Privacy policy

⚠️ TO BE REVIEWED BEFORE PUBLICATION. The technical section below describes exactly what the site does today. The identity of the data controller and the retention periods must be filled in by the publisher, and the whole reviewed by a legal professional.

Data controller

[TO BE COMPLETED — name, address and contact email, matching the legal notice]

Data collected

The site only collects data through the booking form on the Contact page: name and email (required), plus phone, preferred date, number of people, preferred tour, message and consent.

No account is created, no payment is processed on the site, and no data is collected without your knowledge when simply browsing the pages.

Purpose and legal basis

The data is used solely to handle your booking request or question and to reply to you. The legal basis is your consent (article 6.1.a GDPR), given via the form’s checkbox.

Recipients

Your data is shared with the publisher, who receives your request by email; Resend (resend.com), the email delivery provider; and Vercel (vercel.com), the hosting provider.

Both providers are established in the United States. Transfers outside the European Union are governed by the European Commission’s standard contractual clauses. [TO BE COMPLETED — verify and cite the framework actually applicable to each provider contract.]

Your data is never sold, rented or transferred to third parties.

Retention period

[TO BE COMPLETED — period chosen by the publisher.]

Cookies and local storage

The site currently sets no advertising cookies and no analytics trackers.

The only item stored on your device is a local-storage entry named fz-consent, which remembers your answer to the consent banner. It contains no personal data and is never transmitted.

Should an analytics tool or advertising pixel be added later, it will only fire after your explicit consent through that banner, and this policy must be updated accordingly.

Security

The site is served entirely over HTTPS. The form is protected against automated and cross-site submissions.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data, and to withdraw your consent at any time.

To exercise these rights: [TO BE COMPLETED — contact email].

You may also lodge a complaint with the CNIL (www.cnil.fr), the competent supervisory authority in France.