Privacy Policy

Mademoiselle Conciergerie attaches the utmost importance to the protection of your personal data. This privacy statement sets out how we collect, use, share and protect your personal information in accordance with the applicable legal standards, in particular Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act of 6 January 1978 (loi Informatique et Libertés).

1. Data controller

The data controller is the company Mademoiselle Conciergerie, a SARL (French limited liability company) with a share capital of €5,000, whose registered office is at 58 rue de Monceau, 75008 Paris, France (RCS Paris 915 253 397), represented by Erwann DEVERDUN, Manager.

For any question about your data: contact@mademoiselleconciergerie.com or +33 (0)6 77 18 35 55. No data protection officer has been appointed.

2. Collection of information

We collect personal information when you use our services, complete forms on our website or interact with us. That information may include, among other things, your name, address, email address, telephone number and any other data necessary for the provision of our services. More specifically:

Contact form: the information you enter (your name, your email address, your telephone number, your dates, the number of guests and the villa you are interested in, your message, how you heard about us if you choose to answer this optional question and, if you are introducing your villa to us, its town, its capacity, the link you give us, whether you are its owner or its manager and the language you would like us to use). Your message is sent to us by email; it is not stored on the website’s server. To protect the form from automated submissions, your browser performs a brief verification calculation, without cookies or any third-party service.
Joining our team: the information you enter (your full name, your company if you have one, your email address, your telephone number, your area, the role or service that interests you, your employment status and your message) and, if you attach it, your CV or presentation as a PDF file. Your message and this document are sent to us by email; they are not stored on the website’s server. To protect the form from automated submissions, your browser performs the same brief verification calculation as for the contact form, without cookies or any third-party service.
Booking a stay: your identity and contact details, the dates, the number of guests and the amount of the stay. Payment is made on the secure page of our booking provider, Smily: your card details do not pass through our website.
Your stay: the information provided for in our terms and conditions (certificate of insurance, individual police registration form for guests of foreign nationality, security deposit registered through our payment provider Stripe, arrival and departure inventory videos and photographs showing the villa only, readings of the sound level meter, which measures the sound level only) and our exchanges during the stay.
Owners: your contact details and information about your villa, in order to consider your request and then perform the management mandate.
Browsing: without your consent, our pages set no cookies and load no Google tag. With your consent, purpose by purpose, Google measures visits to the website (pages viewed, length and source of visits, actions taken on the website), measures the effect of our Google ads (the ad click identifier) and, if you accept it, personalises our ads. None of these measurements includes your name, your email address, your telephone number or the text of your messages. Like any website, our server keeps technical logs (IP address, page requested, date and time, browser type).

3. Use of information

We use your personal information to provide you with our services, respond to your requests, personalise your experience and inform you of updates or special offers. We neither sell nor rent your information to third parties.

We only send you our offers by email if you have agreed to it or, if you have already stayed with us, for similar stays; you may object at any time, free of charge, by simple email.

Each processing operation has a legal basis and is kept only for as long as necessary:

Responding to your requests

Purpose: Replying to your messages (form, email, telephone) and preparing your stay or the review of your villa; if you tell us on the form, knowing how you heard about us (internal statistics).
Legal basis: Pre-contractual steps taken at your request; otherwise, our legitimate interest in replying to you and, for the optional question on the form, in knowing how people hear about us.
Retention: 3 years from our last exchange.

Booking and stay

Purpose: Managing the booking, payment, welcome, stay, security deposit, inventories of fixtures and compliance with the house rules.
Legal basis: Performance of the contract (our terms and conditions); legal obligations (individual police registration form, tourist tax, accounting); legitimate interest in the peace of the neighbourhood (sound level meter).
Retention: For the duration of the relationship, then 5 years (limitation period); accounting records: 10 years; individual police registration forms: 6 months; arrival and departure inventory videos and photographs: one year after the stay, or until any dispute is finally settled.

Owners

Purpose: Considering your request to join the collection, then performing the management mandate.
Legal basis: Pre-contractual steps, performance of the mandate, legal obligations of the estate agency.
Retention: Request not followed up: 3 years after the last exchange; mandate: its term, then 5 years; registers and accounting records: 10 years.

Applications to join the team and offers of services

Purpose: Considering your application to join the agency or your offer of services (cleaning, maintenance, gardening, pool care, photography…), then replying to you.
Legal basis: Pre-contractual steps taken at your request; our legitimate interest in keeping your file so that we can contact you again if a need arises, unless you object.
Retention: 2 years at most from our last exchange, then deletion; you may ask for your file to be erased at any time. If we work together, the information needed for what follows is kept for the periods that apply to that contract (employment or services).

Guest reviews and online calendar

Purpose: Displaying our guests’ reviews (Trustindex) and, on villa pages and the “Our villas” page, availability and prices (Smily).
Legal basis: Our legitimate interest in presenting authentic reviews from our guests (the module sends your IP address to Trustindex and to the platforms that host the profile pictures); pre-contractual steps taken at your request for the calendar and prices, which are only requested once you have chosen your dates.
Retention: We keep nothing: these requests go straight from your browser to our providers, which apply their own policies (see “Sharing of information”).

The next three fiches concern Google tools. They are chosen separately in the cookie banner, and personalised advertising requires the measurement of our ads.

Statistics (Google Analytics)

Purpose: Understanding how the website is used and which main actions are taken on it, in order to improve it.
Legal basis: Your consent (Article 6(1)(a) GDPR; Article 82 of the French Data Protection Act), which you may withdraw at any time (“Manage cookies”, at the bottom of every page).
Retention: Cookies: up to 13 months after your last visit; detailed visit data: 14 months at most; your choice (consent or refusal): 6 months.

Measuring our Google ads

Purpose: Finding out whether the ads we run on Google (Google Ads) lead to an enquiry or a booking, by linking the ad click to what you then do on the website.
Legal basis: Your consent (Article 6(1)(a) GDPR; Article 82 of the French Data Protection Act), which you may withdraw at any time (“Manage cookies”, at the bottom of every page).
Retention: Cookies: 90 days; data received by Google: as set out in Google’s policy; your choice (consent or refusal): 6 months.

Personalised advertising

Purpose: Showing you our ads again after your visit, on Google and on partner websites and apps (remarketing).
Legal basis: Your consent (Article 6(1)(a) GDPR; Article 82 of the French Data Protection Act), which you may withdraw at any time (“Manage cookies”, at the bottom of every page).
Retention: Cookies: 13 months at most; data received by Google: as set out in Google’s policy; your choice (consent or refusal): 6 months.

Website security

Purpose: Ensuring the operation and security of the website (server technical logs).
Legal basis: Legitimate interest.
Retention: 12 months at most.

4. Protection of information

The security of your personal information is our priority. We implement appropriate security measures to protect your data against any unauthorised access, loss, disclosure or alteration.

The website is served exclusively over an encrypted connection (HTTPS). Card details are entered on the secure pages of our payment providers and never pass through our website.

We may share your personal information with third-party service providers who assist us in providing our services. However, we require them to maintain the confidentiality of your information in accordance with our standards and with the applicable legislation. Depending on the case, the recipients are:

our team, for the information needed for its work only;
the owner of the villa you book, for the information needed for your stay;
Smily (BookingSync SAS, France), our booking software, which also provides the booking website and the online payment page. On villa pages, when you open the calendar and then choose your dates, and on the “Our villas” page, when you search by dates, your browser queries Smily’s servers (secure.smily.com) directly to display availability and prices: this request sends your IP address, the dates and the number of guests, without your name or any cookie. The payment page is Smily’s, which applies its own privacy policy;
Stripe, for registering the security deposit;
booking platforms (Airbnb, Booking.com, Vrbo…), when you book through them: they process your data under their own policy;
Trustindex (Trustindex Kft., Hungary): the guest reviews module loads when you approach the reviews section that contains it; it sets no cookies, but Trustindex receives your IP address, as do the platforms that host the reviewers’ profile pictures (notably Airbnb, Booking.com and Google);
Calaméo (Calaméo SAS, France): our magazine and brochure open on the calameo.com website, in a new tab, when you click the link; our pages load nothing from Calaméo. Once you are on calameo.com, Calaméo processes your data under its own policy;
Google (Google Ireland Limited, Ireland, which may call on Google LLC, United States), for statistics, measuring our Google ads and personalised advertising, each only if you have accepted it;
IONOS, the website’s hosting provider (servers in Germany), and our email provider, which receives the messages, with any attachments, sent through the website’s forms;
public authorities, where required by law.

The website’s maps (villa pages, the “Our villas” page, the Contact page), its fonts and the “Follow us” block showing our Instagram posts are served from our own server (maps using OpenStreetMap data that we host, Instagram images fetched by our server): displaying them sends no data to any third party, whether Google Fonts, Google Maps or Instagram. The contact form uses no third-party anti-bot service (no reCAPTCHA).

6. Transfers outside the European Union

Where a provider processes data outside the European Union, the transfer is subject to the safeguards provided for by the GDPR: an adequacy decision of the European Commission or standard contractual clauses. This is the case for Google LLC (United States), which is certified under the EU–US Data Privacy Framework and covered by an adequacy decision of the European Commission.

7. Your choices

You have the right to choose how we use your information. You may choose not to provide certain information, but this may affect your use of our services.

8. Access, updating and other rights

You have the right to access your personal information and to update it.

Under the conditions laid down by the GDPR, you also have the right to rectification, erasure, restriction of processing, objection and data portability, the right to withdraw your consent at any time where processing is based on it, and the right to give instructions regarding the fate of your data after your death.

To exercise these rights, write to us at contact@mademoiselleconciergerie.com or by post to our registered office: Mademoiselle Conciergerie, 58 rue de Monceau, 75008 Paris, France. We reply within one month, which may be extended by two months for a complex request; where there is reasonable doubt, we may ask you for proof of identity.

If you have any questions about your data, please contact us at the following email address: contact@mademoiselleconciergerie.com.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr).

If you do not wish to receive telephone marketing, you may register free of charge on the French telephone opt-out list Bloctel (www.bloctel.gouv.fr).

9. Cookies

Without your consent, our pages set no cookies. The three purposes that require your consent (statistics, measuring our Google ads, personalised advertising), which you choose separately, and the third-party services you may call upon, with any trackers they use, are described in our cookie policy.

10. Changes to the privacy policy

We reserve the right to amend this privacy policy at any time. Any changes will be published on our website. We encourage you to review this statement regularly in order to stay informed of our privacy practices.

If you have any questions, please do not hesitate to contact us.