Your Privacy

Anne-Marie Tessier is the data controller for this site. Contact: contact@mapamax.fr.

The site is developed and technically managed by GY Digital, Romain Goyeau. Technical contact: contact@gy-digital.be.

When booking: name, e-mail address, phone number, stay dates and number of guests. This data is used only to manage your stay: confirmation, practical exchanges, tourist tax. Legal basis: performance of the contract.

Via the contact form: your name, e-mail and message, so we can reply. Legal basis: our legitimate interest in answering requests.

Your payment details never pass through our servers: the card number is entered at Stripe and all we receive is a reference.

To suggest stays during the school holidays of your country, the site derives that country from your IP address, using a database installed on our own server (IP Geolocation by DB-IP). Only the country code is used, while the page is being shown; for this your IP address is neither stored nor passed on to anyone. Legal basis: our legitimate interest in showing you useful suggestions.

Only the owner. Three technical providers process data on our behalf: the site host (Hetzner, Germany), the e-mail service (OVH, France) and, for payments, Stripe Payments Europe (Ireland). All three are established in the European Union.

Stripe belongs to a US group and may, for fraud prevention, transfer some data to the United States. Those transfers are covered by the European Commission's standard contractual clauses.

Your data is never sold or used for advertising.

Booking data is kept for the duration of the stay, then for ten years to meet accounting obligations (article L123-22 of the French Commercial Code). Contact form messages are deleted at the latest one year after the last exchange.

Server logs, which contain neither names nor e-mail addresses, are kept for a few weeks and serve only to spot a fault or misuse.

This site sets no measurement, advertising or tracking cookies. No analytics, no social networks, no ad networks. That is why there is no cookie banner: such banners exist to collect consent, and there is nothing here that requires any.

Two strictly necessary cookies exist, both tied to the owner's area: a session cookie after she logs in, and a security token set on the login page itself, which protects the form against forged submissions. That second cookie can therefore be set for a visitor who opens that page. Strictly necessary cookies do not require consent.

You have the right to access your data, to have it corrected or erased, to restrict how it is processed, to object to processing, and to data portability: on request we send you your data in a machine-readable format.

Simply write to contact@mapamax.fr. We reply within one month. No automated decisions are made from your data, and there is no profiling.

If our answer does not satisfy you, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr).