Privacy notice
This page describes what happens to your details when you visit the website of VillaFleury or fill in a form on it.
Who is responsible
VillaFleury, 55 Les Cantarelles, 26570 Montbrun-les-Bains, is responsible for the details you send through this website (the controller under the GDPR). You can reach VillaFleury at info@villafleury.nl.
CasaFlow built this website and runs it. For the forms, CasaFlow works on behalf of VillaFleury (as a processor): CasaFlow receives a copy of every form, to see that it arrives properly, and uses it for nothing else.
Which details and what for
When you use the enquiry form, these details are sent: name, email address, phone number with country code, address, postcode, town and country, arrival and departure dates, number of people and the accommodation chosen, the choice of towels and bed linen, the price the website computed, message (optional), the language and page of the form and the date on your device and a hidden field that only a robot fills in. They are used only to answer your enquiry and to arrange a stay that follows from it. The legal basis is your own request: answering it is a step towards a rental agreement (Article 6(1)(b) GDPR). The required fields are needed to answer you. You get no newsletter, and your details are not used for anything else.
Where the details go
Your inquiry is shared directly and securely with the property owner. We keep a suppressed record of your contact preference to respect your inbox, but we never sell your data.
What you enter in a form goes from your browser to this website's own server at Cloudflare. It stores it, with the date, the time and your IP address, in this website's own database at Cloudflare in the European Union: the guest list that VillaFleury and CasaFlow can read behind a login. To prevent abuse, the server counts how many requests come from the same IP address within 10 minutes. The server also passes it to CasaFlow's own server at Cloudflare, which stores it in CasaFlow's own database at Cloudflare in the European Union, until VillaFleury or CasaFlow deletes it. The server then passes the details you entered on to Google, into an account that CasaFlow manages; your IP address and browser type do not go with them. At Google it is stored with the date and time in a spreadsheet that holds this website's form submissions, and it is sent by email to VillaFleury, with CasaFlow in copy. The spreadsheet and the emails are on Google's servers; CasaFlow's copy is in a mailbox at GoDaddy.
When you visit the website
The website is hosted by Cloudflare. To deliver a page, Cloudflare processes technical data such as your IP address and browser type.
The fonts come from the same server as the website itself; nothing is loaded from Google Fonts or any other font service.
On a page with a video, nothing is loaded from YouTube (youtube-nocookie.com) until you press play; from that moment YouTube receives your IP address and browser type, and the terms of YouTube apply to the player.
Without your consent this website sets no cookies. Your browser does keep one item for this website: cf_consent, your cookie choice. It stays on your device and is not sent anywhere.
The legal basis for this technical data is the legitimate interest of VillaFleury in a website that works safely and well (Article 6(1)(f) GDPR).
CasaFlow measures how this website is used, on behalf of VillaFleury, with its own measuring script, which is loaded through this website's own address; the measurements also go through that address to CasaFlow's measuring server (api.casaflow.homes). It counts which pages are viewed, the language of the page and of your browser, which website a visitor came from, the country and town (derived from your IP address) and whether that address belongs to a cloud or hosting network, the kind of device, the browser and the operating system, clicks on a phone number, an e-mail address or a WhatsApp button, whether the page is tapped, typed on or scrolled, use of the calendar, and that an enquiry was sent, with the accommodation, the dates and the number of guests chosen. It never records your name, e-mail address, phone number or message. To count a visitor once a day without a cookie, the server turns your IP address and browser type into a code that changes every day; the IP address itself is not kept. The measurements are stored in a database of Cloudflare in the European Union. The legal basis is the legitimate interest of VillaFleury in knowing how guests find and use the website (Article 6(1)(f) GDPR).
Only if you click "Accept" when the website asks does it set one cookie, cf_vid: a random code that stays valid for at most a year, so that your browser is recognised on a later visit and your visits can be seen as one whole. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the button below; the cookie is then deleted. This does not affect the lawfulness of what happened before you withdrew it.
There are no advertising scripts on the website.
Outside the European Economic Area
Google, GoDaddy and Cloudflare are American companies, so your details may also end up on servers outside the European Economic Area.
How long details are kept
There is no fixed period after which your details are deleted automatically. A form stays stored in this website's guest list, in CasaFlow's database, in the mailbox of VillaFleury, in the spreadsheet and in CasaFlow's email, including its own archive of it until you ask for it to be deleted.
The measurements of visits to the website are kept without a fixed period.
Rights and complaints
You may always ask which details are held about you, and have them corrected, deleted or transferred. You may also ask for their use to be restricted, and you may object to it. An email to info@villafleury.nl is enough.
If you disagree with how your details are handled, you can complain to the French Data Protection Authority, the CNIL (cnil.fr), or to the authority in the country where you live.