Privacy Policy

Who We Are

This website is operated by Ayman Boussalem (Entreprise Individuelle), based at 3 Rue Furstenberger, 68200 Mulhouse, France. For any question regarding your personal data, contact us at villaserenacharm@gmail.com.

What Data We Collect

When you submit a booking request or contact us, we collect: your name, email address, phone number, and payment details (processed directly by Stripe — we do not store your card information).

Why We Collect It, and On What Basis

We process your data on the following legal bases, in accordance with Article 6 of the GDPR:

• To process your booking request and, if confirmed, to perform the resulting contract (performance of a contract).
• To respond to your questions when you contact us (legitimate interest in providing customer service).
• To keep accounting and billing records (compliance with a legal obligation).

Who We Share It With

Your data is shared only with the parties necessary to process and fulfil your booking:

• The villa owner, to organize your check-in and stay
• Stripe (payment processing)
• Resend (transactional emails, e.g. booking confirmations)
• Vercel (website hosting)
• Neon (database hosting, EU Central region)

We do not sell or rent your personal data to third parties.

Where Your Data Is Stored

Your booking data is stored on servers located in the European Union (EU Central). Payment data is processed and stored by Stripe in accordance with their own privacy policy.

Some of our service providers (including Vercel and Stripe) are based in the United States and may process data outside the European Union as part of providing their services. Where this occurs, it is carried out under an approved transfer mechanism, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How Long We Keep It

Booking data is kept for the duration necessary to process your stay and comply with legal accounting obligations (up to 10 years for financial records, in accordance with French law). Contact form submissions not leading to a booking are deleted after 12 months.

Your Rights

In accordance with the GDPR, you have the right to access, correct, delete, or request a copy of your personal data, and to object to or restrict its processing. To exercise these rights, contact us at villaserenacharm@gmail.com. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

Cookies

This website uses only strictly necessary cookies required for the booking and payment process, including cookies set by Stripe for fraud prevention. These cookies do not require consent under applicable law, as they are essential to the service you request. We do not use analytics or advertising cookies.