Data Protection
PRIVACY STATEMENT GÎTES DE FRANCE
Preamble
Gîtes de France® attaches particular importance to the protection of the personal data of its customers, its partners and the users of its website: gites-de-france.com and those of the members of its network.
This declaration of confidentiality has been drawn up in order to define our data protection commitments. Its purpose is to specify the way in which the members of the Gîtes de France® network collect, use and process the personal information of all its users (customers, partners, website users).
Please be aware that our privacy protection practices comply with the French Data Protection Act (Loi ‘Informatique et Libertés’ n°78-17 of 6 January 1978 modified), the French law ‘pour la confiance dans l'économie numérique’ n°2004-575 of 21 June 2004 and comply with the requirements of the General Data Protection Regulation (Règlement Général sur la Protection des Données) n°2016/679 of 27 April 2016.
Article 1: Data collected
1.1 Nature of the data collected
Gîtes de France® ensures that the personal data collected is relevant. Only information that is adequate and limited to what is necessary for the purposes defined by Gîtes de France® is collected.
Some of the data collected on the website is strictly necessary for the establishment and follow-up of your accommodation contract or for browsing our website.
Other data is optional and failure to provide it will not affect the fulfilment of the hosting contract.
1.2 Use of collected data
Gîtes de France uses the personal data of the persons concerned in particular to authenticate them (surname, first name, address, telephone number, etc.), to provide them with the service and/or product they require (banking information) and to offer them information tailored to their interests (commercial and promotional information).
Gîtes de France may use the irreversibly anonymised data of the persons concerned for statistical studies.
a. Data required to use the Gîtes de France website
We collect personal information about you when you use the websites of the Gîtes de France® network. This information is necessary to fulfil the contract and includes :
- Information when creating a user account. Your title, your first name, your surname, your telephone number, your postal address and your e-mail address.
- Information when booking accommodation. Your title, first name, surname, telephone number, postal address, e-mail address, number of guests, children's date of birth, bank details.
b. Information you choose to provide
Certain information is additional and optional:
- Additional customer account information. For example, your profile photo.
c. Data collected automatically when using the Gîtes de France website
This information may include :
- Geolocation data. A precise or approximate location determined from your IP address or the GPS of your mobile device depending on the settings of your device.
- Usage information. The pages or content you view, searches, bookings you have made and other actions taken on the Gîtes de France website. When users visit the Gîtes de France website, the web server automatically records data and information relating to the device and browser used by them. This information may include the type of browser and version used, the operating system, the Internet service provider, the IP address of the user's device, and the date and time of access to the site.
d. Personal data made available to third parties.
Your personal data may be transferred to third parties, in particular: courts, administrative authorities, law enforcement officers, as part of a legal obligation, for example.
In the context of subcontracting operations, service providers act on behalf of and according to the instructions of Gîtes de France, in compliance with the RGPD.
Article 2: Persons responsible for processing personal data
2.1 Data processors
When your Gîtes de France® agency acts as data controller, it undertakes to communicate personal data only to those entities of the Gîtes de France® network with which you have a business relationship and to its authorised service providers/sub-contractors.
2.2 Obligations of data processors
Gîtes de France® shall refrain from communicating personal data to third parties (other than those mentioned in 2.1) without having informed the persons concerned and without having offered them the possibility of exercising their right to object.
In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means necessary.
Article 3: Data retention period
Data is kept for a period appropriate to the purposes of the processing and in accordance with the legislation and regulations in force.
Customer data is kept for the duration of the contractual relationship, and may be kept for ten years after termination of the contractual relationship in order to comply with accounting and tax obligations.
Data relating to prospective customers who are natural persons may be kept for up to three years after the last contact from the prospective customer.
Article 4: General principles for data collection and processing
In accordance with the provisions of Article 5 of European Regulation 2016/679 (RGPD), the collection and processing of data from users of the site complies with the following principles:
1. Lawfulness, fairness and transparency: data may only be collected with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that his or her data is being collected and for what purpose the data is being collected.
2. Limited purposes: the collection and processing of data is carried out to meet one or more of the purposes set out in this document;
3. Minimisation of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected.
4. Conservation of data reduced in time: data is conserved for a limited period, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period.
5. Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
Article 5: Legal basis for the processing of personal data
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679 (RGPD), we process your personal data on the following legal grounds:
- Legitimate interest: we may process your personal data as necessary to protect our legitimate business interests (provided that the interests or rights of individuals do not prevail), in particular to manage, develop and improve our products and services; support our customers and sales department; ensure the protection of our staff and assets; communicate information that relates to our products and services and ensure compliance with laws and regulations.
- Contract performance: we may process your personal data to enter into or perform contracts with you or your organisation, including providing and managing our products and services and enabling our customers to use our products, services and support tools.
- Legal obligation: we may process your personal data to comply with applicable laws and regulations or to establish or exercise our rights. For example, in the event of complaints or for compliance, regulatory and investigative purposes.
- Consent: we may process your personal data where you have given us your consent. In particular, where we cannot rely on any other legal basis or where we are required by law to obtain your consent in the context of certain sales and marketing activities, data collection tools or online surveys.
Article 6: Security of personal data collected
Gîtes de France implements appropriate security measures to protect the personal data collected against any malicious intrusion, loss or disclosure to unauthorised third parties.
Gîtes de France also guarantees the security of information exchanged during payment transactions.
Finally Gîte
Article 7: User rights
7.1 Various user rights
In accordance with the requirements of European Regulation 2016/679 (RGPD), the user has the rights listed above.
- Right of access: you may request access to the personal data processed by Gîtes de France concerning you, or request copies thereof;
- Right of rectification: you may rectify your personal data if it is inaccurate or incomplete;
- Right to erasure: you have the right to request the deletion of your personal data, subject to certain exceptions. For example, we may be required to retain your personal data in order to comply with legal obligations.
- Right to restriction: you may restrict the processing of your personal data in certain circumstances. For example, if you dispute the accuracy of your personal data, you may ask us to limit the processing of your personal data until we have been able to verify its accuracy;
- Right to portability: you have the right to request the portability of your data in certain circumstances. For example, you can ask us to transfer some of your personal data to another organisation if the processing is based on your consent or a contract;
- Right to object to data processing: you may object to the processing of your personal data in certain circumstances. For example, you may object to direct marketing, including the use of your personal data for profiling purposes for direct marketing, or where we process your personal data for our own legitimate interests.
However, these rights may be limited in certain situations, for example if Gîtes de France is able to demonstrate the existence of a legal obligation or legitimate interest for the processing of your personal data.
- Right to lodge a complaint with the competent supervisory authority: if you believe that the processing of your personal data is in breach of the GDPR, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés or the supervisory authority of the European Union Member State in which you reside.
7.2 Data Protection Officer (DPO)
To ensure that current legislation is properly applied, Gîtes de France has appointed a Data Protection Officer (DPO).
If you wish to exercise your rights, please contact us by filling in the form available here or by writing to the DPO at the following address: rgpd@gitesdefrancefede.com
If you wish to delete your Gîtes de France customer account. You must log in to your account and go to the ‘Security’ section. From there, you can delete your Gîtes de France® customer account by clicking on ‘Delete account’ and following the steps to confirm the deletion of your account. By deleting your account, you are informed that you will no longer be able to access the history of all bookings made within the Gîtes de France® network.
Article 8: Changes to the privacy statement
Gîtes de France may modify this privacy statement at any time, in particular due to :
- the introduction of new services or new technologies
- changes in the legislative and regulatory framework
In the interests of transparency, Gîtes de France will publish the new version of the privacy statement on this page. We invite the persons concerned to consult this page as often as they wish to take note of any changes.
Article 9 : Cookie management
When you visit our website, information concerning the browser used on our website from your terminal (computer, tablet, smartphone, etc.) is likely to be recorded in ‘Cookie’ files installed on your terminal.
Cookies are mainly used to store your choices and preferences or to recognize you when you return to browse our website.
You can update your consent to manage these cookies via the button "Cookie Settings" in the footer of the page.
The majority of browsers accept cookies, but you can configure your browser settings to refuse or delete them at any time. To do this, refer to the information and support section of the browser you use.
Please note that only the sender of a cookie may read or modify information contained within it.
9.2 Duration of cookie storage
Cookies stored on your terminal have a maximum lifespan of thirteen months. When the storage duration expires, personal information collected via cookies will be deleted.
9.3 Refusing cookies
If you refuse that the cookies we emit be recorded on your computer, or if you delete the ones which we have recorded there, you may not be able to benefit from a certain number of functions which are nonetheless necessary to browse certain parts of our website. This would be the case if you tried to access our content or services which require you to identify yourself. It would also be the case if we were unable to recognise for reasons of technical compatibility the type of browser used by your computer, its language and display settings or the country from which your computer appears to be connected to the internet.
If this is the case, we decline all responsibility for the consequences linked to the reduced functionality mode of our services which result from our being unable to record or consult the cookies necessary for their functioning which you have refused or deleted.
How to manage cookies, depending on the browser software you use
To manage cookies and your choices, all browser software is configured differently. The help menu of your browser describes how to modify your wishes in terms of cookies.
- For Internet Explorer™ : open the Tools menu, then select Internet options ; click on Privacy tab then choose the level you require
- For Firefox™ : open the Tools menu, then select Options ; click on private life tab then choose the options required
- For Chrome™ : open set-up menu (spanner logo), then select Settings ; click on Advanced Settings, then on Content Settings, then choose the options required
- For Safari™ : choose Safari > Preferences then click on Security ; click on Show cookies then select the options required
- For Opera™ : open Tools menu, then select Preferences ; click on Advanced tab, then click on Manage cookies in Cookies section ; choose the options required
Updated 14/10/2024