Privacy policy

This privacy policy describes how the website lozeviewcourchevel.com (hereinafter ‘the Website’) collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

Website manager: Stéphane Salto, ISCA SAS

Email: [email protected]

The data controller ensures the protection and confidentiality of personal data collected via the Website.

2. Data collected

We only collect data that is strictly necessary for the proper functioning of the Website and the management of bookings:

2.1. Via the booking module

• Surname, first name
• Email address
• Telephone number
• Postal address (if requested)
• Information related to the stay (dates, number of people, special requests)
• Payment data (processed by a secure third party, not directly by the Website

2.2. Via the contact form

• Surname

• Email address
• Message and information provided voluntarily

2.3. Technical data

• IP address

• Browser type
• Visitor statistics (if audience measurement tools are activated)

No sensitive data is collected.

3. Purposes of collection

The data is used to:

• Manage bookings and relations with travellers

• Respond to requests made via the contact form
• Ensure the proper technical functioning of the Website
• Improve navigation and user experience
• Comply with the owner's legal and tax obligations

Data is never sold, exchanged or transferred to third parties for commercial purposes.

4. Legal basis for processing

In accordance with the GDPR, processing is based on:

• The performance of a contract (booking, management of the stay)
• Consent (contact form, non-essential cookies)
• Legitimate interest (website security, anonymised statistics)
• Legal obligation (accounting, declarations)

5. Recipients of the data

Data may only be transmitted to:

• the website host,
• the secure payment provider,
• any technical service providers essential to the functioning of the Website (maintenance, hosting).

No commercial transfer to third parties is carried out.

6. Retention period

Data is retained:

• Reservations: 5 years (legal and tax obligation)
• Contact form: 12 months
• Browsing data: 13 months (cookies)
• Customer accounts (if any): for as long as the account is active

Beyond this period, it is deleted or anonymised.

7. Data security

We implement technical and organisational measures to protect your data against:

• unauthorised access,
• modification,
• disclosure,
• loss or destruction.

Payments are processed via a secure service provider, guaranteeing the confidentiality of banking data.

8. Your rights (GDPR)

You have the following rights:

• Right of access to your data
• Right of rectification
• Right to erasure (‘right to be forgotten’)
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to withdraw your consent at any time (form, cookies)

To exercise your rights: [email protected] will receive a response within a maximum of 10 days.

9. Cookies

The Website may use cookies to:

• ensure proper functioning (essential),
• measure audience (anonymised statistics),
• improve the user experience.

During their first visit, users may accept or refuse some cookies.

Cookie management can be configured via the browser.

10. External links

The Website may contain links to third-party websites.

We are not responsible for:

• the content of these websites,

• their privacy practices.

11. Changes to the Privacy Policy

This Policy may be updated at any time.

The applicable version is the one in force on the date of consultation.