Privacy Policy

Compliant with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act.

We place the utmost importance on protecting your personal data. This page clearly explains what data we collect, why we collect it, how long we keep it, and what your rights are. For any questions, please write to us at [email protected].

1. Data Controller

The controller responsible for processing your personal data is:

Company: SARL La Cour des Princes
Address: Château le Verdoyer, 24470 Champs-Romain, France
Phone: +33 5 53 56 94 64
E-mail: [email protected]

Given the limited volume of our processing activities, we have not appointed a Data Protection Officer (DPO). Any request regarding your personal data may be addressed directly to our team at the address above.

2. Data collected, purposes, and legal bases

We only collect data strictly necessary for each purpose (data minimization principle). Here is the scope of our processing:

Booking and stay management
Data: Surname, first name, postal address, phone number, e-mail, date of birth, group composition, preferred pitch/accommodation.
Legal basis: Performance of a contract.
Retention period: 5 years after your last stay.

Invoicing and accounting
Data: Contact details and billing information.
Legal basis: Legal obligation.
Retention period: 10 years (legal accounting retention period).

Online payment
Data: None — payments are processed directly by our secure providers (Stripe, iDEAL, Sofort, etc.). We never store your banking details.
Legal basis: Performance of a contract (sub-processing).

Newsletter and commercial communications
Data: Surname, first name, e-mail address, preferred language.
Legal basis: Consent (revocable at any time via the unsubscribe link present in every e-mail).
Retention period: Until you unsubscribe or request deletion.

Contact form and information requests
Data: Name, e-mail address, message content.
Legal basis: Legitimate interest (responding to an incoming request).
Retention period: 3 years from the last contact.

Website traffic statistics
Data: Anonymized navigation data (pages visited, duration, origin).
Tool: Google Analytics.
Legal basis: Consent (cookie banner).
Retention period: 26 months (Google Analytics setting).

Staff management
Data: Employee data (contracts, payslips, contact details, etc.).
Legal basis: Legal obligation and performance of the employment contract.
Retention period: 5 years after the end of the contract.

3. Data transfers outside the European Union

Some of our tools involve data transfers to countries outside the European Union:

  • Google Analytics (audience measurement): data transferred to the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, approved by the European Commission in July 2023, which constitutes an appropriate safeguard within the meaning of the GDPR.
  • Payment platforms (Stripe, etc.): transfers governed by Standard Contractual Clauses (SCCs) issued by the European Commission.

Outside of these cases, your data is hosted and processed within the European Union. It is never sold or transferred to third parties for commercial purposes.

4. Cookies and trackers

A cookie is a small file placed on your device during your visit. There are three categories:

  • Strictly necessary cookies: essential for the website to function (navigation, language preferences, session management). No consent required.
  • Audience measurement cookies (Google Analytics): collect anonymized data on website traffic. Placed only after your explicit agreement.
  • Third-party cookies: some embedded content (maps, YouTube videos) may place their own cookies. You are informed of this when they are displayed.

In accordance with CNIL recommendations, cookies subject to consent are only placed after your agreement, which is valid for a maximum of 13 months. You may withdraw your consent or adjust your preferences at any time via the cookie management banner on the site.

5. Your rights

In accordance with the GDPR (Articles 15 to 22), you have the following rights regarding your personal data. We commit to responding to any request within a maximum of one month.

  • Right of access (Art. 15): obtain a copy of all data we hold about you.
  • Right to rectification (Art. 16): have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17): request the deletion of your data, unless a legal obligation requires us to retain it.
  • Right to object (Art. 21): object to processing based on our legitimate interest, or to any use for commercial prospecting purposes.
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format to transmit it to another provider. Applicable to data provided based on consent or a contract.
  • Right to restriction of processing (Art. 18): request the temporary suspension of processing, for example while verifying a dispute.
  • Withdrawal of consent: withdraw any previously granted consent (newsletter, analytics cookies) at any time, without affecting previous processing.

To exercise any of these rights, contact us at [email protected] or by mail at our registered office.

In the event of an unsatisfactory response, you have the right to lodge a complaint with the CNIL:
Website: www.cnil.fr
Online complaint: cnil.fr/fr/plaintes
Postal address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

6. Data security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration:

  • Software and systems updated regularly.
  • Data access restricted to authorized personnel (reception, administration).
  • Passwords managed according to a regular renewal policy.
  • Payments processed exclusively via PCI-DSS certified providers.
  • Physical archives stored in controlled-access premises and destroyed upon the expiration of the legal period.

In the event of a data breach likely to present a risk to your rights and freedoms, we commit to notifying the CNIL within 72 hours in accordance with Article 33 of the GDPR, and informing you directly if the risk is high.

7. Changes to this policy

We reserve the right to modify this policy at any time to reflect changes in our practices or applicable regulations. The update date is indicated at the bottom of the page. In the event of a substantial modification, we will inform you by e-mail if you are subscribed to our newsletter, or via a visible notice on the site.

Do not hesitate to contact us if you have any questions or comments — we are always open to improving our practices.

Last update: April 2026