Privacy policy

GÎTES DE FRANCE® LOIRE-ATLANTIQUE PRIVACY POLICY

Preamble 

This website is protected by intellectual property laws. It is strictly forbidden to reproduce it, in whole or in part, in terms of its form or content, without the written consent of its author.

SAS Gîtes de France® OUEST attaches particular importance to the protection of the personal data of its customers, its partners and the users of its website: https://www.gites-de-france-loire-atlantique.com and those of the members of its network.

This privacy policy has been drawn upto set out the commitments regarding data protection. Its purpose is to clarify how members of the Gîtes de France® network collect, use and process the personal data of all its users (customers, partners, website users). 

Please note that our privacy practices comply with the French Data Protection Act No. 78-17 of 6 January 1978, as amended, the “Law on Confidence in the Digital Economy” No. 2004-575 of 21 June 2004, and comply with the requirements of the “General Data Protection Regulation” No.2016/679 of 27 April 2016

Article 1: Data collected

1.1 Nature of the data collected

SAS Gîtes de France® OUEST ensures that the personal data collected is relevant. Only information that is appropriate and limited to what is necessary for the purposes defined by SAS Gîtes de France® OUEST is collected.

Some data collected on the website is strictly necessary for the establishment and management of your accommodation contract or for browsing our website.

Other data is optional, and failure to provide it will not affect the fulfilment of the accommodation contract.

1.2 Use of the data collected

SAS Gîtes de France® OUEST uses the personal data of the data subjects, in particular to authenticate them (surname, first name, address, telephone number, etc.), to provide them with the requested service and/or product (bank details) and to offer them information tailored to their interests (commercial and promotional information).

SAS Gîtes de France® OUEST mayuse data relating to data subjects that has been irreversibly anonymised in advance for the purposes ofstatistical analysis.

a. Data required to use the SAS Gîtes de France® OUEST

We collect personal information about you when you use the SAS Gîtes de France® OUEST website https://www.gites-de-france-loire-atlantique.com. This information is necessary for the performance of the contract and includes:

- Information provided when creating a user account. Your title, first name, surname, telephone number, postal address and email address.

- Information provided when booking accommodation. Your title, your first name, your surname, your telephone number, your postal address, your email address, number of guests, children’s dates of birth, and bank details.

- Information provided when sendinga message via the form on the “Contact Us” page. Your first name, surname and email address (your telephone number is optional).

- Information provided when submitting the form on the “Join Us” page. Your status, title, your full name, your email address, your telephone number and your postal address.

b. Data you choose to provide to us

Some information is supplementary and optional:

- Supplementary information for your customer account. For example, your profile photo.

c. Data collected automatically when using the SAS Gîtes de France® OUEST website

This information may include:

- Geolocation data. A preciseor approximate location determined from your IP address or your mobile device’s GPS, depending on your device settings.

- Usage information. The pages or content you view, searches you carry out, bookings you have made and other actions performed on the SAS Gîtes de France® OUEST website. When users visit the SAS Gîtes de France® OUEST website, the web server automatically records data and information relating to the device and browser they are using. This information mayinclude the type and version of browser used, the operating system, the internet service provider, the device’s IP address, and the date and time of access to the website.

d. Personal data made available to third parties.

Your personal data may be transferred to third parties, including: the courts, administrative authorities and court officers, in accordance with a legal obligation.

In the context of subcontracting arrangements, service providers act on behalf of and in accordance with the instructions of Gîtes de France®, in compliance with the GDPR.

Article 2: Data controllers for personal data

2.1 Data controllers

SAS Gîtes de France® OUEST acts as the data controller and undertakes to disclose personal data only to entities within the Gîtes de France® OUEST networkicirc;tes de France® network with which you have a business relationship, as well as to its authorised service providers and data processors.

2.2 Obligations of data controllers

SAS Gîtes de France® OUEST undertakes not to disclose personal data to third parties (other than those mentioned in 2.1) without having informedthe data subjects and without offering them the opportunity to exercise their right to object.

In the event that the integrity, confidentiality or security of the user’s personal datais compromised, the data controller undertakes to inform the user by any means.

Article 3: Data retention period

Data is retained for a period appropriate to the purposes of the processing and in accordance with the legislation and regulations in force.

Customer data is retained for the duration of the contractual relationship and may be retainedfor ten years after the termination of the contractual relationship to comply with accounting and tax obligations.

Data relating to prospective customers who are natural persons may be retained for up tothree years after the last contact initiated by the prospective customer.

Article 4: General principles governing the collection and processing of data

In accordance with the provisions of Article 5 of the European Regulation 2016/679 (GDPR), the collection and processing of data relating to users of the website shall comply with the following principles:

1. Lawfulness, fairness and transparency: such datamay only be collected with the consent of the user who is the data subject. Whenever personal data is collected, the user will be informed that their data is being collected and the reasons for which it is being collected.
2. Limited purposes: the collection and processing of data are carried out to fulfil one or more specific purposes set out in this document;
3. Minimisation of data collection and processing: only data necessary for the proper fulfilment of the website’s objectives is collected.
4. Limited data retention period: data is retained for a limited period, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period.
5. Integrity and confidentiality of the data collected and processed: the data controllerundertakes to guarantee the integrity and confidentiality of the data collected.

Article 5: Legal bases for the processing of personal data

In order for data processing to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679 (GDPR), we process your personal data on the following legal bases:

- Legitimate interest: we may process your personal data as necessary to protect our legitimate business interests (provided that theor the rights of individuals do not take precedence), in particular to manage, develop and improve our products and services; to support our customers and our sales department; to ensure the protection of our staff and assets; to provide information about our products and services; and to ensure compliance with laws and regulations.

- Performance of a contract: we may process your personal data to enter into or perform contracts with you or your organisation, in particular to provide and manage our products and services and to enable our customers to use our products, services and support tools.

- Legal obligation: we may process your personal data to comply with applicable laws and regulations, or to establish or exercise our rights. For example, this includes in the event of complaints or for compliance, regulatory and investigative purposes.

- Consent: we may process your personal data where you have given us your consent. In particular, where we cannot rely on another legal basis or where we are required by law to obtain your consent in the context of certain sales and marketing activities, data collection tools or online surveys.

Article 6: Security of personal data collected

SAS Gîtes de France® OUEST implements appropriate security measures to protect the personal dataagainst any malicious intrusion, loss or disclosure to unauthorised third parties.

SAS Gîtes de France® OUEST also guarantees the security of information exchanged during payment transactions.

Finally, SAS Gîtes de France® OUEST raises awareness amongst its staff regarding the protection of personal data made available to them in the course of their duties.

Article 7: User rights

7.1 Various user rights

In accordance with the requirements of European Regulation 2016/679 (GDPR), the user has the rights listed above.

- Right of access: you may request access to your personal data processed by Gîtes de France, or request copies of such data;

- Right to rectification: you have the right to have your personal data rectified if it is inaccurate or incomplete;

- Right to erasure: you have the right to request the deletion of your, subject to any exceptions provided for by law. For example, we may be required to retain your personal data to comply with legal obligations.

- Right to restriction of processing: you may restrict the processing of your personal data in certain circumstances. For example, if you contest the accuracy of your personal data, you may ask us to restrict its processing untilwe have been able to verify its accuracy;

- Right to data portability: you have the right to request the portability of yourin certain circumstances. For example, you may ask us to transfer some of your personal data to another organisation if the processing is based on your consent or a contract;

- Right to object to data processing: you may object to the processing of your personal data in certain circumstances. For example, you may object to direct marketing, including theuse of your personal data for profiling purposes in connection with direct marketing, or where we process your personal data for our own legitimate interests.

These rights may, however, be restricted in certain situations, for example if SAS Gîtes de France® OUEST is able to demonstrate the existence of a legal obligation or a legitimate interest in the processing of your personal data.

- Right to lodge a complaint with the competent supervisory authority: if you believe that the processing of yourpersonal data infringes the GDPR, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or the supervisory authorityof the European Union Member State in which you reside.

7.2 GDPR Contact

To ensure the proper application of the legislation in force, SAS Gîtes de France® OUEST has appointed a GDPR Data Protection Officer.

If you wish to exercise your rights, please contact us by writing to the following address: contact@gitesdefrance-ouest.fr

In the event of any unresolved issue relating to the use of your personal data, you may lodge a complaint with the CNIL.

If you wish to delete your customer account, you must log in to your account and go to the “Security” section. From there, you can delete your customer account by clicking on “Delete account” and following the steps to confirm the deletion of your account. By deleting your account, please be aware that you will no longer be able to access thehistory of all bookings made with SAS Gîtes de France® OUEST.

Article 8: Amendments to the Privacy Policy

SAS Gîtes de France® OUEST may amend this privacy policy at any time, in particular due to:

- the introduction of new services or technologies

- changes to the legislative and regulatory framework

In the interests of transparency, SAS Gîtes de France® OUEST will publish the new version of the privacy policy on this page. We invite those concerned to consult this page as often as they wish to keep abreast of any changes.

Article 9: Management of Cookies

When you visit our website, information relating to your device’s browsing activity (computer, tablet, smartphone, etc.) on our website may be stored in ‘cookies’ installed on your device.

Cookies are mainly used to remember your choices and preferences, or to recognise you when you visit our website again.

Most browsers support cookies, but you can configure them to block and delete cookies at any time. To do this, please refer to the documentation and support for the browser you are using.

Please note that only the issuer of a cookie can read or modify the information contained within it.

What is a “cookie”?

A cookie is a small data file (text file) that a website, when visited by a user, asks your browser to store on your device in order to remember information about you, such as your language preferences or login details. We set these cookies, known as first-party cookies. We also use third-party cookies – which are cookies from a domain other than that of the website you are visiting – for our advertising and marketing activities. More specifically,, we use cookies and other tracking technologies for the following purposes:

Strictly necessary cookies

These cookies are necessary for the website to function and cannot êbe disabled in our systems. They are generally set in response to actions you have taken that constitute a request for services, such as setting your privacy preferences, logging in or filling in forms. You can configure your browser to block these cookies or to be notifiedabout the existence of these cookies, but certain parts of the website may be affected. These cookies do not store any personally identifiable information.

Strictly necessary cookies on the website and the booking centre:

www.gites-de-france-loire-atlantique.com - allow_cookies - whether or not to install optional cookies - session duration

Strictly necessary cookies on the booking centre and the owner’s area:

mon-espace.gites-de-france-loire-atlantique.com - access_token - API access token

Strictly necessary cookies on the old version of the customer area: 

mon-espace.gites-de-france-loire-atlantique.com - PHPSESSID - session ID to ensure the continuity of the user’s session

Performance cookies

Performance and tracking cookies help to improve the functioning of our website so that we can offer you the best possible browsing experience

- Performance cookies:

www.gites-de-france-loire-atlantique.com - _ga - First-party cookies - 365 days

Audience measurement cookies

Audience measurement cookies enable us to compile statistics on website visits.

- Audience measurement cookies:

www.gites-de-france-loire-atlantique.com - ga - First-party cookies - 400 days

Audience analytics solution: 

This website uses Matomo, free and open-source software that measures and analyses website traffic with a view to improving the site. Although the data is anonymised, if you do not wish for cookies to be installed on your browser, you can request that their installation be disabled by sending an email to info@gites-de-france-44.fr

9.2 Cookie retention period

Cookies stored on your device have a maximum lifespan of thirteen months. Once the retention period has expired, the personal data collected via cookies will be deleted.

9.3 Refusing cookies

If you refuse to allow the cookies we set to be stored on your device, or if you delete those we have already stored there, you will no longer be able to benefit froma number of features that are nevertheless necessary for navigating certain sections of our website. This would be the case if you attempted to access our content or services that require you to log in. This would also be the case if, for technical compatibility purposes, we were unable to recognise the type of browser used by your device, its language and display settings, or the country from which your device appears to be connected to the Internet.

Where applicable, we accept no liability for any consequences arising from the impaired functioningof our services resulting from our inability to store or access the cookies necessary for their operation, which you may have refused or deleted.

How can you exercise your choices, depending on the browser you use?

The settings for managing cookies and your preferences differ for each browser. These are described in your browser’s Help menu, which will explain how to change your cookie preferences.

- For Internet Explorer™: open the Tools menu, then select Internet Options; click on the Privacy tab and choose your preferred level

- For Firefox™: open the Tools menu, then select Options; click on the Privacy tab, then choose your preferred options

- For Chrome™: open the settings menu (cog icon), then select Settings; click on Advanced settings, then on Content settings, and select the options you require

- For Safari™: select Safari > Preferences, then click on Security; click on Show Cookies, then select the options you want

- For Opera™: open the Tools menu, then select Preferences; click on the Advanced tab, then under the Cookies section, click on Manage cookies; select your preferred options

Article 10. Management of email campaigns and tracking technologies (tracking pixels)

When sending our various email communications, we use tracking technologies (web beacons and tracking links) to manage our campaigns and analyse their performance. The type of tracking carried out depends entirely on the choices and consent you have given.

Several scenarios may apply:

10.1. Case of individualised tracking (subject to your prior consent)

If you have explicitly consented to this when you registered or via our preferences centre, we carry out personalised tracking of opens and clicks on our emails.

• Purposes: To analyse your areas of interest, assign you an engagement score, and to personalise the content of communications sent to you based on your reading behaviour.
• Data collected: Whether the email associated with your customer ID/email address, clicks on specific links, date and time (timestamp).
• Legal basis: Consent (Article 6(1)(a) of the GDPR). You may withdraw this at any time.

10.2. Technical and anonymised tracking (Exempt from the requirement to obtain your consent)

For certain types of communications, we have decided not to implement personalised tracking, but only anonymised tracking. This anonymised tracking enables us, without collecting personal information regarding your interactions with our communications, to:

• Purposes: To measure the overall reach of our campaigns (aggregated statistics) and to manage the deliverability of our mailings (detection of technical reception issues, management of incorrect or inactive email addresses).
• Data collected: Raw connection data (generated by the technical loading of the pixel) is immediately anonymised or aggregated. No account details are linked to your profile by name for marketing purposes.
• Legal basis: Legitimate Interest (Article 6(1)(f) of the GDPR) to ensure the security and proper functioning of communication networks. You do, however, have the right to object to this technical measure.

10.3. ‘No Tracking’ cases (No tracking at all)

For certain types of campaigns, we have decided not to use the tracking pixel. In other cases, if you object to &to any form of technical tracking, or if you use an email client that structurally blocks the loading of remote images (without any action on our part):

• How it works: No tracking pixels are embedded in your emails, and no data is recorded. Your opens and clicks are neither recordedon an individual basis, nor are they included in the anonymous statistics.
• Impact: You will continue to receive your emails and newsletters as normal if you are subscribed to them, but we will be technically unable to optimise the display or check whether our messages are reaching you correctly.

How can you manage or change your preferences?

You havefull control over these trackers. You can change your preferences at any time, withdraw your consent to personalised tracking or object to technical tracking for deliverability:

• By clicking on the link « Manage my privacy preferences » at the bottom of each of our emails.
• By making your choices via our various data collection forms or as part of our email campaigns.