Privacy Policy
Last updated: 08/06/2026
1. Data Controller
CASA BATTAGLIOLA SASU 158 route de Casta, 20246 Santo Pietro di Tenda, France Email: casabattagliola@gmail.com — Phone: +33 6 79 37 85 59
No Data Protection Officer (DPO) has been appointed. For any data-related request, use the contact details above.
2. What Data We Collect
We collect personal data only when you provide it or when it is generated by your use of the site:
- Contact and booking enquiries: first and last name, email address, phone number, requested dates, number of guests, and any information you include in your message.
- Booking and payment: data required to process your reservation and payment, handled through our booking system.
- Browsing data: essential technical data needed for the site to function (see section 7).
We do not collect any "special category" data (health, religion, etc.).
3. Why We Use Your Data, and on What Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to enquiries and managing bookings | Performance of a contract / pre-contractual steps |
| Processing payments for your stay | Performance of a contract |
| Customer relationship and follow-up | Legitimate interest |
| Sending commercial messages (only if you opted in) | Consent |
| Meeting accounting and tax obligations | Legal obligation |
4. Who Has Access to Your Data
Your data is accessed only by CASA BATTAGLIOLA and by the service providers (processors) strictly necessary to operate the site:
- Shopify International Limited (Ireland) — website hosting and infrastructure.
- Smoobu GmbH (Germany) — booking, calendar, and payment management. Payment transactions are handled through Smoobu's secure payment partner.
We do not use any third-party analytics or advertising tools. Some providers may transfer data outside the European Economic Area; where this occurs, transfers are governed by the European Commission's Standard Contractual Clauses or an equivalent safeguard. We never sell your personal data.
5. How Long We Keep Your Data
- Enquiries with no booking: up to 3 years from your last contact.
- Booking and customer data: for the duration of the relationship, then archived as required.
- Invoicing and accounting records: 10 years, as required by law.
6. Your Rights
Under the GDPR, you may at any time request: access to your data, rectification, erasure, restriction or objection to processing, and data portability. You may also withdraw your consent at any time and define guidelines for the use of your data after your death.
To exercise these rights, contact casabattagliola@gmail.com. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).
7. Cookies
This site uses only cookies that are strictly necessary for its operation and for processing your booking (set by Shopify and the Smoobu booking module). As these cookies are essential, they do not require your prior consent. We do not use any tracking, analytics, or advertising cookies.
8. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
9. Changes
This policy may be updated. The applicable version is the one published on this page, with its date shown above.