Privacy Policy
Protecting your personal data — GDPR compliant
Data Controller
SAS Les Chryolles
1 Rue Victor Hugo — 73000 Chambéry, France
We are the controller responsible for the processing of the personal data described in this policy. For any question or to exercise your rights, please contact us directly at the address above.
Principles We Apply
We process your data in accordance with the GDPR and applicable French law.
This site does not carry any advertising.
No data is sold, transferred, or shared with third parties for commercial purposes. No social network, advertising tracking pixel, or third-party targeting tool is embedded on this site.
Data Collected and Processing Activities
A — Contact Form
- Legal basis
- Art. 6.1.b GDPR (pre-contractual measures)
- Retention
- 3 years from the last interaction
Data collected: name, email address, phone number (optional), subject of the request, message, planned stay dates (optional), number of guests (optional).
Purpose: handling and follow-up of your contact or booking request.
Technical information: technical information (IP address and browser) may be recorded to help prevent unwanted messages and automated submission attempts. This data is not used for any other purpose.
B — Reviews and Testimonials
- Legal basis
- Art. 6.1.a GDPR (consent — checkbox)
- Retention
- Indefinite, for as long as the review remains published; may be deleted on request
Data collected: name or pseudonym chosen by the author, rating (1 to 5 stars), review text, context of the visit (optional).
Purpose: publishing visitor reviews on the site, in order to inform future visitors.
Edit cookie: a technical cookie is kept for one year to allow you to edit or delete your review without creating an account.
Minors: posting a review requires being at least 15 — the age of digital consent in France (GDPR art. 8, art. 45 of the French Data Protection Act) — or having a legal guardian's agreement. The form asks for this declaration.
C — Audience Measurement (with your consent)
- Legal basis
- Art. 6.1.a GDPR (consent)
- Retention
- 90 days server-side; session data (browsing path, clicks): 7 days
Data collected: pages visited, time spent on each page, country of origin, device type, browser, IP address, and referring page.
Interactions: certain interactions with the site (clicks and navigation paths) may be analysed in aggregated form to improve the user experience.
Visit identifier: a random technical identifier may be stored locally in your browser to link multiple visits without directly identifying you. It is never cross-referenced with your contact data.
This collection only takes place if you accept audience measurement in the cookie banner.
D — Technical Performance Measurement (with your consent)
- Legal basis
- Art. 6.1.a GDPR (consent)
- Retention
- Aggregated data — Vercel Inc.'s policy
Service: Vercel Analytics and Vercel Speed Insights are loaded only if you accept audience measurement in the cookie banner. Until you give that consent — or if you withdraw it — no request is sent to these services.
Data collected: web performance metrics (load time, visual stability, responsiveness). These services do not use cookies, do not collect an identifiable IP address, and produce only aggregated statistics.
Purpose: continuous improvement of the site's technical performance.
E — Security and Technical Integrity
- Legal basis
- Art. 6.1.f GDPR (legitimate interest — security)
- Retention
- 30 days
Data collected: IP address, browser information, date and time of requests, and technical information necessary to secure the site.
Purpose: intrusion detection and protection against automated attack attempts. In the event of a technical error, a report is sent to identify and fix site malfunctions.
F — Consent Log
- Legal basis
- Art. 6.1.c GDPR (legal obligation — GDPR Art. 7)
- Retention
- Kept for as long as your browser retains your preferences, plus a server-side record (deleted on request)
Data collected: date and time, choices made (categories accepted or refused), IP address, and browser.
Purpose: keeping proof of your consent or its withdrawal.
You can access your consent history and export it via the cookie management panel ("Manage my cookies" button at the bottom of the page).
Legal Bases — Summary
Consent — Art. 6.1.a
Audience measurement (analytics) · Technical performance measurement · Visitor reviews
You can withdraw your consent at any time without any effect on the operation of the site.
Pre-contractual measures — Art. 6.1.b
Handling of the contact form and booking requests
Legal obligation — Art. 6.1.c
Consent log
Legitimate interest — Art. 6.1.f
Site security · Anti-spam measures
You can object to these processing activities at any time.
Data Retention Periods
Beyond these periods, data is automatically deleted or anonymised. Data stored in your browser can be cleared at any time from its settings.
Subprocessors and Transfers
Certain operations are entrusted to providers or go through their services. The table below sets out, for each one, its role, where processing takes place and the framework governing data transfers.
| Subprocessor | Role | Location | Safeguards |
|---|---|---|---|
| Vercel Inc. | Hosting, content delivery, database, performance analytics | United States — data stored in the European Union | Signed DPA, Standard Contractual Clauses (SCCs) |
| OVH SAS | Sending of transactional emails (SMTP) | European Union (France) | French entity, GDPR directly applicable |
| Google Ireland Ltd (Gmail) | Email: receiving and storing messages sent to our contact address | European Union (Ireland) and United States — data centres worldwide | Transfers outside the EU covered by the EU–US Data Privacy Framework and standard contractual clauses |
Vercel Inc. is established in the United States. The data transfer is governed by Standard Contractual Clauses. Data is stored on servers located in the European Union.
Your Rights
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
Right of Access (Art. 15)
Obtain confirmation as to whether data concerning you is being processed, and receive a copy of it.
Right to Rectification (Art. 16)
Have inaccurate or incomplete data corrected.
Right to Erasure (Art. 17)
Request deletion of your data, subject to statutory retention obligations.
Right to Object (Art. 21)
Object to processing based on legitimate interest (site security, anti-spam measures).
Right to Restriction of Processing (Art. 18)
Request the suspension of processing for the duration of a dispute or verification.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format (applicable to data provided with your consent or under a contract).
Withdrawal of Consent
Withdraw your consent to audience measurement at any time, with no retroactive effect. Use the "Manage my cookies" panel at the bottom of the page.
CNIL Complaint
Lodge a complaint with the CNIL if you believe your rights are not being respected.
Response Times
We respond to every request within one month. This period may be extended up to three months for complex requests, with prior notice.
Automated Decision-Making and Profiling
No automated decision producing legal or similarly significant effects is made on the basis of your data. Visit statistics are used solely to improve the site and are never used to build an individual profile.
Data Security
We implement appropriate measures to protect your data:
- Encrypted communications (HTTPS)
- Protection of administrator access
- Monitoring of security incidents
- Backups and protective measures suited to our organisation
In the event of a data breach likely to result in a high risk to your rights and freedoms, you would be notified as soon as possible in accordance with Article 34 of the GDPR.
Protection of Minors
This site is not intended for minors under the age of 15. If you believe a minor has provided us with personal data without authorisation, please contact us at les.chryolles@gmail.com so that we can delete it.
Contact and Remedies
To exercise your rights or for any question relating to this policy:
73000 Chambéry
Right to Lodge a Complaint with the CNIL
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the supervisory authority with jurisdiction in France.
Changes to This Policy
This policy may be updated to reflect changes in our practices or in the law. In the event of a substantial change, a notice will be displayed on the site. We recommend that you check this page regularly.
- Last updated
- 23 September 2026
- Version
- 3.1