1. Data controller
The controller of the personal data processed through this website is:
| Controller | Christophe Durieux |
|---|---|
| Address | 8 rue Médéric, 75017 Paris, France |
| mylovillaios@gmail.com | |
| Phone | +33 6 60 97 50 80 |
| Data protection officer | None has been appointed: an appointment is not required given the nature and volume of the processing carried out through this website. Requests are handled directly by the controller above. |
For any question about your data, write to mylovillaios@gmail.com with “Personal data” in the subject line.
2. Our principles
This is a showcase website. We do not build a marketing database, we never sell or rent any data, and we do no profiling or targeted advertising.
- Minimisation — we only ask for what is needed to answer a booking enquiry.
- Transparency — every piece of data collected is described below, with its purpose and retention period.
- No resale — your data is never sold, rented or exchanged for commercial purposes.
- No advertising trackers — see the cookies section.
3. Data collected
a. Data you give us
Through the booking enquiry form:
| Data | Status |
|---|---|
| Requested arrival and departure dates | Required |
| Rental option chosen | Required |
| First and last name | Required |
| Email address | Required |
| Phone number | Optional |
| Country of residence | Optional |
| Free message (“your stay”) | Optional |
| Acceptance of this policy (tick box, time-stamped) | Required |
Required fields are marked with an asterisk; without them the enquiry cannot be handled. As the free-text field is yours to fill, please do not include any sensitive data within the meaning of Article 9 GDPR (health, religious or political beliefs, sexual orientation, trade-union membership). Should such information be needed to organise your stay — an allergy, a mobility constraint — it would be processed solely on the basis of your explicit consent and deleted as soon as it is no longer useful.
b. Data collected if you email or call us
The content of your emails, your contact details and the history of our exchanges.
c. Technical data
As on any website, the host records in its connection logs the IP address, date and time of the request, the pages viewed, the browser type and the operating system. These logs are used solely for security and technical diagnosis.
We collect no payment data through this website: no payment is made on it.
4. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) | Data |
|---|---|---|
| Answering a booking enquiry, checking availability and preparing a proposal | Pre-contractual steps taken at your request (Art. 6(1)(b)) | All form data |
| Corresponding with you before, during and after a stay | Performance of the contract (Art. 6(1)(b)) | Identity and contact details |
| Meeting our accounting, tax and reporting obligations | Legal obligation (Art. 6(1)(c)) | Identity, contact details, stay details |
| Keeping the website secure and preventing abuse | Legitimate interest (Art. 6(1)(f)) | Connection logs |
| Establishing or defending legal claims | Legitimate interest (Art. 6(1)(f)) | Data relevant to the dispute |
The tick box on the form
The box at the bottom of the form confirms that you have read this policy. It is not the legal basis of the processing, which rests on pre-contractual steps taken at your request (Art. 6(1)(b)). Ticking it does not waive any of your rights, and you can ask at any time for your enquiry to be erased as described in section 8. It is kept, with its date, as proof that you were informed.
No data is used for marketing without your prior consent. No decision producing legal effects is taken on the basis of automated processing.
5. Recipients and processors
Your data is processed by the controller named in section 1 and by the only person authorised to assist in managing stays: Octave Durieux, based in France. No other internal recipient has access to it.
It may be passed to the following technical providers, acting as processors under an agreement compliant with Article 28 GDPR:
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, connection logs | United States — global network |
| FormSubmit | Forwarding the form to our mailbox | United States |
| Google (Gmail) | European Union / United States |
Your data may also be disclosed to administrative or judicial authorities where required by law, and to our advisers (accountant, lawyer) in the course of their work.
Transfers outside the European Union
Website hosting, form forwarding and email rely on providers based in the United States. Sending an enquiry through this website therefore involves a transfer of data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses and, for providers who have joined it, by the EU–US Data Privacy Framework. If you prefer to avoid any transfer outside the EU, you can reach us by phone on +33 6 60 97 50 80.
6. Retention periods
| Data | Period |
|---|---|
| Enquiry not followed by a booking | 12 months from the last exchange |
| Enquiry followed by a stay | Duration of the relationship, then 3 years from the last contact |
| Accounting records and supporting documents | 10 years (Article L. 123-22 of the French Commercial Code) |
| Connection logs | 12 months maximum |
| Data relating to a dispute | Until all appeals are exhausted |
At the end of these periods, data is deleted or irreversibly anonymised.
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, alteration and unauthorised access: HTTPS encryption, access to messages limited to authorised persons, accounts protected by strong passwords and two-factor authentication, regular backups.
As no system is infallible, in the event of a data breach likely to result in a high risk to your rights and freedoms, we undertake to inform you as soon as possible and to notify the supervisory authority within 72 hours, in accordance with Articles 33 and 34 GDPR.
8. Your rights
Under the GDPR and the amended French Data Protection Act of 6 January 1978, you have the following rights:
- Access — confirmation that your data is processed, and a copy of it.
- Rectification — correction of inaccurate or incomplete data.
- Erasure — deletion of your data, subject to our legal retention obligations.
- Restriction — temporary freezing of processing, for instance while a dispute is checked.
- Objection — objecting, on grounds relating to your particular situation, to processing based on our legitimate interest.
- Portability — receiving the data you gave us in a structured, machine-readable format.
- Withdrawal of consent — at any time, where processing is based on consent, without affecting the lawfulness of past processing.
- Post-mortem instructions — deciding what happens to your data after your death.
How to exercise them
Send your request to mylovillaios@gmail.com, stating what it concerns. We may ask for proof of identity if there is reasonable doubt about who is making the request. You will receive an answer within one month, extendable by two months for complex requests — in which case we will tell you.
Complaints
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr. If you live in another EU Member State, you may contact your national supervisory authority; in Greece, the Hellenic Data Protection Authority (HDPA).
9. Cookies and trackers
A cookie is a small file placed on your device when you visit a website. It can be used to make the site work, to remember preferences or to measure audience.
Cookies used on this website
In its current version, this website sets no audience-measurement cookie and no advertising tracker. It uses no third-party social network, no ad network and no retargeting tool, so no consent banner is needed.
The website's fonts and icons are hosted on this domain: displaying the pages involves no third-party server, and your IP address is not passed to any outside content provider.
Audience-measurement tools currently in use: none.
Browser settings
You can set your browser at any time to accept or refuse cookies, be warned when they are set, or delete them: Settings > Safari > Privacy on iPhone and iPad, Settings > Privacy and security in Chrome, Firefox and Edge. Blocking some cookies may affect how some websites work.
10. Minors
This website is not aimed at minors and does not knowingly collect their data. A booking enquiry must be made by an adult with full legal capacity. If you believe a minor has sent us data, write to us and it will be deleted without delay.
11. Changes to this policy
This policy may be amended to reflect changes to the website, our tools or the law. The version in force is the one published on this page. If a substantial change affects your rights, we will inform you by appropriate means. The date of the last update appears at the top of the page.