Privacy policy

Reference document: in case of discrepancy, the French version of this policy prevails. French law applies.

Data collected

Maison La Vesée only collects the data necessary to process your enquiry or booking: name, email, phone, subject and message. No banking data is retained by us; payments are handled by our booking partner in accordance with PCI-DSS 3DS2 standards.

Purposes

Data is used solely to respond to your enquiry, manage your booking, send you practical information about your stay and — only if you give explicit consent — to occasionally inform you about upcoming themed-stay dates.

Retention

Booking-related data is kept for the duration required by legal and accounting obligations (invoices, tourism registers). Contact-enquiry data not followed by a booking is deleted within twelve months.

GDPR rights

Under the European General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, port and object to the processing of your personal data. To exercise these rights, please write to maison@lavesee.com. The relevant supervisory authority is the CNIL — the French data protection authority.

Audience measurement

This site uses Umami, an audience-measurement tool self-hosted by Groupe La Vesée on its own servers in the European Union. It sets no cookies and only collects anonymous, aggregated statistics (pages viewed, traffic source, device type), without identifying visitors. To measure returning visits accurately, a random, strictly statistical identifier is kept in your browser's local storage for a maximum of 13 months; it is specific to this site, is never cross-referenced with other data and cannot identify you. You can opt out at any time from the statistics opt-out page. No data is shared with third parties. This setup is designed to meet the French CNIL's consent-exemption criteria: no cookie banner is required.

Cookies

The maisonlavesee.fr site sets no tracking cookies. The Google Map on the contact page only loads after you click: no data is sent to Google without your action. Should a service requiring consent be integrated in the future, a GDPR-compliant consent banner (with « Reject all » offered at the same level as « Accept all ») will be put in place.

DPO contact

For any data protection question: maison@lavesee.com.