DATA USE POLICY (Privacy Policy – GDPR)

Last updated: December 30th, 2025

1. Data Controller

Personal data collected in connection with bookings are processed by: Nicolas and Laurène LAGREZE Owners of the property located at 811 route Nationale, 74120 Megève, France (the “Data Controller”).

2. Data collected

The following personal data may be collected in connection with bookings and stays:

• identity details (first and last name),
• contact details (email address, phone number),
• booking information (stay dates, number of guests, pets),
• payment-related information (excluding sensitive banking data),
• communications related to the booking,
• data required to comply with legal obligations (e.g. local tourist tax).

No sensitive personal data within the meaning of the GDPR are collected.

3. Purpose of processing

Personal data are collected solely for the following purposes: management of bookings and stays, communication before, during and after the stay, payment management, security deposits and dispute handling, compliance with legal and regulatory obligations, fraud and abuse prevention. Data are never used for marketing or advertising purposes.

4. Legal basis

Processing is based on: performance of the rental contract, compliance with legal obligations, the legitimate interest of the Data Controller (booking management and security).

5. Data recipients

Personal data are accessible only to: the Owner, technical service providers required for booking and payment processing. Personal data are not sold, rented or transferred to third parties.

6. Data hosting and security

Data are hosted by GDPR-compliant service providers implementing appropriate security measures. Reasonable technical and organizational measures are taken to protect data against unauthorized access, loss or disclosure.

7. Data retention

Personal data are retained: for the duration necessary to manage the booking and stay, then archived in accordance with applicable legal retention periods, and deleted or anonymized thereafter.

8. Data subject rights

In accordance with the GDPR, individuals have the following rights: right of access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability. Requests may be submitted to the Owner by email.

9. Complaints

In the event of a dispute regarding personal data processing, individuals may lodge a complaint with the competent supervisory authority, in particular the CNIL (France).

10. Policy updates

This policy may be updated at any time. The version applicable is the one published on the website at the time of booking.