PRIVACY POLICY

Charlotte Finelli ensures the protection of its users’ personal data, in compliance with the French Data Protection Act of January 6, 1978, as amended, and with the General Data Protection Regulation (EU) No. 2016/679.

The term “User” refers to any person visiting one or more pages of the website www.ferraduraexclusiveseaview.com (hereinafter the “Website”).

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The data controller responsible for the personal data collected on the Website is: Charlotte Finelli, legally appointed administrator of the Villa.
Tel: (+1) 917 503 9727
Email: fcharlotte3@gmail.com

COLLECTION OF PERSONAL DATA
Under the French Data Protection Act and the GDPR, any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more factors specific to that person, constitutes personal data.
All personal data concerning Website Users is collected directly from them.
Where necessary, the data controller may collect personal data concerning Users, subject to their prior consent.

LEGAL BASIS FOR PROCESSING
The data controller processes Users’ data only in the cases provided for by applicable regulations, in particular:

On the basis of the User’s freely given, specific, informed, and unambiguous consent, particularly when submitting contact or booking requests;
When processing is necessary for the performance of a contract or pre-contractual measures taken at the User’s request, such as managing a villa booking;
To comply with legal or regulatory obligations, particularly in relation to anti-fraud regulations;
When processing is justified by the legitimate interest of the data controller, including for commercial prospecting, statistical analysis, or implementing IT security measures.

TYPES OF DATA COLLECTED AND PURPOSES
The following User data may be processed by Charlotte Finelli, acting as data controller:

The URL links through which the User accessed the Website, the User’s internet service provider, and the User’s IP address;
Identification data from contact and booking forms: last name, first name, email address, postal address, and telephone number.

This data is mainly processed to:

Enable navigation on the Website and resolve technical issues;
Manage relationships with Users and villa bookings;
Organize and register stays;
Improve rental services.

The collection of personal data is based on the legitimate interest of the data controller, who directly manages the villa rental.

RECIPIENTS
The recipient of the personal data collected is the data controller, namely Charlotte Finelli.
User data is neither transferred nor made accessible to unauthorized third parties.
However, the data controller may disclose Users’ personal data to third parties where such disclosure is required by law, regulation, or court decision, or if necessary to protect and defend its rights.

DATA HOSTING
The data controller stores and processes Users’ personal data in Europe (notably in France).
Third-party service providers that store or process Users’ personal information on its behalf, such as the Wix platform and its subcontractors, are contractually committed to protecting and securing such data in accordance with industry standards.

DATA RETENTION PERIOD
Personal data is retained only for the time necessary to fulfill the purposes of processing:

Data collected via the Website contact form, used for prospecting or booking purposes, is retained for a maximum of three years from the end of the relationship;
Data collected for booking or stay purposes is retained for five years from the end of the stay.

USERS’ RIGHTS
In accordance with applicable regulations, Website Users have the following rights regarding their personal data:

Right of access to personal data collected and processed, and the ability to obtain a copy;
Right to rectification of inaccurate or incomplete data, and the right to erasure if the User considers the data is no longer necessary or has been unlawfully processed;
Right to restriction of processing, particularly if the User disputes the accuracy of the data or considers it has been unlawfully processed but does not wish it to be deleted;
Right to data portability, allowing the User to receive their personal data in a commonly used, machine-readable format and to transmit it to another controller;
Right to withdraw consent at any time where processing is based on consent;
Right to object to processing based on legitimate interest and to processing for direct marketing purposes.

EXERCISE OF RIGHTS
Any User whose personal data has been collected may exercise these rights by submitting a request:

By email to: ferraduraexseaview@gmail.com, or by post to the address indicated above.

This request must be accompanied by a copy of an identity document and any necessary supporting documentation.

The data controller will respond within a maximum of one month from receipt of the request; this period may be extended to two months if necessary due to complexity. In the event of refusal, the reasons will be provided.

Finally, any User may lodge a complaint with the CNIL at 3 Place de Fontenoy – TSA 80715 – 75334 Paris 07, or via www.cnil.fr.