Laforêt Obernai is committed to protecting and respecting the privacy of its clients, partners, and service users. This Privacy Policy outlines how we collect, use, share, and safeguard your personal data in connection with our activities related to the management of holiday rentals and seasonal accommodations, in compliance with the General Data Protection Regulation (GDPR) and applicable French law.

Data Controller
The data controller is:
Laforêt Obernai
21 Rue Sainte Odile, 67210 Obernai
Email: picardluc@laforet.com
Phone: +33 (0)3 88 47 08 21
Personal Data Collected
a. Data Provided by You

During reservations: Name, surname, email address, phone number, postal address, and payment information.
When subscribing to our newsletter: Name, surname, and email address.
When contacting us: Information shared in your communications (e.g., questions, comments).
b. Data Collected Automatically

When using our website:

IP address
Browsing data (pages visited, time spent on the site)
Cookies (refer to our Cookie Policy for more details)
3. Purpose of Data Processing
Your personal data is used for the following purposes:

Managing reservations and rental agreements.
Ensuring the administrative, accounting, and legal management of rental properties.
Communicating with you regarding reservations or inquiries.
Sending promotional information if you have provided consent.
Improving our website and services through statistical analyses.
4. Legal Basis for Processing
We process your personal data on the following legal grounds:

Performance of a contract: To manage your reservations and provide services.
Consent: For sending marketing communications.
Legitimate interest: To improve our services and secure our systems.
Legal obligations: To comply with fiscal, accounting, and other regulatory requirements.
5. Sharing of Personal Data
Your personal data may be shared with:

Third-party service providers: (payment platforms, IT providers, web hosting providers).
Competent authorities: As required by law.
Business partners: Only with your explicit consent.
We ensure that these third parties comply with applicable data protection laws.

Data Retention Periods Your personal data is retained for the following periods:

Reservation-related data: 5 years after the end of the contractual relationship (applicable legal duration).
Marketing data: Up to 3 years after the last active contact (interaction, email click, inquiry). Beyond this, consent must be renewed or the data deleted.
Accounting data: 10 years from the closure of the fiscal year, in compliance with legal obligations.
7. Your Rights
You have the following rights regarding your personal data:

Right of access: Obtain a copy of your data.
Right to rectification: Correct inaccurate or incomplete information.
Right to erasure: Request the deletion of your data (unless retention is legally required).
Right to data portability: Receive your data in a structured and machine-readable format.
Right to object: Refuse the processing of your data for marketing purposes.
Right to restrict processing: Request a temporary suspension of data processing.
Right to withdraw consent: For processing based on consent.
To exercise your rights, contact us at [dedicated email address].

Data Security
We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data and to prevent loss, theft, or unauthorized access.
Data Transfers Outside the European Union
If your data is transferred outside the EU, we ensure it is protected by appropriate safeguards (standard contractual clauses, adequacy decisions, etc.).
Cookies
Our website uses cookies to enhance user experience. For more details, refer to our [Cookie Policy].
Changes to the Privacy Policy
We reserve the right to amend this policy at any time. Updates will be published on this page with a revised date.
Contact Information
For any questions about this policy or the processing of your data, contact us at:
Email: picardluc@laforet.com
Address: 21 Rue Sainte Odile, 67210 Obernai

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.