Privacy policy
Draft text, to be reviewed by a legal professional before going live.
This translation is provided for information only. The French version prevails.
Data controller
Mar i Sol, who can be reached via the Contact page or at the email address given in the legal notice.
Data collected
Bookings and requests: name, email, phone, dates, number of guests and message. Contact form: name, email, phone (optional) and message. Reviews: rating, comment, first name and initial. Payments (stays, deposit, Boxes): email and name provided by Stripe, payment reference. For the security deposit, your card is saved by Stripe (never by us) to place the hold the day before arrival. If part of the deposit is charged: reason and supporting photos. Card details are processed solely by Stripe and are never passed on to us.
Purposes and legal bases
Processing your requests, bookings, payments, refunds and the security deposit (performance of a contract), replying to your messages (legitimate interest), collecting and publishing verified reviews (legitimate interest), meeting our accounting and tax obligations (legal obligation).
Recipients and processors
Supabase (database, hosted in the European Union), Netlify (website hosting), Resend (sending emails), Stripe (payment of stays, deposits and Boxes). Some of these providers may transfer data outside the European Union, under the European Commission's standard contractual clauses. Your data is never sold.
Retention periods
Requests that did not lead to a booking: 1 year. Bookings and sales: 10 years (accounting obligations). Contact messages: 1 year. Reviews: for as long as the home is listed, up to 5 years.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. Write to us via the Contact page. You may also lodge a complaint with the CNIL (www.cnil.fr).
Cookies
This site uses no advertising or audience-measurement cookies. Only one strictly necessary cookie is used to sign in to the administration area; it does not require consent.