Privacy policy

This policy explains how the personal data collected on lemasdeylieux.fr is processed, in accordance with the General Data Protection Regulation (GDPR).

Data controller

The data controller is Pascale OZIL, publisher of "Le Mas d'Eylieux". Address: 264 chemin de la ferme de Bayle, 07220 Saint-Montan, France. E-mail: contact@lemasdeylieux.fr Phone: +33 6 83 06 02 26

Data processed and required fields

Forms: first name, surname where requested, email, telephone, country, address if supplied, message and project details (dates, participant and overnight guest numbers, type of stay, rental choice and optional budget). Fields marked required are needed to process the request; without them the form cannot be sent. You can also email us directly. Please do not include sensitive data in your message. Requests may include a random technical identifier and their source page. With Analytics consent, the website also processes pseudonymous identifiers, public pages viewed, interactions, language, browser/device information and general audience data.

How your data is used

We answer questions and callback requests, prepare stay proposals and manage customer relations. Your number is used to answer, call back at your request or follow up your enquiry; supplying it does not give consent to telephone marketing. The website does not collect consent for future commercial calls. With separate consent, Google Analytics 4 measures traffic, interactions and the effectiveness of stay enquiries. A request identifier can be matched to the message received by the Mas: this data is pseudonymous, not anonymous. Website events do not send your name, email, telephone, address or message text to Analytics. Your data is not sold.

Legal bases

Stay, quotation and related callback requests: precontractual steps at your request (GDPR Article 6(1)(b)); confirmed stays: performance of the contract. Other enquiries, security and abuse prevention: legitimate interests in managing correspondence and protecting the website (Article 6(1)(f)). Legally required retention: legal obligation (Article 6(1)(c)). Audience and interaction measurement: prior consent (Article 6(1)(a)), which can be withdrawn at any time. Analytics consent is not required to send an enquiry.

Recipients and service providers

Pascale OZIL and people authorised to handle requests receive the relevant information. EmailJS Pte. Ltd. forwards forms to the Mas email services; Google/Gmail handles requests routed to that mailbox. Vercel Inc. hosts and serves the website; OVH SAS provides DNS. Google Ireland Limited and its providers process Analytics data after consent, and data related to Google services you choose to open. Providers may also process technical data for security under their own policies. The website does not make automatic bookings or process payments.

Transfers outside the European Economic Area

International providers may process data outside the EEA, including in the United States. EmailJS states that it uses US infrastructure and European standard contractual clauses for transfers. Vercel and Google publish their transfer mechanisms and applicable safeguards in their data protection terms. Data is not guaranteed to remain exclusively in Europe. You can request information and a copy of applicable safeguards at contact@lemasdeylieux.fr. Provider documents: https://www.emailjs.com/legal/data-protection-agreement/ ; https://vercel.com/legal/dpa ; https://policies.google.com/privacy

Retention periods

Enquiries and correspondence are archived in the Mas email inboxes. Enquiries that do not lead to a booking are kept while being handled, then for a maximum of three years after the last contact initiated by the person. Records needed to follow up or establish evidence of a stay are archived with restricted access for five years after the end of the stay, unless a specific obligation or dispute requires otherwise. Contracts concluded electronically with a consumer for an amount of at least €120 are kept for ten years from the provision of the service. Invoices and accounting records are kept for ten years from the end of the accounting year where that obligation applies. The relevant messages and documents are deleted when the applicable period ends, unless an extension is justified by a legal obligation or dispute. EmailJS states that activity on active accounts is retained for thirty days; messages received in email remain subject to the periods above. Cookie choices are stored for six months. Analytics cookies configured by the website expire no later than six months after creation. Google Analytics 4 user and event data is configured to be retained for fourteen months, without resetting the retention period on new activity. Aggregated reports follow a separate retention regime. Contact us to request deletion.

Your rights and complaints

You may request access, correction, erasure, restriction and, where the legal conditions are met, portability. You may object to processing based on legitimate interests for reasons relating to your situation and withdraw Analytics consent through “Manage cookies”, without affecting previous processing. Write to contact@lemasdeylieux.fr or Pascale OZIL, 264 chemin de la ferme de Bayle, 07220 Saint-Montan, France. We normally reply within one month; any lawful extension for a complex request is explained. Proof of identity is requested only where there is reasonable doubt. You may complain to the French data protection authority, CNIL: https://www.cnil.fr/fr/adresser-une-plainte

Cookies, local storage and Analytics

Google Analytics 4 is blocked until you accept audience measurement. You can accept all, reject all or customise, then withdraw through “Manage cookies” in the footer. Refusing does not prevent browsing or sending an enquiry. Choices are renewed after six months. The _ga and _ga_* cookies distinguish visits and interactions after consent; their configured maximum lifetime is six months. Google signals and advertising personalisation are disabled in the website configuration. Local storage remembers your language and cookie choice; session storage prevents the welcome window repeating during a session. The language remains stored until changed or browser storage is cleared. These items serve preferences and website operation; they do not replace your agreement to audience measurement. After you consent to audience measurement, a source context retains the referring website’s domain, permitted UTM campaign parameters and the path of the first page observed with that consent. The path contains no URL query parameters or fragment. This context is kept in the browser tab and expires after 30 minutes of inactivity. It is included in enquiries you send to the Mas to help identify their origin; late consent does not reconstruct your earlier browsing. Withdrawing consent disables this context and clears its copy from the tab’s storage.

Videos, reviews and external links

A YouTube video loads only after you activate playback. This opens an external player on youtube-nocookie.com and sends technical data to Google/YouTube; privacy-enhanced mode does not guarantee that playback involves no data processing. The button and its confirmation let you choose whether to activate the player. Google Maps, reviews and other external links lead to services with their own policies. Language flags may also load from the jsDelivr CDN, which receives technical data needed for the request.

Security and automated decisions

The website uses HTTPS, security headers, input checks and protections against automated submissions. No decision with legal effects on a booking is made automatically: requests are reviewed personally. Infrastructure providers may process connection data needed to serve and protect the website under their policies and applicable legal obligations.

Contact

For any question about your personal data, contact us at contact@lemasdeylieux.fr.