Privacy policy
La Neyrette attaches great importance to the protection of your privacy and your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
- Controller
- La Neyrette (SARL)
- Address
- 23 route des Gillardes, Saint-Disdier, 05250 Le Dévoluy
- info@la-neyrette.com
- Phone
- +33 (0)4 92 58 81 17
2. What data we collect and why
| You are… | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Using the contact form | Name, email, phone, message | Answering your enquiry | Legitimate interest or your consent |
| Booking a room Réservit engine |
Identity, contact details, dates and stay details, payment | Managing your booking and your stay | Performance of the contract |
| Booking a spa treatment Booksy or Planity |
You are redirected to the provider's platform, which processes your data under its own policy | Appointment booking | Provider's responsibility |
| Browsing the site | Connection data, audience measurement cookies | Traffic statistics | Your consent, see cookies |
We collect only the data that is strictly necessary and do not use it for any purpose other than those stated. No data is sold to third parties.
3. Recipients and processors
Your data may be processed by our technical providers acting on our behalf:
- Website hosting: OVH SAS (France)
- Booking engine: Réservit
- Audience measurement: Google Analytics
- Mapping:OpenStreetMap, no advertising cookie
- Social networks: Facebook et Instagram
4. Transfers outside the European Union
The site is hosted in France (OVH). However, some third-party tools, notably Google Analytics, Facebook and Instagram, may transfer data to countries outside the European Union. These transfers are governed by appropriate safeguards, the European Commission's standard contractual clauses, ensuring an adequate level of protection.
Section to be removed if Google Analytics is ultimately not used.
5. Retention periods
- Contact form enquiries:3 years from the last contact.
- Booking data:the duration of the stay, then accounting records and invoices kept for 10 years, a legal obligation.
- Audience measurement cookies:13 months maximum; audience data kept for 14 months.
6. Your rights
At any time you have the following rights over your data: access, rectification, erasure, objection, restriction and portability, as well as the right to give instructions about what happens to your data after your death.
To exercise them, contact us at info@la-neyrette.com. You will receive a reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL, www.cnil.fr.
7. Cookies
On your first visit, a consent banner lets you accept or refuse non-essential cookies. You can change your choice at any time using the "Cookies" button at the bottom of the screen, or by opening your preferences here.
- Strictly necessary cookies, site operation: set without consent.
- Audience measurement cookies, Google Analytics: set only after your consent.
- Third-party content and social networks, Facebook and Instagram: embedded content may set cookies, only after consent.
Cookies subject to consent have a maximum lifetime of 13 months.
8. Security
The site is served over HTTPS, an encrypted connection. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.
9. Contact
For any question about this policy or your personal data: La Neyrette, 23 route des Gillardes, Saint-Disdier, 05250 Le Dévoluy, info@la-neyrette.com, +33 (0)4 92 58 81 17.