This privacy policy describes how Dunes de l'Adour collects, uses and protects the personal data of visitors to the dunes-adour.pages.dev website, in compliance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French Data Protection Act ("Informatique et Libertés") of 6 January 1978 as amended.
01 Data controller
The controller of the data collected on this website is:
Dunes de l'Adour, a simplified joint-stock company (SAS) with share capital of €1,000
Registered office: 47 B Avenue Bosquet, 75007 Paris, France
Rented property: Suite Océan et Golf, Résidence Chiberta, 104 Boulevard des Plages, 64600 Anglet, France
SIREN: 992 955 047 · Paris Trade and Companies Register 992 955 047
Furnished tourist accommodation rated 4 stars · registration no. 64024005184A4
Email: dunesdeladour@gmail.com · Phone: +33 6 78 26 50 76
For any question regarding the protection of your data, you can contact us by email at the address above.
02 Data we collect
We only collect the data strictly necessary for the purposes described below. No sensitive data is collected.
Data you provide to us
When you fill in the contact or booking-request form, or when you write to us directly, we collect:
- your first and last name;
- your email address and, where applicable, your telephone number;
- the stay details you choose to share (desired dates, number of guests);
- the content of the message you write.
Data collected automatically
When you simply browse the site, the host may record technical connection data (IP address, browser type, pages viewed) for security and proper operation of the service. This data does not allow us to identify you by name.
03 Purposes and legal bases
Your data is processed for the following purposes:
- Respond to your contact and booking requests (legal basis: pre-contractual measures taken at your request and legitimate interest in responding to enquiries, art. 6(1)(b) and 6(1)(f) GDPR);
- Manage the relationship relating to your stay, including organisation, communication and invoicing (legal basis: performance of the rental contract, art. 6(1)(b));
- Ensure the security and proper operation of the site (legal basis: legitimate interest, art. 6(1)(f));
- Comply with our legal obligations, in particular accounting and tax obligations (legal basis: legal obligation, art. 6(1)(c)).
Your data is never used for commercial prospecting without your prior consent, nor sold to third parties for advertising purposes.
04 Recipients and processors
Your data is intended for Dunes de l'Adour, represented by Alexandra and Anne-Sophie, who alone are authorised to access it. To operate the site and handle your requests, we use technical service providers (processors within the meaning of the GDPR), who use your data solely on our behalf:
- Cloudflare, Inc. for hosting the site (Cloudflare Pages);
- Google Ireland Ltd. for providing the fonts (Google Fonts), loaded when the pages are displayed;
- Airbnb Ireland UC: when you book via the Airbnb platform, the processing of your data is then subject to Airbnb's privacy policy.
We ensure that these providers offer sufficient guarantees regarding the protection of your data.
05 Transfers outside the European Union
Some of our processors (in particular Cloudflare and Google) may process data outside the European Union, in particular in the United States. These transfers are governed by appropriate safeguards: membership of the Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and/or the European Commission's standard contractual clauses.
06 Data retention
Your data is kept only for as long as necessary for the purposes pursued:
| Data | Retention period |
|---|---|
| Contact and booking requests with no follow-up | 3 years from the last exchange |
| Data relating to an actual stay | Duration of the relationship, then archived for the applicable statutory limitation periods |
| Accounting documents and supporting records | 10 years (legal obligation) |
| Technical connection data (logs) | 12 months maximum |
07 Cookies and tracker management
A cookie is a small file placed on your device when you visit a site. The Dunes de l'Adour website only uses cookies and technologies strictly necessary for its proper operation, which do not require your prior consent.
| Service | Purpose | Consent |
|---|---|---|
| Technical site cookies | Display and security of pages | Not required (exempt) |
| Google Fonts | Loading of fonts; may transmit your IP address to Google | Not required (no advertising cookie) |
No advertising, profiling or social-network cookie is placed. You can configure your browser at any time to accept or refuse all or some cookies; the site remains accessible in all cases.
Audience measurement
As of the date of this policy, no audience-measurement tool or advertising tracker (such as Google Analytics) is used on this site. Should such a tool be introduced, this policy would be updated and your prior consent would be obtained via a dedicated banner, in accordance with the recommendations of the CNIL (the French data protection authority).
08 Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights over your data:
- right of access and rectification;
- right to erasure ("right to be forgotten");
- right to restriction and right to object to processing;
- right to data portability;
- right to set guidelines regarding the fate of your data after your death.
To exercise these rights, send your request by email to dunesdeladour@gmail.com. We may ask you for proof of identity and undertake to respond within one month.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr), or with the supervisory authority of your country of residence.
09 Security
We implement appropriate technical and organisational measures to protect your data against any unauthorised access, loss or disclosure: encrypted connection (HTTPS), restricted access to data and the use of providers recognised for the reliability of their infrastructure.
10 Changes to this policy
This privacy policy may change, in particular in the event of a change in regulations or in the tools used on the site. The applicable version is the one published on this page, whose last-updated date is shown at the top of the document. We invite you to review it regularly.