Privacy policy

1. Purpose

This policy explains how personal data is collected and used on locationmaison-saintmandrier.fr, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data controller

• SARL SIGNAVIA, French single-member limited liability company (EURL)
• 7 B rue Léon Grenier, 91150 Étampes, France
• SIREN 509 037 644

3. Data collected

Through the long-term rental enquiry form:

• full name, email address, phone number;
• preferred move-in date and number of occupants;
• the content of your message, the form language, and the date and time it was sent.

While you browse, if you accept audience measurement: pages viewed, length of visit, where the visit came from (search engine, link, direct access), device and browser type, approximate location (city, country) and the cookie’s technical identifier.

To prevent abuse of the form, a fingerprint of your IP address (not the address itself) is kept for one hour. The hosting provider also keeps technical connection logs.

4. Purposes and legal bases

• Replying to your rental enquiry and sending you the terms: steps taken at your request prior to entering into a contract.
• Measuring the website’s audience and improving its content (Google Analytics): your consent, which you can withdraw at any time.
• Website security and prevention of abusive submissions: the publisher’s legitimate interest.
• Handling requests to exercise your rights: legal obligation.

5. Required fields

Required fields are needed to consider your enquiry; without them it cannot be handled.

6. Recipients

Your data is intended for the publisher. The following may access it, within the limits of their tasks:

• the website’s hosting provider (Hostinger) and the email provider that receives the enquiries;
• Google Ireland Limited, for audience measurement (Google Analytics), if you have accepted it;
• the provider of the cookie consent management tool;
• service providers responsible for maintaining or securing the website.

Your data is never sold or transferred. Holiday bookings are made on Airbnb, which processes your data under its own privacy policy.

7. Retention periods

• Enquiry not followed by a rental: no more than 1 year after the last exchange.
• Enquiry followed by a rental: for the duration of the tenancy, then for the statutory limitation periods.
• Audience measurement data: no more than 14 months in Google Analytics.
• Audience measurement cookies: no more than 13 months.
• Your cookie choice: 6 months, after which you are asked again.
• IP address fingerprint used to limit submissions: 1 hour.
• Requests to exercise your rights: for the time needed to handle them, then proof is kept for the statutory periods.

8. Cookies and audience measurement

The website uses Google Analytics to understand its traffic (pages viewed, where visits come from, devices used). These cookies are only set after you agree, through the banner shown on your first visit.

You can accept, refuse or customise your choice, then change it at any time with the “Cookie settings” link at the bottom of every page. Refusing has no effect on your use of the website.

The website uses no advertising or social media cookies.

9. Transfers outside the European Union

The website and the form data are hosted in the European Union.

Audience measurement data may be transferred to the United States by Google. These transfers are covered by the EU–US Data Privacy Framework, under which Google LLC is certified, and by the European Commission’s standard contractual clauses.

10. Security

The website is served over HTTPS. The form is protected against automated submissions, and access to enquiries is restricted to those who need it.

11. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to the publisher by post at the registered office address given in section 2, enclosing proof of identity.

12. Complaints

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL.

13. Automated decisions

No automated decision producing legal effects is made on the basis of your data.

14. Changes

This policy may change. The version online when you consult it applies.