Privacy Policy

Last update: March 15, 2025

Protecting your privacy is a priority for Château de Maraval. This privacy policy explains what information we collect, how we use it and what your rights are.

1. Data controller

The data controller is :

Château de Maraval
357 Route de Gourdon, 24250 Cénac-et-Saint-Julien
📩 E-mail: contact@chateaudemaraval.com

2. Collected data

We collect personal data when you use our website:

Data you provide directly

• Contact form: last name, first name, e-mail, telephone, message.
• Booking: booking and payment information (managed via our secure service provider Mews).
• Newsletter: e-mail address if you subscribe.

Automatically collected data

• Browsing data: IP address, browser type, visit duration, pages viewed.
• Cookies and similar technologies (see section 7).

3. Data processing purposes

We collect and process your personal data as part of the operation of the chateaudemaraval.com website for the following purposes:

3.1 Managing reservations and inquiries

• Process and confirm your accommodation bookings.
• Manage information requests and exchanges via the contact form.
• Follow-up on stays and services requested.

3.2. Improving the user experience and optimizing the site

• Analyze navigation and measure the site's audience in order to improve its ergonomics.
• Personalize content display according to your preferences and browsing history.

3.3 Communication and marketing

• Send you special offers, news and information about Château de Maraval if you have given your consent.
• Manage newsletter subscriptions and allow unsubscribing at any time.

3.4. Security and fraud prevention

• Protect the site against cyber-attacks and fraud attempts.
• Detect and prevent any abusive or fraudulent use of the services offered.

3.5. Legal compliance and regulatory obligations

• Comply with legal and regulatory data retention obligations (invoicing, accounting, etc.).
• Respond to official requests from the competent authorities in the event of a legal obligation.

4. Legal basis for processing

The processing of your personal data has several legal bases in accordance with the General Data Protection Regulation (GDPR) and applicable legislation:

4.1. Your consent (Article 6.1.a of the RGPD)

We collect and process some of your data only if you have given us your explicit consent. This concerns in particular:

• Subscription to our newsletter and the sending of commercial communications.
• The use of cookies not essential to navigation (statistics, marketing).
• Contact us via our online form.

You may withdraw your consent at any time by contacting us at [Contact email] or via the cookie settings accessible on our site.

4.2. Performance of a contract (Article 6.1.b of the RGPD)

The processing of your data is necessary for the performance of the services you request, in particular:

• Management of reservations and stays.
• Communication and follow-up on your request or order.
• Issue invoices and manage payments.

4.3. Compliance with a legal obligation (Article 6.1.c of the RGPD)

We must retain certain data in order to comply with our legal obligations, in particular with regard to :

• Invoicing and accounting (retention of financial data for the statutory period).
• Fraud protection and secure transactions.
• Responses to requests from administrative and judicial authorities when required.

4.4. Our legitimate interest (Article 6.1.f of the RGPD)

We may also process your data on the basis of our legitimate interest, subject to not infringing your fundamental rights and freedoms. This includes:

• Continuous improvement of our site and services by analyzing browsing data.
• Managing customer relations and interactions with our visitors.
• The implementation of security measures to protect our site and our users.

In all cases, we take care to respect the principles of proportionality and necessity, collecting only the data strictly necessary for the defined purposes.

5. Data retention period

We store your data :

• Booking data: 5 years after last interaction.
• Marketing data: 3 years after your last contact.
• Browsing data (cookies): 12 months maximum.

6. Data sharing

We do not sell or rent your data. However, we may share it with :

• Our technical service providers (web hosting, secure payment, marketing services).
• Competent authorities in case of legal obligation.

All our partners comply with current data protection standards.

7. Cookies and tracking

When you browse our chateaudemaraval.com website, cookies and other tracking technologies may be used to improve your experience, analyze traffic and personalize the content displayed.

7.1. What is a cookie?

A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It enables the site to recognize your device and record certain information about your browsing.

7.2. Types of cookies used

We use several types of cookies on our site:

✔ S trictly necessary cookies (mandatory)
These cookies are essential to the proper operation of the site and cannot be deactivated. They are used, for example, to ensure site security and to remember your essential preferences.

✔ Analytical and performance cookies
These cookies help us measure the site's audience and analyze how visitors interact with our content. We use, for example, Google Analytics to collect anonymized data on site traffic.

✔ Personalization cookies
These cookies store your preferences (language, display, navigation choices) to improve your user experience.

✔ Marketing and advertising cookies
These cookies are used to offer you targeted advertising based on your browsing and interests. They may be placed by third-party partners.

7.3. Cookie management

When you first visit our site, a cookie management banner allows you to accept, refuse or customize your preferences.

You can also manage or delete cookies via your browser settings:

• Google Chrome: Settings > Privacy and security > Cookies and other data
• Mozilla Firefox: Options > Privacy & Security > Cookies and site data
• Safari: Settings > Safari > Privacy & Security
• Microsoft Edge: Settings > Cookies and site permissions

7.4. Cookie retention period

Cookies are stored for a maximum of 12 months after they have been placed on your device. After this period, your consent will be requested again.

For more information about the use of cookies on our site, please contact us at contact@chateaudemaraval.com.

8. Data security

We implement advanced security measures to protect your data against unauthorized access, loss or alteration.

9. Your rights regarding your personal data

In accordance with the General Data Protection Regulation (RGPD) and the French Data Protection Act (Loi Informatique et Libertés), you have several rights concerning your personal data.

9.1. Right of access (Article 15 of the RGPD)

You have the right to request access to and a copy of the information we hold about you at any time.

9.2. Right of rectification (Article 16 of the RGPD)

If your data is inaccurate or incomplete, you can ask for it to be corrected or updated.

9.3. Right to erasure (Right to be forgotten - Article 17 of the RGPD)

You may request the deletion of your personal data in certain cases, in particular if it is no longer required for the purposes for which it was collected or if you withdraw your consent.

9.4. Right to object (Article 21 of the RGPD)

You have the right to object to the processing of your data for commercial prospecting purposes or for reasons relating to your particular situation.

9.5. Right to limit processing (Article 18 of the RGPD)

If you dispute the accuracy of the data or if its processing is unlawful, you may request that the processing be suspended pending verification or dispute.

9.6. Right to data portability (Article 20 of the RGPD)

You may request to receive your personal data in a structured, commonly used and machine-readable format, in order to transmit them to another data controller.

9.7. Right to withdraw consent (Article 7.3 of the RGPD)

If the processing of your data is based on your consent (e.g. newsletter subscription), you may withdraw it at any time, without calling into question the lawfulness of the processing carried out prior to the withdrawal.

9.8. Exercising your rights

📩 To exercise your rights, please contact us:

• By e-mail: [Contact email]
• By post to the following address: [Full address].

We undertake to respond to your request within one month of receipt. This period may be extended by two months in the case of complex requests or heavy traffic.

9.9. Right of appeal to the CNIL

If you feel that your rights have not been respected, you can lodge a complaint with the competent supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
📍 3 Place de Fontenoy, 75007 Paris, France
📞 Telephone: +33 (0)1 53 73 22 22
🌐 Website: www.cnil.fr

10. Modification of the privacy policy

We may update this policy to adapt it to legal and technical developments. The latest version is always available on our website.