damilub-vacances takes the confidentiality of your personal data very seriously. This policy describes what information we collect, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is damilub-vacances, reachable by email at damien.reyre@gmail.com or by phone at +33 7 67 65 33 24.
2. Data collected
When using the site and making a booking, we may collect:
- Identity data: name, surname, title
- Contact data: email, phone number, postal address
- Booking data: stay dates, chosen apartment, number of guests
- Payment data: processed exclusively by Stripe, never stored on our servers
- Technical data: IP address, browser type, pages visited (anonymized statistics)
3. Purposes
- Managing your booking and associated communications
- Issuing invoices and processing payment via Stripe
- Sending practical arrival information (door code, wifi, instructions)
- Improving our service (anonymized site traffic analysis)
- Meeting legal obligations (invoice retention, taxation)
4. Third parties
Your data is never shared for commercial purposes. It may be transmitted only to:
- Stripe (payment processing)
- Our transactional email provider (Brevo)
- Competent authorities under a legal obligation
5. Retention period
Booking data is retained for the duration necessary to perform the contract, plus legal retention periods (10 years for invoices, per French Commercial Code). Beyond this, data is anonymized for statistical purposes.
6. Cookies
Our site uses two categories of cookies:
- Essential cookies — required for the site to function (session management, language preferences). Set without prior consent, in accordance with the CNIL exemption for strictly necessary cookies.
- Analytics cookies — anonymized audience measurement (page views, traffic origin). Set only with your explicit consent. No personal data is collected or shared with third parties for advertising purposes.
Your consent is collected via the banner displayed on your first visit. It is valid for 180 days
and stored in a first-party cookie (damilub_consent). You can update your preferences
or withdraw consent at any time by clicking the "Manage cookies" button at the
bottom of any page.
You may also disable cookies directly in your browser settings, which may affect some site functionality.
7. Your rights
Under GDPR, you have the following rights at any time:
- Right of access and rectification
- Right to erasure ("right to be forgotten")
- Right to restriction and objection to processing
- Right to data portability
- Right to lodge a complaint with the CNIL
To exercise these rights, contact us at damien.reyre@gmail.com.
8. Security
Your data is stored on secure servers (Hetzner, Germany), with encryption in transit (HTTPS / TLS 1.3) and at rest. Access is protected by strong authentication.