Privacy Policy
Protecting your personal data — GDPR compliant
Data Controller
SAS Les Chryolles
Hameau d'Anchical — 73450 Valmeinier, France
Email: contact@leschryolles.com
Phone: 06 72 96 02 12
We are the controller responsible for the processing of the personal data described in this policy. For any question or to exercise your rights, please contact us directly at the address above.
Principles We Apply
We process your data in accordance with the GDPR and applicable French law.
This site does not carry any advertising.
No data is sold, transferred, or shared with third parties for commercial purposes. No social network, advertising tracking pixel, or third-party targeting tool is embedded on this site.
Data Collected and Processing Activities
Data collected: name, email address, phone number (optional), subject of the request, message, planned stay dates (optional), number of guests (optional).
Purpose: handling and follow-up of your contact or booking request.
Technical information: technical information (IP address and browser) may be recorded to help prevent unwanted messages and automated submission attempts. This data is not used for any other purpose.
Data collected: name or pseudonym chosen by the author, rating (1 to 5 stars), review text, context of the visit (optional).
Purpose: publishing visitor reviews on the site, in order to inform future visitors.
Edit cookie: a technical cookie is kept for one year to allow you to edit or delete your review without creating an account.
Data collected: pages visited, time spent on each page, country of origin, device type, browser, IP address, and referring page.
Interactions: certain interactions with the site (clicks and navigation paths) may be analysed in aggregated form to improve the user experience.
Visit identifier: a random technical identifier may be stored locally in your browser to link multiple visits without directly identifying you. It is never cross-referenced with your contact data.
This collection only takes place if you accept audience measurement in the cookie banner.
Service: Vercel Analytics and Vercel Speed Insights run continuously, regardless of your cookie preferences.
Data collected: web performance metrics (load time, visual stability, responsiveness). These services do not use cookies, do not collect an identifiable IP address, and produce only aggregated statistics.
Purpose: continuous improvement of the site's technical performance.
Data collected: IP address, browser information, date and time of requests, and technical information necessary to secure the site.
Purpose: intrusion detection and protection against automated attack attempts. In the event of a technical error, a report is sent to identify and fix site malfunctions.
Data collected: date and time, choices made (categories accepted or refused), IP address, and browser.
Purpose: keeping proof of your consent or its withdrawal.
You can access your consent history and export it via the cookie management panel ("Manage my cookies" button at the bottom of the page).
Legal Bases — Summary
Consent — Art. 6.1.a
Audience measurement (analytics) · Visitor reviews
You can withdraw your consent at any time without any effect on the operation of the site.
Pre-contractual measures — Art. 6.1.b
Handling of the contact form and booking requests
Legal obligation — Art. 6.1.c
Consent log
Legitimate interest — Art. 6.1.f
Site security · Anti-spam measures · Technical performance
You can object to these processing activities at any time.
Data Retention Periods
Beyond these periods, data is automatically deleted or anonymised. Data stored in your browser can be cleared at any time from its settings.
Subprocessors and Transfers
Certain operations are entrusted to providers bound by a GDPR-compliant data processing agreement.
| Subprocessor | Role | Location | Safeguards |
|---|---|---|---|
| Vercel Inc. | Hosting, content delivery, database, performance analytics | United States — data stored in the European Union | Signed DPA, Standard Contractual Clauses (SCCs) |
| OVH SAS | Sending of transactional emails (SMTP) | European Union (France) | French entity, GDPR directly applicable |
Vercel Inc. is established in the United States. The data transfer is governed by Standard Contractual Clauses. Data is stored on servers located in the European Union.
Your Rights
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
Right of Access (Art. 15)
Obtain confirmation as to whether data concerning you is being processed, and receive a copy of it.
Right to Rectification (Art. 16)
Have inaccurate or incomplete data corrected.
Right to Erasure (Art. 17)
Request deletion of your data, subject to statutory retention obligations.
Right to Object (Art. 21)
Object to processing based on legitimate interest (security, site performance).
Right to Restriction of Processing (Art. 18)
Request the suspension of processing for the duration of a dispute or verification.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format (applicable to data provided with your consent or under a contract).
Withdrawal of Consent
Withdraw your consent to audience measurement at any time, with no retroactive effect. Use the "Manage my cookies" panel at the bottom of the page.
CNIL Complaint
Lodge a complaint with the CNIL if you believe your rights are not being respected.
Response Times
We respond to every request within one month. This period may be extended up to three months for complex requests, with prior notice.
Automated Decision-Making and Profiling
No automated decision producing legal or similarly significant effects is made on the basis of your data. Visit statistics are used solely to improve the site and are never used to build an individual profile.
Data Security
We implement appropriate measures to protect your data:
- Encrypted communications (HTTPS)
- Protection of administrator access
- Monitoring of security incidents
- Backups and protective measures suited to our organisation
In the event of a data breach likely to result in a high risk to your rights and freedoms, you would be notified as soon as possible in accordance with Article 34 of the GDPR.
Protection of Minors
This site is not intended for minors under the age of 15. If you believe a minor has provided us with personal data without authorisation, please contact us at contact@leschryolles.com so that we can delete it.
Contact and Remedies
To exercise your rights or for any question relating to this policy:
Postal mail
Hameau d'Anchical
73450 Valmeinier
Right to Lodge a Complaint with the CNIL
If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the supervisory authority with jurisdiction in France.
Managing Your Cookie Preferences
You can change your preferences or withdraw your consent to audience measurement at any time.
How to manage your cookies:
- Use the "Manage my cookies" button available at the bottom of every page
- From your browser settings, to clear the data stored
- By contacting us directly for any deletion request
Declining audience measurement does not affect how the site works. Certain technical cookies necessary for the site to function are exempt from consent and cannot be disabled.
Changes to This Policy
This policy may be updated to reflect changes in our practices or in the law. In the event of a substantial change, a notice will be displayed on the site. We recommend that you check this page regularly.
Last updated: 17 June 2026
Version: 3.0