Privacy notice

Who is responsible?

The controller is Les coches de Penchot - LcP (details below). Contact us at the privacy-request address below or write to our registered office. Only authorized staff and technical administrators may access information necessary for their duties.

Information we process

Accounts and profiles: name, email, telephone/mobile, date of birth, postal address, password hash, verification status, language and account role. Google sign-in, when enabled and chosen, provides an account identifier, name, email and profile picture. Bookings: dates, guest counts, options, pricing, booking history, payments/refunds, cancellation information, terms/privacy versions and hashes, acceptance time, IP address and browser user agent. Contact requests: the details and message you submit are sent by email, not stored as a contact-message table. Security and administration: authentication events, hashed identifiers, IP/browser information, short-lived verification challenges, payment/webhook payloads, reservation events, administrative notes and change records. Payment details are entered with Stripe; our application retains transaction references and provider responses rather than collecting card numbers or security codes in its forms.

Why we use it and the legal bases

We use account, booking and payment information to take steps at your request and perform the rental contract. Booking and transaction records also support legal obligations and the handling of disputes. Responding to general enquiries, securing accounts, preventing abuse, maintaining the service and recording administrative changes rely on legitimate interests in operating and protecting the business and its customers. We do not currently operate a marketing mailing programme. Fields marked required are needed for the relevant form or service; without them we may be unable to respond, create an account or complete a booking. Optional fields may be left blank.

Recipients and external services

IONOS hosts the service; the database is deployed as PostgreSQL alongside the application. Hosting details appear below. Stripe receives information needed to process payments, refunds and payment security and may act as a processor or independent controller depending on the activity. Google handles optional sign-in. Gmail or the configured SMTP provider carries contact, account, booking and maintenance emails; relevant staff and authorized technical maintainers receive them. The embedded YouTube video uses the privacy-enhanced domain, but Google may still receive connection/device information when the embed loads or is used. Necessary cookies and browser storage support sessions, language and site operation; see the cookie policy. We do not sell your personal information.

IONOS SARL, 7 place de la Gare, BP 70109, 57201 Sarreguemines Cedex, France; +33 (0) 970 808 911; https://www.ionos.fr/

International processing

Google and Stripe may process data outside the European Economic Area. Their privacy notices describe their international processing and transfer frameworks; links are provided below. IONOS hosts the website, but its French contact address does not establish the location of every server or backup. This notice does not claim that all processing takes place within the European Union.

Your rights and how to exercise them

Depending on the processing and applicable legal conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. Send a request to the privacy-contact address below with enough information to identify the relevant account or booking. These requests are made by email. You may complain to CNIL at www.cnil.fr/fr/plaintes.

Automated processing and notice history

The site automatically checks availability, calculates prices, enforces security/rate limits and runs scheduled balance reminders and cancellation for non-payment. You can contact us about a booking using the address below. We do not operate advertising profiles; Stripe and Google describe their own security/fraud processing in their notices. Booking records retain the terms and privacy versions/hashes and the booking language. Notice versions are dated and archived. This notice does not replace the rental terms or cookie policy.