Privacy & GDPR Policy

​

At www.cadayrouge.com we are committed to protecting and preserving the privacy of our visitors when visiting our site or communicating electronically with us.  Our Privacy Policy has been provided and approved by the online solicitors at LegalCentre.co.uk.

​

This Privacy Policy contains an explanation of what happens to personal data that you choose to provide to us, or that we collect from you whilst you visit this site. Our Privacy Policy should be read in conjunction with our terms of website use.  We do occasionally update this Policy so please do return and review this Policy from time to time.

 

The European regulation No. 2016/679 of 27 April 2016, or General Data Protection Regulation (GDPR), will come into force on 25 May 2018. Basically, this new law replaces the Data Protection Act.  This is a European wide law and as such affects how we use and store information we receive from guests and enquirers.  It covers all data, whether electronic or paper based.

​

We use cookies on our website  

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information.  This information is used to track visitors use of the website and to compile statistical reports on website activity.  You can set your browser not to accept cookies.  See www.aboutcookies.orgfor more information).

 

What information we collect from you

We collect Non-personal and Personal Information for the following purposes:

1. To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;

2. To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services; 

3. To comply with any applicable laws and regulations.

4. We use software tools to view the Internet Protocol (IP) address used to connect your computer to the Internet, where we also measure and collect session information, including page response times, length of visits to individual pages and page interaction information. 

5. When you make a booking with us we collect the names of all the guests who will be staying, the home address, email address and telephone number of the person making the booking.

​

How we store, use, share and disclose your personal information?
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. 

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

​

How we use the information you give us

We use your email to communicate with you, to send you booking confirmation and answer any queries you email us, and to thank you after your visit and ask you for a review.  We will also add details of how you can keep in touch with us on social media, should you wish to do this.

We will not use your telephone number unless we need to contact you urgently or if we cannot reach you by email.

 

Marketing

We use Facebook, Instagram and sometimes send out newsletters to market our accommodation and our own website and any special offers we may have.  We never pass your details to any third party.

​

Access to your Information

You have the right to request a copy of the information we hold about you.  If you would like a copy of this please email us at contact@cadayrouge.com

​

Right to be Forgotten

If you don’t want us to process your data anymore, please contact us at contact@cadayrouge.com or send us mail to:

Caday Rouge, Cadays, 47500, Saint-Vite, France.

All customers have the right to ask us to remove their details from our records.  However, this does not override the legislative requirements (eg the Fiche Identite Individuelle form – see below).  

​

Legally, we ask guests to complete the French Fiche Identite Individuelle police aliens form, which we have to legally keep for 6 months from date of arrival.  Only the local police can ask for the details on this form.  This form and the information contained on it are then destroyed by us.

 

We are also required by law to keep financial records for 7 years, so guests cannot ask to be erased from these financial records.

 

If you book to stay direct with us and complete a booking form, then be assured that your details are kept secure on our system via password controlled entry and are not used for any other purpose or shared with any other person or business.  We need your email address to send through booking forms, answer any queries you have regarding the property or to send you terms & conditions, booking confirmation etc.  We will send you a follow up email after your stay to thank you for staying, asking you to leave a review or feedback and details of how to stay in contact with us. We don’t need explicit consent for this. We will NOT add you to a marketing mailing list.

​

If you book via one of our booking partners, for example Book Cycling Holidays, Holiday France Direct or Holiday Lettings, they have also to comply with GDPR regulations and have their own safeguards and policies.

​

Similarly, if you choose to follow us on social media (eg Facebook or Instagram), we don’t need consent as you have already accepted the terms & conditions on that platform.  Again, we will not ask you for your email address in order to send you newsletters etc. 

​

Notification of Data Breaches

The GDPR will require us to notify the Information Commissioner’s’ Office within 72 hours of first having become aware of the breach where that breach is likely to “result in a risk for the rights and freedoms of individuals”. For any breach, we are required to notify the customers “without undue delay” after first becoming aware of a data breach.

​

Privacy policy updates

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.