Privacy and Data Protection

Last updated: January 2026

Who is responsible for your data

Data controller: Stay Courchevel 1650
Legal name: PATRIMOINE 73 SAS
202 Boulevard Saint Germain
75007 Paris
France
Email: [email protected]

We decide how your personal data is collected and used on this website.

What data we collect

We collect only the data needed to reply to you and operate the website. We may collect:

  • Your name
  • Your email address
  • Your phone number (if you provide it)
  • Your message from the contact form

We also collect technical data such as:

  • IP address
  • Browser type
  • Pages visited
  • Date and time of visit
  • Device and operating system information

We do not intentionally collect sensitive data. We do not profile users. We do not sell or share your data with commercial partners.

How we collect your data

We collect data in three ways:

a) When you contact us
You provide your name, email, and message (and phone number if you choose).

b) When you browse the website
Technical data is collected automatically by our hosting provider and any analytics tools we use.

c) Through third-party content
Embedded tools (for example the Airbnb widget, Google Maps, or the weather widget) may collect technical data for their own purposes. They follow their own privacy policies.

Why we use your data

We use your data for clear and limited purposes:

  • To reply to your messages and contact requests
  • To manage requests related to your stay or potential stay
  • To maintain, secure, and improve the website
  • To comply with legal obligations (tax, tourism regulations, fraud prevention)

Legal bases under GDPR

We process your data only when a legal basis applies:

  • Consent: When you submit a contact form or accept non-essential cookies.
  • Pre-contractual steps: When we respond to a request about availability, prices, or conditions before a possible booking.
  • Legitimate interest: To keep the website secure and functioning and to improve its performance.
  • Legal obligations: Compliance with applicable tax, tourism, and anti-fraud rules.

Who receives your data

We share your data only when necessary:

  • Our hosting provider: Bluehost Inc. (United States)
  • Our email provider: Titan Email (Flock FZE / Titan)
  • Analytics provider: Google Analytics (Google LLC, United States)
  • Video content provider: YouTube (Google LLC, United States)
  • Security and protection providers:
  • Wordfence Security (Defiant Inc., United States)
  • Cloudflare, Inc. (United States) — for DNS, security, and performance
  • Image optimization provider: ShortPixel Image Optimizer (ID SC Technology SRL, Romania – EU)
  • Public authorities when required by law, for example in connection with tourist tax, safety obligations, or fraud investigations.

Kadence Forms is used to collect messages submitted through the contact form; these messages are processed directly through our hosting and email systems and are not sent to external processors unless you explicitly enable third-party integrations.

Commercial Use & Third Parties:
We do not sell, trade, or rent your personal data to third parties for their marketing purposes. However, our website uses embedded third-party tools (such as YouTube and Google Maps) which may collect data for their own advertising networks. This processing is governed by the privacy policies of those third-party providers.

Data transfers outside the EU

Some providers are based outside the European Union, mainly in the United States. When this happens, we use only providers that offer adequate protections, such as:

  • Standard Contractual Clauses (SCC)
  • EU–US Data Protection Framework (DPF) or equivalent safeguards

You can contact us for more details about these safeguards.

How long we keep your data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Messages & Inquiries:
    We keep your messages for the duration necessary to handle your request and for the duration of our commercial relationship. If you do not book, we may retain your contact details for a limited period to facilitate future inquiries, unless you request deletion.
  • Booking Records:
    We retain booking-related data for the duration required by French tax and accounting laws (typically 10 years for accounting documents).
  • Technical & Security Logs:
    These are retained on a rolling basis as determined by our security and hosting providers to ensure the safety of the website.
  • Analytics & Cookies:
    Retention is determined by the specific cookie settings described in our “Cookie Policy”.

Your rights

Under GDPR, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to certain processing
  • Receive a copy of your data in a portable format
  • Withdraw your consent at any time (for example, for cookies or contact subscriptions)
  • Lodge a complaint with a supervisory authority (CNIL in France)

To exercise your rights, you can contact us at:
Email: [email protected]

We will reply within 30 days, where possible.

Security

We take reasonable technical and organizational measures to protect your data, including:

  • Use of HTTPS for encrypted connections
  • Secure access to email and hosting accounts
  • Restricted access to data on a need-to-know basis
  • Regular updates of our systems and services
  • Use of trusted service providers

No internet system is 100% secure, but we take steps to reduce risks.

Cookies and tracking

This page does not describe cookies in detail. All information about cookies and how to manage your choices is available in our “Cookie Policy”.

External services and embedded content

Our pages may include third-party services, such as:

  • Airbnb listing embed
  • Google Maps for location
  • Weather widget
  • Social media links or future embeds
  • Analytics or security scripts

These services may collect data independently. Please refer to their own privacy policies for more detailed information.

Consumer mediation

This page does not describe dispute-resolution procedures. For information about consumer mediation and the mediator’s contact details, please see our “Legal Notice” page.

Changes to this policy

We may update this page if we change how we use your data or to comply with changes in law. The latest version is always published here, with the “Last updated” date at the top.

Contact

For any question about your data or this policy contact Stay Courchevel 1650 at [email protected]