary to comply with a legal obligation, perform a contract or defend rights in court.

To exercise rights or obtain information about the processing of personal data, users may contact:

Corentin Cai 396 Chemin de Castagnès 82150 Saint-Beauzeil Tarn-et-Garonne – France

The request should specify the right being exercised and enable identification of the data concerned.

Proof of identity may only be requested when necessary to verify the requester's identity, particularly in case of reasonable doubt.

A reply will be provided within the time limits set by regulation.

Any person who considers that the processing of their personal data does not comply with the regulation may file a complaint with the:

Commission nationale de l'informatique et des libertés – CNIL 3 place de Fontenoy TSA 80715 75334 Paris Cedex 07 – France

Data collected on the site is not subject to a fully automated decision producing legal effects or significantly affecting the user.

Information and booking requests are reviewed by a natural person.

The site may contain links to external sites or platforms.

Corentin Cai does not control the data protection practices of these services and cannot be held responsible for their privacy policies.

Users are invited to review the privacy policies of external sites before sharing any data with them.

This policy may be modified to take into account:

• changes to the site; • the addition or removal of a service; • a change of provider; • a change in data processing; • legal or regulatory changes.

The applicable version is the one published on the site at the date of consultation.