Privacy Policy

01 · Who are we?

SASU JAK MOOH, operator of the demeuredesdix.fr website, is the data controller for the personal data collected on this site. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

DPO Contact: bonjour@demeuredesdix.fr

02 · What data do we collect?

We only collect the data we need:

• Contact data: name, first name, email address, telephone number (when you contact us)
• Booking data: stay dates, number of guests
• Browsing data: IP address and browser type processed for hosting; with your consent, public pages and language, a general source category and booking clicks. Our internal measurement storage does not retain your IP address. Google Tag Manager receives technical browser data, including your IP address. On some public pages without URL parameters, Google Analytics 4 receives information about public pages and some interactions, as well as a browser identifier associated with measurement cookies.

03 · Why do we collect this data?

Your data is processed for the following purposes:

• Respond to your enquiries
• Manage your bookings and stay
• Ensure the proper functioning of the site
• Comply with our legal and regulatory obligations
• Measure visits and improve site pages only with your consent

Legal basis: performance of a contract (booking), legitimate interest (responding to requests), consent (optional audience measurement), legal obligation.

04 · Who has access to your data?

Your data is processed by authorised members of SASU JAK MOOH and service providers needed to run the service. We do not sell or rent it. If you consent to optional measurement, loading Google Tag Manager sends technical browser data to Google; on some public pages, Google Analytics 4 also sends browsing data to Google. A booking platform may process data needed for bookings and payments.

05 · How long do we keep your data?

Your data is kept for the period strictly necessary for the purposes pursued:

• Contact data: 3 years after your last interaction
• Booking data: 5 years after the stay (accounting obligation)
• Optional internal measurement events: up to 31 days in our storage. Cloudflare and Google technical logs have their own retention periods. According to Google, GA4 user data associated with an identifier may be retained for 2 or 14 months depending on the property setting; we could not verify the period selected for this account. This setting does not limit standard aggregated reports.

06 · Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain confirmation that data concerning you is being processed
• Right to rectification: have inaccurate data corrected

To exercise your rights, please contact us at bonjour@demeuredesdix.fr. We will respond within a maximum of one month.

• Right to erasure: request the deletion of your data

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.

• Right to restriction: request the limitation of the processing of your data
• Right to object: object to the processing of your data
• Right to portability: retrieve your data in a structured format

07 · Cookies

The site uses technical means needed for navigation and security; your language choice may be stored locally. Internal measurement and Google Tag Manager remain off until you accept them. The Google container loads only on public pages after that choice. Google Analytics 4 loads with your consent on some public pages without URL parameters, excluding contact, booking and private pages. It may set measurement cookies such as _ga and _ga_* to recognise a browser and session; they are configured for 180 days and may be renewed on subsequent visits with your consent. Depending on the account’s enhanced measurement settings, some browsing interactions may also be measured. Your choice is stored for six months and a general source category for the session. You can withdraw consent through “Analytics choice” in the footer; the page then reloads to remove the container and delete Google measurement cookies accessible on this domain. Advertising purposes remain disabled.

08 · Security

We implement appropriate technical and organisational measures to protect your data against accidental destruction, loss, alteration, disclosure or unauthorised access. The site uses the HTTPS protocol (SSL encryption) to secure data exchanges.

09 · Data transfers outside the EU

Cloudflare, Inc. (United States) hosts the site and processes requests and technical logs; these data may be processed outside the European Union, including in the United States. This transfer to Cloudflare, Inc. in the United States relies on its certification under the EU-U.S. Data Privacy Framework. If you consent to optional measurement, internal daily aggregated events are stored in Cloudflare D1, Western Europe region (weur), and your browser loads Google Tag Manager from Google, which receives technical data. On some public pages, Google Analytics 4 also sends measurement data and cookie identifiers that Google may process outside the EU. For questions about transfers and applicable safeguards, contact us at bonjour@demeuredesdix.fr.

10 · Changes

We reserve the right to modify this policy at any time. Any changes will be published on this page with an updated date. We encourage you to check this page regularly.