Personal Data
Privacy Policy / GDPR
In effect as of 1 July 2026
Article 01
Data Controller
SARL LES CLÉS DE CHARLOTTE, 410 Avenue des États du Languedoc, BAT. 2 APPT. 43, 34000 MONTPELLIER, France.
Legal representative: Mr Valentin Ferrier.
Article 02
Data Collected and Purposes
A. Contact forms / Property owners
Data collected
First name, last name, email, phone number, property details.
Purpose
Responding to enquiries, conducting the property audit and proposing a management agreement.
Legal basis
Pre-contractual measures.
B. Direct booking module and Guest Portal / Guests
Data collected
First name, last name, contact details, stay dates, number of guests, billing information. Payment data is processed by our PCI-DSS certified provider and is never stored on our servers.
Purpose
Managing the reservation, processing payment, issuing invoices, granting access to the Guest Portal and providing arrival instructions.
Legal basis
Performance of the holiday rental contract.
Article 03
Data Retention Periods
Prospects / unanswered enquiries
3 years from the date of last contact.
Owner clients
Duration of the contractual relationship + 5 years of archiving.
Guests
Duration of the stay + 5 years (civil limitation period). Invoices: 10 years (French Commercial Code).
Article 04
Data Recipients
For internal use only. Data is securely shared with the following recipients:
On-site operations team
L'Atelier des Villas.
Website hosting
Hostinger.
Online payment solutions
PCI-DSS certified payment providers.
SARL LES CLÉS DE CHARLOTTE formally undertakes never to sell, rent or transfer your data to third parties for marketing purposes.
Article 05
Data Security
Encryption
SSL/TLS protocol (HTTPS) across the entire website.
Access control
Restricted to authorised team members only.
Guest Portal
Secured by a unique URL link and phone number verification.
Article 06
Third Parties and Transfers Outside the EU
Data is stored within the European Union (Hostinger). Any exceptional transfer outside the EU is governed by the European Commission's Standard Contractual Clauses.
Article 07
Cookie Policy
This website applies the principle of Privacy by Design. Only strictly necessary technical cookies are used (storing stay dates, securing forms).
No advertising tracking cookies or third-party behavioural analytics cookies are placed.
Article 08
Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
Available rights
Right of access · Right of rectification · Right to erasure ("right to be forgotten") · Right to restriction of processing · Right to data portability.
Exercising your rights
By email at valentin@lesclesdecharlotte.com or by post to the registered office: 410 Avenue des États du Languedoc, BAT. 2 APPT. 43, 34000 MONTPELLIER, France.
Filing a complaint
If your concern is not resolved, you may contact the French data protection authority (CNIL): www.cnil.fr