Privacy policy
La Neyrette attaches great importance to the protection of your privacy and your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
- Controller
- La Neyrette (SARL)
- Address
- 23 route des Gillardes, Saint-Disdier, 05250 Le Dévoluy
- info@la-neyrette.com
- Phone
- +33 (0)4 92 58 81 17
2. What data we collect and why
| You are… | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Using the contact form | Name, email, phone, message | Answering your enquiry | Legitimate interest or your consent |
| Booking a room online Alliance Réseaux module, Hotel page |
Identity, contact details, dates and stay details, payment | Managing your booking and your stay | Performance of the contract |
| Booking by telephone or via the contact form | Identity, contact details, dates and stay details | Managing your booking and your stay | Performance of the contract |
| Booking a spa treatment Booksy |
You are redirected to the provider's platform, which processes your data under its own policy | Appointment booking | Provider's responsibility |
| Browsing the site | Technical connection data recorded by the server, including the IP address | Website security and fault diagnosis | Our legitimate interest |
We collect only the data that is strictly necessary and do not use it for any purpose other than those stated. No data is sold to third parties.
3. Recipients and processors
Your data may be processed by our technical providers acting on our behalf:
- Website hosting and technical maintenance: Piment Rouge, on Alp'Cloud infrastructure
- Online booking engine: Alliance Réseaux, Open System platform
- Mapping: OpenStreetMap, no advertising cookie
- Fonts: Google Fonts (Google Ireland Limited)
- Social networks: our Facebook and Instagram pages are plain links, no content from these platforms is embedded in the site
- Contact form protection: Google reCAPTCHA (Google Ireland Limited)
4. Transfers outside the European Union
The site is hosted in France. Two Google services are nevertheless loaded from its pages and receive your IP address in the process: the fonts (Google Fonts), on every page, and reCAPTCHA, on the Contact page only, described in section 8. This data may be transferred outside the European Union, including to the United States. These transfers are governed by appropriate safeguards, the European Commission's standard contractual clauses, ensuring an adequate level of protection.
5. Retention periods
- Contact form enquiries:1 year from the last contact.
- Booking data:the duration of the stay, then accounting records and invoices kept for 10 years, a legal obligation.
- Administration area protection: IP addresses and usernames from failed login attempts, 60 days.
6. Your rights
At any time you have the following rights over your data: access, rectification, erasure, objection, restriction and portability, as well as the right to give instructions about what happens to your data after your death.
To exercise them, contact us at info@la-neyrette.com. You will receive a reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL, www.cnil.fr.
7. Cookies
On your first visit, a consent banner lets you accept or refuse non-essential cookies. You can change your choice at any time using the "Cookies" button at the bottom of the screen, or by opening your preferences here.
- Strictly necessary cookies, set without consent: site operation, remembering your consent choice, and showing our information messages only once, for example our closing dates, which do not reappear for a month after you have closed them.
- Audience measurement: to date the site uses no traffic statistics tool, and no cookie of this kind is set.
- Social networks: no content from Facebook or Instagram is embedded in the site. Our pages on these networks are reachable through plain links, and if you follow them, those platforms' own rules apply.
- Booking module: the Alliance Réseaux module is loaded on the Hotel page and may set there the technical cookies needed to search availability and complete your booking.
- Contact form protection: the Google reCAPTCHA service, described in section 8, is loaded on the Contact page and may set there the technical cookies it needs to work.
8. Security
The site is served over HTTPS, an encrypted connection. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.
Access to the administration area is protected against automated password guessing: after 5 failed attempts, the IP address concerned is temporarily blocked. This protection records the IP address, the username tried and the date, for 60 days, on the basis of our legitimate interest in protecting the website.
Contact form protection (reCAPTCHA)
To prevent robots from sending automated messages, our contact form is protected by the Google reCAPTCHA service, provided by Google Ireland Limited.
When you tick the “I'm not a robot” box, Google collects and analyses technical information about your browsing (IP address, browser type, mouse and cursor movements, time spent on the page) in order to determine whether the request comes from a human being. This data may be transferred to Google in the United States, under the safeguards described in section 4.
This check is based on our legitimate interest in protecting the website against abusive submissions and fraud. It concerns the Contact page only: Google's service is loaded as soon as that page opens, and the analysis takes place when you tick the box, before your message is sent.
The use of reCAPTCHA is subject to Google's privacy policy and terms of service.
9. Contact
For any question about this policy or your personal data: La Neyrette, 23 route des Gillardes, Saint-Disdier, 05250 Le Dévoluy, info@la-neyrette.com, +33 (0)4 92 58 81 17.