Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains how personal data is collected and processed through the website https://gite-aerostier.fr/.

1. Data controller

The data controller responsible for the processing of personal data is:

Christophe Blanchard, sole trader (French legal status: entrepreneur individuel – EI)

Trading name: Gîtes de l’Aérostier Blanchard

Address: 2 impasse de la Giraudière, 45370 Jouy-le-Potier, France

SIREN number: 306 205 717

SIRET number: 306 205 717 00078

Telephone: +33 (0)6 80 68 29 98

Email address: christopheblanchard45@yahoo.fr

2. Personal data collected

The following personal data may be collected through the website.

Contact enquiries:

• First name and last name
• Email address
• Telephone number
• Content of the message
• Any information voluntarily provided by the user

Bookings:

• First name and last name
• Email address
• Telephone number
• Selected accommodation
• Arrival and departure dates
• Number and composition of guests
• Additional requirements or information
• Selected options
• Acceptance of the Terms and Conditions
• Booking and payment references

Payments:

Online payments are processed securely by Stripe. The Operator does not receive or retain the Customer’s full bank card number.

Stripe processes the payment information required to complete the transaction in accordance with its own contractual and privacy obligations.

Technical information:

When the website is accessed, certain technical data may be collected automatically, including:

• IP address
• Browser and device type
• Operating system
• Date and time of access
• Pages viewed
• Technical and security logs
• Cookie identifiers and consent preferences

3. Purposes and legal bases

Personal data is processed for the following purposes:

Responding to enquiries

Data submitted through the contact form is used to respond to requests for information and prepare for a possible booking.

Legal basis: taking steps at the user’s request before entering into a contract and, where applicable, the Operator’s legitimate interest in responding to enquiries.

Managing bookings and stays

Booking data is used to check availability, record and confirm bookings, organise arrivals and departures, communicate with Customers and provide the booked accommodation services.

Legal basis: performance of the booking and accommodation contract and taking pre-contractual steps requested by the Customer.

Processing payments

Payment and transaction information is used to collect the price of the stay, confirm the booking, issue refunds where applicable and prevent payment fraud.

Legal basis: performance of the contract, compliance with legal obligations and the legitimate interest in securing transactions.

Accounting and legal obligations

Certain booking, invoicing and transaction information is retained to comply with accounting, tax and other statutory obligations.

Legal basis: compliance with legal obligations applicable to the Operator.

Website operation and security

Technical information may be processed to ensure that the website operates correctly, identify technical problems, prevent fraud and abuse and protect the website and its users.

Legal basis: the Operator’s legitimate interest in maintaining the security and proper operation of the website.

Cookies and audience measurement

Non-essential cookies and similar technologies are only used on the basis of the user’s consent where such consent is required.

Legal basis: consent.

4. Required and optional information

Fields marked as mandatory in the contact or booking forms must be completed so that the request or booking can be processed.

If the required information is not provided, the Operator may be unable to respond to the enquiry, process payment or confirm the booking.

Information shown as optional may be omitted without preventing the form from being submitted, unless it subsequently becomes necessary for the proper organisation of the stay.

Users are advised not to include sensitive personal information in free-text fields unless it is strictly necessary for their request.

5. Recipients of personal data

Personal data may be accessed by Christophe Blanchard and by service providers whose involvement is necessary for operating the website and providing the requested services.

These recipients may include:

• The website hosting provider, including OVH
• Website and technical maintenance providers
• Booking management tools
• Email and communication providers
• Stripe for secure payment processing
• Accounting, legal or insurance professionals where necessary
• Public authorities where disclosure is required by law

Each recipient only receives the data required to perform its assigned function.

Personal data is not sold or rented to third parties.

6. Transfers outside the European Economic Area

Some technical or payment service providers may process personal data outside the European Economic Area.

Where such a transfer occurs, it must be governed by a European Commission adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, in accordance with applicable data protection law.

Further information about the safeguards used by a particular provider may be obtained from that provider’s privacy documentation or by contacting the Operator.

7. Data retention periods

Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal requirements.

Contact enquiries are normally retained for up to three years following the last contact, unless a booking is made or a longer period is necessary to establish, exercise or defend legal claims.

Booking and customer relationship data is retained for the duration required to perform the contract and subsequently for the applicable statutory limitation periods.

Invoices and accounting documents are retained for ten years in accordance with applicable accounting obligations.

The Operator does not retain full bank card details. Payment information is processed and retained by Stripe in accordance with its own legal and contractual obligations.

Technical logs and security data are retained for a period proportionate to the website’s operational and security requirements.

Cookie retention periods depend on the type of cookie and are specified, where applicable, in the cookie management tool.

8. Cookies

The website uses cookies and similar technologies.

Strictly necessary cookies are used to provide essential website features, manage bookings, maintain security and remember the user’s privacy preferences. These cookies do not require consent where they are strictly necessary for the service requested by the user.

Optional cookies, including certain audience measurement, advertising or third-party cookies, are only placed after obtaining the user’s consent where required by law.

Users can accept, refuse or configure optional cookies through the consent banner and change their choices at any time using the cookie management icon displayed on the website.

Users may also configure their browser to block or delete cookies. Blocking certain essential cookies may affect the operation of the website or booking system.

9. Data security

The Operator takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include limiting access to authorised persons, maintaining the website and its extensions, using secure connections and relying on specialised providers for payment processing.

However, no online transmission or storage system can guarantee absolute security.

10. Users’ rights

Subject to the conditions provided by applicable data protection law, individuals have the following rights:

• The right to access their personal data
• The right to rectify inaccurate or incomplete data
• The right to request the erasure of their data
• The right to restrict processing
• The right to object to certain processing activities
• The right to data portability where applicable
• The right to withdraw consent at any time where processing is based on consent
• The right to provide instructions concerning the use of their personal data after their death, where provided by French law

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights may be exercised by contacting:

Christophe Blanchard

Email: christopheblanchard45@yahoo.fr

Postal address: 2 impasse de la Giraudière, 45370 Jouy-le-Potier, France

The request should contain sufficient information to identify the person making it and the data concerned. Proof of identity may be requested where there is reasonable doubt concerning the requester’s identity.

11. Complaints to the supervisory authority

If an individual believes that their personal data has not been processed in accordance with applicable law, they may lodge a complaint with the French data protection authority:

Commission nationale de l’informatique et des libertés – CNIL

Website: https://www.cnil.fr/

The individual is encouraged to contact the Operator beforehand so that an amicable solution can be sought.

12. Third-party websites

The website may contain links to third-party websites or services.

The Operator is not responsible for the privacy practices, security or content of these third-party websites. Users are advised to consult the privacy policy of each external service they use.

13. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes to the website, the services provided, the tools used or applicable legal requirements.

The date of the most recent update is shown at the top of this page. Where a change materially affects the processing of personal data, users will be informed by an appropriate method.