Privacy policy.

Preamble

This privacy policy is intended to inform users of the website arpian-valmorel.com of how their personal data is collected and processed, in accordance with EU Regulation 2016/679 of April 27, 2016 (GDPR) and the French Data Protection Act of January 6, 1978 as amended.

1. Data controller

The data controller for personal data is:

• Guillaume Mermin, Non-professional furnished rental host
• SIRET: 830 062 832 00076
• 15 Rue du Général Cavaignac, 37000 Tours, France
• Email: contact@arpian-valmorel.com

As a non-professional furnished rental host, we are not required to appoint a Data Protection Officer (DPO). For any question regarding the protection of your data, contact Guillaume Mermin directly at the address above.

2. Minors

Our site and services are not specifically intended for minors under 15. In accordance with article 8 of the GDPR, the processing of personal data of a child under 15 is only lawful with the consent of the holder of parental authority.

If you are a parent or legal guardian and notice that your child has transmitted personal data to us without your consent, contact us at contact@arpian-valmorel.com — we will delete the data without delay.

3. Data collected

We collect the following personal data:

Via le formulaire de contact :

• First name and last name
• Adresse email
• Phone number (optional)
• Group composition and desired stay dates
• Contenu du message

Via the booking form:

• Full identity of the main tenant
• Contact details (address, phone, email)
• Identity proof (passport or national ID card)
• Payment information (securely processed by our provider)

Via la navigation sur le site :

• Adresse IP
• Browser type and operating system
• Pages viewed and visit duration
• Visit source (referring site)

4. Purposes of processing

Your personal data is processed for the following purposes:

• Contact request management: responding to your questions and inquiries.
• Booking management: processing and confirming your booking, managing the stay, payment, administrative registration, and billing.
• Compliance with legal obligations: keeping seasonal rental records and tax declarations.
• Site improvement: anonymized traffic measurement to improve user experience.
• Security: fraud prevention and protection against abusive use.

5. Legal basis for processing

The processing of your data is based on:

• The performance of a contract (booking and stay);
• Compliance with legal obligations (registration, taxation);
• Votre consentement (cookies non essentiels, communication marketing) ;
• Our legitimate interest (site security, continuous improvement).

6. Retention period

Your data is kept for the following periods:

• Contact data (without booking): 3 years from the last contact.
• Booking data: 10 years from end of stay (accounting and tax obligations).
• Identity proofs: until the end of stay, then secure deletion.
• Browsing data: 13 months maximum.

7. Data recipients

Your data may be shared with:

• To Guillaume and Louise Mermin, chalet owners;
• To our on-site local concierge, for stay management;
• To our technical providers, strictly within the scope of their missions and in accordance with Data Processing Agreements (DPAs):
  • Vercel Inc. — website hosting
  • Lodgify SL (Spain) — channel manager and booking platform
  • Stripe Payments Europe Ltd. (Irlande) — prestataire de services de paiement
• To competent authorities, only upon legal requisition.

No data is sold to third parties for commercial purposes.

8. Transfers outside the EU

Our hosting provider (Vercel Inc.) is based in the United States. Data transfers to the United States are governed by the standard contractual clauses approved by the European Commission, ensuring an adequate level of protection.

9. Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of data concerning you.
• Right of rectification: correct inaccurate data.
• Right to erasure: request deletion of your data (subject to legal obligations).
• Right to restriction: temporarily restrict processing.
• Right to object: object to processing for legitimate reasons.
• Right to portability: retrieve your data in a structured format.
• Right to withdraw consent at any time, when processing is based on it.

To exercise these rights, contact us by email at contact@arpian-valmorel.com. We will respond within one month.

You also have the right to lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.

10. Cookies and trackers

Our site uses cookies to ensure proper functioning and improve your experience. On your first visit, a banner allows you to accept or refuse non-essential cookies.

Three categories of cookies are used:

• Essential cookies (always active): required for site functioning (security, navigation preferences).
• Analytics cookies (with consent): help us understand how the site is used to improve it.
• Booking cookies (with consent): set by our partner Lodgify for the availability search widget.

Detailed list of cookies used

You can change your preferences at any time via the "Manage cookies" link at the bottom of the page, or disable cookies in your browser settings.

11. Data security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure:

• Secure connections via HTTPS/TLS
• Encrypted storage of sensitive data
• Restricted access to data, authorized persons only
• Regular backups

12. Data breach

In accordance with articles 33 and 34 of the GDPR, in case of personal data breach likely to result in a risk to your rights and freedoms, we commit to:

• Notify the CNIL within 72 hours of becoming aware.
• Inform you as soon as possible if the breach is likely to result in a high risk to your rights, specifying the nature of the breach, the data concerned, the possible consequences, and the measures taken to remedy it.

13. Changes to this policy

This privacy policy may be updated to reflect legal, technical, or organizational changes. We invite you to consult it regularly. The last update date is shown below.

14. Contact

For any question regarding this privacy policy or the processing of your data:

• Email: contact@arpian-valmorel.com
• Phone: +33 6 63 64 56 53
• Address: 15 Rue du Général Cavaignac, 37000 Tours, France

Last updated: April 2026.