Privacy & GDPR Policy
The European regulation No. 2016/679 of 27 April 2016, or General Data Protection Regulation (GDPR), came into force on 25 May 2018. This new law replaces the Data Protection Act and is a European wide law which affects how we use and store information we receive from guests and enquirers. It covers all data, whether electronic or paper based.
What information we collect from you.
When you make a booking with us we collect the name, the home address, email address and telephone number of the person making the booking.
How we use the information you give us.
We use your email to communicate with you, to send you booking confirmation and answer any queries you email us, and to thank you after your visit. We will also add details of how you can keep in touch with us on social media, should you wish to do this.
We will not use your telephone number unless we need to contact you urgently or if we cannot reach you by email.
Marketing
We don’t issue a newsletter or use Mailchimp. We use Facebook and our own website to market our gite. We never pass your details to any third party.
Access to your Information
You have the right to request a copy of the information we hold about you. If you would like a copy of this, please email us at Les Grands Coudrais
Right to be Forgotten
All customers have the right to ask us to remove their details from our records. However, this does not override the legislative requirements of the Fiche Identite Individuelle form.
We ask guests to complete the French Fiche Identite Individuelle police aliens form, which French law requires us to keep for 6 months from date of arrival. Only the French police may ask for the details on this form, otherwise it is destroyed by us after 6 months..
We are also required by French law to keep financial records for 7 years, so guests cannot ask to be erased from these financial records.
If you book to stay with us directly and complete a booking form, your details will kept securely on our system via password controlled entry and are not used for any other purpose or shared with any other person or business. We need your email address to send through booking forms, answer any queries you have regarding the property or to send you terms & conditions, booking confirmation etc. We don’t need explicit consent for this. We will not add you to any marketing mailing list.
If you book via one of our booking partners, for example Booking.com, they have also to comply with GDPR regulations and have their own safeguards and policies.
Similarly, if you choose to follow us on social media (eg Facebook), we don’t need consent as you have already accepted the terms & conditions on that platform.
Notification of Data Breaches
The GDPR will require us to notify the Information Commissioner’s’ Office within 72 hours of first having become aware of the breach where that breach is likely to “result in a risk for the rights and freedoms of individuals”. For any breach, we are required to notify the customers “without undue delay” after first becoming aware of a data breach.
