Privacy policy.

Preamble

This privacy policy is intended to inform users of the website arpian-valmorel.com of how their personal data is collected and processed, in accordance with EU Regulation 2016/679 of April 27, 2016 (GDPR) and the French Data Protection Act of January 6, 1978 as amended.

1. Data controller

The data controller for personal data is:

• Guillaume Mermin, Non-professional furnished rental host
• SIRET: 830 062 832 00076
• 15 Rue du Général Cavaignac, 37000 Tours, France
• Email: contact@arpian-valmorel.com

As a non-professional furnished rental host, we are not required to appoint a Data Protection Officer (DPO). For any question regarding the protection of your data, contact Guillaume Mermin directly at the address above.

2. Minors

Our site and services are not specifically intended for minors under 15. In accordance with article 8 of the GDPR, the processing of personal data of a child under 15 is only lawful with the consent of the holder of parental authority.

If you are a parent or legal guardian and notice that your child has transmitted personal data to us without your consent, contact us at contact@arpian-valmorel.com — we will delete the data without delay.

3. Data collected

We collect the following personal data:

Via the contact form:

• First name and last name
• Email address
• Phone number (optional)
• Group composition and desired stay dates
• Message content

Via the booking form:

• Full identity of the main tenant
• Contact details (address, phone, email)
• Identity proof (passport or national ID card)
• Payment information (securely processed by our provider)

Via browsing on the site:

• IP address
• Browser type and operating system
• Pages viewed and visit duration
• Visit source (referring site)

4. Purposes of processing

Your personal data is processed for the following purposes:

• Contact request management: responding to your questions and inquiries.
• Booking management: processing and confirming your booking, managing the stay, payment, administrative registration, and billing.
• Compliance with legal obligations: keeping seasonal rental records and tax declarations.
• Site improvement: pseudonymized traffic measurement (IP anonymized) to improve user experience.
• Security: fraud prevention and protection against abusive use.

5. Legal basis for processing

The processing of your data is based on:

• The performance of a contract (booking and stay);
• Compliance with legal obligations (registration, taxation);
• Your consent (non-essential cookies, marketing communication);
• Our legitimate interest (site security, continuous improvement).

6. Retention period

Your data is kept for the following periods:

• Contact data (without booking): 3 years from the last contact.
• Booking data: 10 years from end of stay (accounting and tax obligations).
• Identity proofs: until the end of stay, then secure deletion.
• Browsing data: 13 months maximum.

7. Data recipients

Your data may be shared with:

• To Guillaume and Louise Mermin, chalet owners;
• To our on-site local concierge, for stay management;
• To our technical providers, strictly within the scope of their missions and in accordance with Data Processing Agreements (DPAs):
  • Vercel Inc. — website hosting
  • Lodgify SL (Spain) — channel manager and booking platform
  • Stripe Payments Europe Ltd. (Ireland) — payment services provider
• To competent authorities, only upon legal requisition;
• Meta Platforms Ireland Ltd. (Ireland) and Meta Platforms, Inc. (United States) — advertising audience measurement (Meta pixel), only with your marketing consent;
• Google Ireland Ltd. (Ireland) and Google LLC (United States) — audience measurement (Google Analytics), only with your analytics consent.

No data is sold to third parties for commercial purposes.

8. Transfers outside the EU

Our hosting provider, Vercel Inc., is based in the United States. In addition, when you consent to it, our audience measurement and advertising tools involve providers based in the United States: Google LLC (Google Analytics) and Meta Platforms, Inc. (Facebook pixel). These transfers are subject to appropriate safeguards under the GDPR, in particular the European Commission's standard contractual clauses and the protection measures implemented by these providers. Transfers related to audience measurement and advertising only take place after your consent has been obtained. For more details, please refer to these providers' privacy policies.

9. Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of data concerning you.
• Right of rectification: correct inaccurate data.
• Right to erasure: request deletion of your data (subject to legal obligations).
• Right to restriction: temporarily restrict processing.
• Right to object: object to processing for legitimate reasons.
• Right to portability: retrieve your data in a structured format.
• Right to withdraw consent at any time, when processing is based on it.

To exercise these rights, contact us by email at contact@arpian-valmorel.com. We will respond within one month.

You also have the right to lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.

10. Cookies and trackers

Our site uses cookies to ensure proper functioning and improve your experience. On your first visit, a banner allows you to accept or refuse non-essential cookies.

Four categories of cookies are used:

• Essential cookies (always active): required for site functioning (security, navigation preferences).
• Analytics cookies (with consent): help us understand how the site is used to improve it.
• Booking cookies (with consent): set by our partner Lodgify for the availability search widget.
• Marketing & advertising cookies (with consent): set by our advertising partners (Meta, Google) to measure the performance of our campaigns and show you relevant ads. None of these cookies are set without your consent.

Detailed list of cookies used

You can change your preferences at any time via the "Manage cookies" link at the bottom of the page, or disable cookies in your browser settings.

11. Data security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure:

• Secure connections via HTTPS/TLS
• Encrypted storage of sensitive data
• Restricted access to data, authorized persons only
• Regular backups

12. Data breach

In accordance with articles 33 and 34 of the GDPR, in case of personal data breach likely to result in a risk to your rights and freedoms, we commit to:

• Notify the CNIL within 72 hours of becoming aware.
• Inform you as soon as possible if the breach is likely to result in a high risk to your rights, specifying the nature of the breach, the data concerned, the possible consequences, and the measures taken to remedy it.

13. Changes to this policy

This privacy policy may be updated to reflect legal, technical, or organizational changes. We invite you to consult it regularly. The last update date is shown below.

14. Contact

For any question regarding this privacy policy or the processing of your data:

• Email: contact@arpian-valmorel.com
• Phone: +33 6 63 64 56 53
• Address: 15 Rue du Général Cavaignac, 37000 Tours, France

Last updated: April 2026.