Privacy Policy

§1 — Data controller

JUDVI SAS (details above). For any question concerning personal data: privacy@chateaudubu.fr

§2 — Data collected, purposes and legal bases

a) Booking accommodation — identity, contact details, stay dates and details, bank card registration, and an indication of the channel through which you reached our site (one word, without click identifier or full address, derived from the campaign parameters of the arrival address; no cookie and no storage in your browser). To manage the booking and the stay: performance of the contract. To know which channels bring us bookings, internal statistics sent neither to Google nor to our agencies: legitimate interest, which you may object to (§ 7).

b) Private hire of the estate — name, contact details, billing address, event information, designated person in charge, declared service providers. Purpose: preparing the quotation and contract, performing the service. Basis: performance of the contract.

c) Event registration, dormitory night — name, contact details, number of participants, address where an invoice is requested. Purpose: registration, payment, reception. Basis: performance of the contract.

d) Invoicing and accounting — name, address, amounts, VAT. Basis: legal obligation.

e) Tourist tax — number of adults and minors, nights, amounts. Basis: legal obligation (French local authorities code).

f) Guests of foreign nationality — individual police form. Basis: legal obligation (art. R611-42 CESEDA).

g) Contact and quotation requests — name, contact details, description of the project. Basis: pre-contractual measures and legitimate interest.

h) Video protection — images of the entrance gate, car park and hotel lobby. Purpose: safety of people and property. Basis: legitimate interest.

i) Site security — technical logs (IP address, timestamp). Basis: legitimate interest.

j) Site messaging (“chat”) — the text of your messages, any voice recordings you choose to send and their transcription, your browser language, the page viewed, the time and, if you open the chat from a booking page, the details of your current search (dates, number of guests, arrival channel) so that the reply can take them into account. To answer your request. Pre-contractual steps and legitimate interest. No account or address is requested: the conversation is linked to a random identifier kept in your browser. These exchanges are not retained (see § 6) and you can delete them yourself at any time from the chat window.

k) Audience and advertising performance measurement — on the hotel booking pages, if you arrive through a campaign link and if you accept it: cookie identifier, pages viewed, campaign parameters of the arrival address (including the advertising click identifier), technical characteristics of your browser; on the booking confirmation page, the booking number, amount and currency. To measure site traffic and the effectiveness of our Google Hotel Ads. Consent, withdrawable at any time (§ 8). No identity data (name, email, phone) is sent to the measurement tool.

No sensitive data is requested. You will never be asked for a bank card number in the messaging. No decision producing legal effects is taken by automated means. Data is never sold or transferred to third parties for commercial purposes.

§3 — Payment and card registration

Payments and card registration are handled by Stripe. JUDVI never keeps the card number: only a technical identifier (token) is retained, allowing the agreed charge to be made at the agreed time.

§4 — Recipients and processors

Authorised JUDVI staff; our service providers acting on our instructions: Sirvoy (booking system), Stripe (payment), Google Workspace (email and office tools), Google Ireland Limited (Google Analytics — audience measurement, only if you consent), Pennylane (accounting), Anthropic (Claude assistants used for day-to-day operations and to reply in the site chat), Cloudflare (site delivery: traffic relay and protection against attacks), Cloudbeds — myallocator (channel manager for bookings sent by platforms) and AdsHotel (the agency managing our Google Hotel Ads campaigns, which may in that capacity view the measurement statistics — aggregated and pseudonymous, without identity); our chartered accountants; public authorities where the law requires it (tax services, the municipality for the tourist tax, the police for individual registration forms).

§5 — Transfers outside the European Union

Some providers process data outside the European Union. Such transfers are governed by the safeguards provided for by the GDPR: standard contractual clauses and, where applicable for the United States, the Data Privacy Framework. The corresponding data processing agreements are held by JUDVI.

§6 — Retention periods

Bookings and registrations: 3 years after the end of the relationship. Accounting records: 10 years (legal obligation). Tourist tax register: 4 years. Individual police form: 6 months. Enquiries not followed up: 3 years from the last contact. Video protection images: 30 days. Technical logs: 12 months.

Site messaging: visitors’ conversations are not retained — they disappear no later than 24 hours after the last message, or as soon as you press “Erase”. A voice recording is deleted as soon as its transcription succeeds.

Audience measurement: visit data (events) 2 months at Google; data associated with your browser identifier 14 months (the service's minimum); measurement cookies 13 months at most; your choice (acceptance or refusal) 6 months in your browser.

§7 — Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. They may be exercised at privacy@chateaudubu.fr; you will receive a reply within one month. Erasure cannot extend to documents we are required by law to keep, in particular accounting records.

You may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

§8 — Cookies and trackers

The site sets no cookies of its own: no session cookie, no language cookie. It loads no fonts or resources from external services, with the sole exception of the measurement tool described below — and only after your consent.

Audience measurement (Google Analytics 4). On the hotel booking pages, and only if you arrive through a campaign link (an address containing advertising campaign parameters), a banner invites you to accept or refuse audience measurement: both buttons look the same, nothing is pre-ticked, and nothing is loaded until you choose. Other visitors are not asked and nothing is loaded for them. Until you accept, no Google script is loaded, no measurement cookie is set and no data is sent to Google. If you accept:

— _ga (Google, set on our domain): pseudonymous identifier of your browser, to tell visits apart — 13 months, not extended by later visits;

— _ga_6DT3Y4WRQ9 (Google, set on our domain): state of the current visit — 13 months, not extended.

The data — pages viewed (address reduced to the path and campaign parameters, without stay dates or number of guests), technical characteristics of the browser and, on the confirmation page, booking number, amount and currency — are sent to Google (www.googletagmanager.com, region1.google-analytics.com) and processed by Google Ireland Limited on our behalf, to measure site traffic and the effectiveness of our Google Hotel Ads. Visit data is kept for 2 months at Google, and data associated with your browser identifier for 14 months (the service's minimum); it may be transferred to the United States under the Data Privacy Framework (§ 5). No identity data is sent; Google signals and ads personalisation are disabled, and only storage for measurement purposes is allowed — Google's advertising purposes remain refused.

Your choice — acceptance or refusal — is kept in your browser for 6 months, after which you are asked again; you are also asked again if this section changes. If you accepted, measurement remains active on your later visits to these pages, whatever your arrival path, until your choice expires or you change it. You can change it at any time through the "Cookie settings" link in the footer of the booking pages; if you refuse, the measurement cookies are deleted immediately and the tool is stopped.

Cookies are placed only when you begin a booking and a payment, by our payment provider Stripe and by the anti-bot service hCaptcha which Stripe uses:

— __stripe_mid (Stripe, placed on our domain): device identification for fraud prevention — 365 days.

— __stripe_sid (Stripe, placed on our domain): payment session identification — 30 minutes.

— m (Stripe, m.stripe.com domain): device fingerprint for fraud prevention — 400 days.

— __cf_bm (Cloudflare via hCaptcha, hcaptcha.com domain): bot detection — 30 minutes.

These cookies are strictly necessary to the security of the payment you have requested: they serve neither advertising nor audience measurement, and therefore do not require consent. The Stripe script is loaded as soon as the booking page opens, so that fraud prevention can draw on the browsing path; as a result, connection data (including the IP address) is sent to Stripe even if the booking is not completed.

Your browser also keeps, locally and without sending anything to anyone: your language choice, the events you marked as favourites, your audience-measurement choice (with its date and the version of this policy), and — if you open the chat — the random identifier of your conversation and the display state of the window. For the duration of one visit only, cleared when the tab closes: a marker that you arrived through a campaign link, the entry address reduced to its campaign parameters (cleared as soon as you choose), and a marker preventing a booking from being counted twice. These items are necessary for the service you request.

§9 — Video protection

The entrance gate, the car park and the hotel lobby are under video protection, for the safety of people and property. There are no cameras in the bedrooms, the toilets, the relaxation areas or areas reserved for staff. Images are recorded on local equipment, may be viewed by the company director alone, and are kept for 30 days. Signage is displayed in each filmed area.

§10 — Security

On-site server with restricted physical access, encryption of communications, individual accounts and two-factor authentication for administration, backups, logging of sensitive actions, and automatic deletion of data at the end of the periods set out above.

§11 — Changes

This policy may be updated; the version in force is the one published on the site, with its date.