Privacy Policy Statement | Villa Thymfalaise

This Privacy Policy (hereinafter referred to as the "Policy") details the methods and principles by which Apokalis Coopérative de Location SARL (hereinafter referred to as "Apokalis Coopérative de Location SARL," "we," "us," or "our") collects, processes, uses, retains, and safeguards the personal information of individuals (hereinafter referred to as the "Guest" or "User") who access our website, utilise our booking services, occupy Villa Thymfalaise (the "Premises"), and engage in any related transactions with Apokalis Coopérative de Location SARL. This Policy is binding and is incorporated by reference into the General Terms and Conditions of Service for the rental of Villa Thymfalaise.

§1 Scope of Policy

This Policy applies to all personal data that Apokalis Coopérative de Location SARL collects from Guests through:

Our website, booking systems, and online platforms.
Communication channels, including email, phone, and in-person requests.
Documentation submitted by the Guest to confirm identity and booking details.
In-person interactions on the Premises, including data gathered through CCTV surveillance and security systems.

By utilising our services, booking the Premises, or submitting personal information, the Guest explicitly consents to the terms of this Policy.

§2 Types of Data Collected

Apokalis Coopérative de Location SARL collects a range of personal data to facilitate bookings, maintain security, and ensure compliance with applicable laws. This data may include, but is not limited to, the following:

2.1 Personal Identification Information: Full legal name, residential address, email address, phone number, and a clear photograph of the Guest’s passport or other government-issued identification to verify identity and confirm booking eligibility.

2.2 Booking and Transaction Information: Payment details, dates of booking, transaction records, and other related information required to process, confirm, and manage reservations for the Premises.

2.3 Technical and Device Information: Information gathered automatically through our website, including but not limited to IP address, browser type, and operating system, to enhance user experience and provide site functionality.

2.4 CCTV Surveillance Data: Video recordings from CCTV cameras located on the Premises, utilised exclusively for the purposes of security, safety, and crime prevention, in accordance with applicable privacy laws.

§3 Purpose of Data Collection and Use

The data collected by Apokalis Coopérative de Location SARL is processed for specific and legitimate purposes, including but not limited to:

3.1 Booking Confirmation and Verification: To verify the Guest’s identity and eligibility to book and occupy the Premises, including use of identification documentation as required under the General Terms and Conditions of Service.

3.2 Security and Safety: CCTV surveillance data and personal identification information are used to ensure the safety and security of Guests, staff, and the Premises. Data from surveillance systems is retained in accordance with legal requirements and is reviewed solely by authorised personnel.

3.3 Transaction and Payment Processing: To manage and fulfil reservation requests, process payments, manage deposits, and fulfil all associated booking-related obligations.

3.4 Compliance with Legal Obligations: To comply with local and national regulations regarding identification, financial transactions, and occupancy, including any obligations to report incidents or retain data for specified periods.

3.5 Website Functionality and Enhancement: To improve website functionality, analyse usage trends, and tailor content to enhance user experience. Non-identifiable technical data may be used for analytical purposes.

§4 Data Sharing and Disclosure

Apokalis Coopérative de Location SARL will not sell, lease, or commercially exploit the Guest’s personal data. However, data may be shared under the following conditions:

4.1 Service Providers: We may disclose certain personal data to third-party service providers, such as payment processors and IT support, solely to facilitate booking and site functionality, provided that these parties agree to uphold data confidentiality.

4.2 Legal Compliance and Law Enforcement: We may disclose personal data if required by law, court order, or governmental regulation, or if disclosure is necessary to protect the rights, property, or safety of Apokalis Coopérative de Location SARL, its Guests, or the public.

4.3 Business Transfers: In the event of a merger, acquisition, or transfer of ownership of Apokalis Coopérative de Location SARL, personal data may be transferred as part of the transaction, subject to continuation of this Policy or similar protective measures.

§5 Data Retention and Security

5.1 Retention Period: Personal data provided for booking and verification purposes, including identification documents, will be retained only for the duration necessary to fulfil the purpose of collection or as required by applicable law. CCTV footage is retained for a limited period and is deleted in compliance with legal regulations unless required for security investigations.

5.2 Data Security Measures: Apokalis Coopérative de Location SARL employs industry-standard security measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. This includes restricted access protocols, encryption, and periodic security audits to ensure data integrity.

5.3 Guest Responsibility: The Guest is responsible for safeguarding their account information, booking confirmation details, and any access credentials used on our website. Apokalis Coopérative de Location SARL is not liable for any unauthorised access resulting from Guest negligence.

§6 Guest Rights

Guests have the following rights regarding their personal data, subject to applicable legal restrictions and limitations as outlined below:

6.1 Access and Correction: Guests may request access to their personal data held by Apokalis Coopérative de Location SARL and may request corrections if such data is inaccurate or incomplete, provided such access or correction does not interfere with the fulfilment of our legitimate business interests or legal obligations.

6.2 Restrictions on Deletion: Guests do not have the right to request deletion of personal data collected under this Policy until the data retention period has expired or as legally permissible. Personal data required for the fulfilment of booking, verification, security, and compliance purposes shall be retained for as long as legally required or necessary to fulfil the purposes for which it was collected.

6.3 Consent and Processing Limitations: Where processing of personal data is based on Guest consent, such consent is considered irrevocable until legally permissible for withdrawal. The Guest’s withdrawal of consent shall be recognised only when legally allowable and will not affect the lawfulness of any processing conducted prior to withdrawal.

6.4 Complaint Lodging: Guests who believe their data has been misused or their privacy rights infringed may lodge a complaint with the relevant data protection authority, subject to any legal limitations regarding data processing or retention imposed on Apokalis Coopérative de Location SARL.

§7 Use of Data for Internal Purposes

All personal data collected, including identification documents and CCTV recordings, shall be used strictly for internal purposes related to Guest services, Premises security, and legal compliance. Apokalis Coopérative de Location SARL does not use, sell, or share Guest personal data for commercial or marketing purposes.

7.1 Non-commercial Use: Apokalis Coopérative de Location SARL retains the right to utilise personal data for legitimate, internal business operations, subject to this Policy and applicable law. Data shall not be exploited or disseminated for any unauthorised commercial gain.

§8 Policy Updates and Amendments

Apokalis Coopérative de Location SARL reserves the right to amend or update this Policy at any time. Any modifications shall be effective upon posting on our website or other communication channel, and the continued use of our services by the Guest after such posting shall constitute acceptance of the revised Policy.

§9 Contact Information & Consent

By proceeding with a reservation, the Guest acknowledges having read, understood, and agreed to this Privacy Policy and consents to the collection, use, and retention of their personal data as outlined herein.

For any questions, concerns, or requests regarding this Policy or the handling of personal data, Guests may contact us at:

Apokalis Coopérative de Location SARL
15 Rue des Halles

75001 Paris

France

info@villathymfalaise.com