Last update: 26 August 2025

1. Data controller: The data controller is: LMNP AUSSANT GESIARZ, owner of the house located in Gavarnie (65). Email: contact@villasgrandsites.fr

2. Data collected: We only collect information necessary for managing bookings and stays: surname, first name, email address, telephone number, postal address, payment information (via a secure platform), stay details (dates, number of people)

3. Purpose of collection: This data is used solely for the following purposes: managing bookings and payments, communicating with guests before, during and after their stay, and complying with our legal obligations (invoicing, tourist tax, accounting). It is never sold or passed on to third parties for commercial purposes.

4. Recipients of the data: Only the owner and any necessary service providers (booking platform, payment solution) have access to the data collected.

5. Retention period: Booking data is retained for 15 years (legal obligation for accounting and tax purposes). Bank details are not retained by the owner but are managed by a secure PCI-DSS compliant service provider (Wannapay, Stripe).

6. Security: We implement all necessary technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or destruction.

7. User rights: In accordance with the GDPR, you have the following rights: right of access, rectification, erasure, restriction or objection to processing, and data portability. To exercise your rights, you can contact us at the following email address: villasgrandsites@gmail.com.

8. Cookies: The website may use technical cookies necessary for its proper functioning. They are not used for advertising purposes.

9. Applicable law: This policy is governed by French law. Any dispute shall be submitted to the competent courts of the owner's place of residence.