Privacy policy

Last updated: 17 September 2026

This page explains what personal data we collect on www.aux-quatre-coins-du-monde.fr, why, how long we keep it, who it is passed on to and what your rights are. It complies with the General Data Protection Regulation (GDPR) and French Act no. 78-17 of 6 January 1978 on information technology, data files and civil liberties.

1. Who is responsible for your data?

Aux Quatre Coins du Monde
2 rue de la Mairie, 58400 Champvoux, France
E-mail: contact@aux-quatre-coins-du-monde.fr – Telephone: +33 6 68 30 71 55

2. What data do we collect, and why?

Booking a stay

When you book, we collect your surname, first name, e-mail address, telephone number, your postal address where applicable, the dates of your stay, the number of guests and any special requests.

This data is used to record and manage your booking, to contact you about your stay and to issue your invoice.

Legal basis: performance of the booking contract. Keeping invoices meets a legal obligation.

Well-being activity requests

If you would like a massage, a reflexology session or a yoga session, we collect your request in order to pass it on to the independent practitioner who comes to the guest house.

Legal basis: your request to be put in touch with her, and our legitimate interest in acting on it.

Online payment

Payment of the deposit (or of the full stay) is handled by one of our payment providers, Stripe or PayPal, depending on the method you choose. Your bank details are entered directly with that provider: we never have access to them and we do not store them. We only receive confirmation of payment.

Legal basis: performance of the booking contract.

Contact form

When you write to us, we collect your name, e-mail address, telephone number and message. This data is sent to our mailbox and is not stored in any website database. It is used solely to reply to you.

Legal basis: our legitimate interest in answering enquiries sent to us.

Protection against unwanted messages

The contact form is protected by the Cloudflare Turnstile service. It analyses technical information (IP address, browser characteristics) in order to tell a human visitor from a robot. It is not used for advertising purposes.

Legal basis: our legitimate interest in protecting the website against spam.

Technical data

Like any website, our host records technical logs (IP address, date and time of connection, pages viewed). These are used for security and for the proper operation of the website.

Legal basis: our legitimate interest and the legal obligation to retain connection data.

3. How long do we keep your data?

Booking data: for the duration of the business relationship, then 3 years after your last stay.
Invoices and accounting records: 10 years, as required by the French Commercial Code.
Messages received through the contact form: 3 years after our last exchange.
Technical logs: 1 year at most.

4. Who has access to your data?

Your data is accessible only to the manager of the guest house. We do not sell it and we do not rent it out.

When you request a well-being activity, we pass your name and the requested date on to the independent practitioner who provides it, so that she can arrange the appointment with you. She then uses this information under her own responsibility.

Your data is also processed on our behalf by the following technical providers:

OVH SAS (France): website hosting.
Our e-mail provider: receipt of e-mails.
Stripe Payments Europe Ltd (Ireland): online card payments.
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): online payments via PayPal.
Cloudflare, Inc. (United States): protection of the form against spam.

Where the law requires it, certain data may be disclosed to the authorities (for example the tax administration).

5. Transfers outside the European Union

Stripe, PayPal and Cloudflare may process certain data in the United States. These transfers are covered by the safeguards provided for by the GDPR: the EU–US Data Privacy Framework, the European Commission’s standard contractual clauses or, in PayPal’s case, its binding corporate rules approved by the European authorities.

6. Cookies

Our website uses only cookies that are necessary for it to work and to stay secure. These cookies do not require your consent. We use no advertising cookies, no audience measurement cookies and no social network cookies.

Language cookie: remembers the language you have chosen (French or English).
Booking cookies: keep your selection while you are booking.
Stripe and PayPal payment cookies (during payment only): used to secure the transaction and prevent fraud.
WordPress login cookies: concern website administrators only.

You can delete these cookies from your browser settings. The website may then no longer work properly, in particular for bookings.

7. What are your rights?

At any time you may:

access your data and obtain a copy of it;
have it corrected if it is inaccurate;
request its erasure;
request that its use be restricted;
object to its use;
receive the data you have provided to us in a readable format, in order to pass it on to another provider (right to data portability).

To exercise these rights, write to us at contact@aux-quatre-coins-du-monde.fr or by post at the address given above. We will reply to you within one month at most.

If you believe that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr.