Privacy policy

Data controller: Al'Fermette
Address: Al'Fermette, 10 Rue de Westrove 62910 Éperlecques
Email: alfermette@gmail.com

For any questions about data protection, you can contact us at the above address.

Depending on the features used, the website collects:

• Contact form: name, email, phone (optional), message, subject.
• Booking: name, email, phone, stay dates, accommodation type, number of people, billing information.
• Payment: payment data via Stripe (encrypted data, card number not stored with us).
• User account: login credentials, first name, last name, email, booking history.
• Technical data: IP address, access logs, browser type, pages visited.
• Cookies: session cookies, language preference cookies, analytics cookies.

Your data is processed for the following purposes:

• Contract performance : traitement de votre réservation, facturation, envoi de confirmations.
• Legitimate interest : amélioration du service, prévention de la fraude, sécurité du site.
• Consent : envoi de communications marketing (sur opt-in).
• Legal obligation : conservation des données de facturation à titre d'archivage..

Personal data is retained for the duration necessary to perform the contract and beyond in accordance with legal obligations:

• Booking data: 3 years after the end of stay
• Billing data: 6 years according to tax law
• User account data: until deletion request
• Technical logs: maximum 30 days

Your data may be shared with:

• Stripe: payment provider (payment data only, in compliance with PCI-DSS)
• Web host: for hosting and technical maintenance
• Communication services: for email sending (PhpMailer)
• Competent authorities: if required by law

In accordance with the Data Protection Act and GDPR, you have the following rights:

• Right of access : access your personal data
• Right to rectification : correct inaccurate data
• Right to erasure : request deletion of your data
• Right to restrict processing : limit processing of your data
• Right to data portability : receive your data in a standard format
• Right to object : object to processing of your data

To exercise these rights, contact us at: alfermette@gmail.com

Al'Fermette implements appropriate security measures to protect your data against unauthorized access, modification or deletion. Payments are processed securely via Stripe, PCI-DSS certified.

This website uses cookies to improve your experience. Cookies are small files stored in your browser. You can modify your cookie settings in your browser preferences.

Types of cookies used:

• Essential cookies : necessary for website operation
• Preference cookies : remember your preferences (language, etc.)
• Analytics cookies : allow us to analyze website usage

Al'Fermette reserves the right to modify this privacy policy. Changes will be updated on this page with the date of last update.

• Respond to requests (contact): legitimate interest and/or consent.
• Manage bookings: performance of pre-contractual and/or contractual measures.
• Manage an account (if applicable): performance of the contract.
• Security and fraud prevention: legitimate interest.

The exact legal bases may vary depending on your situation: this text must be adapted.