Privacy Policy
This translation is provided for information purposes only: the French version alone is legally binding.
Data Controller
The controller responsible for the processing of personal data is Terra D'Oro, which can be contacted at contact.terradoro@gmail.com.
Data Collected
When you use this website, and in particular when you book a stay, we collect the following data:
- Full name
- Email address
- Telephone number (optional)
- Payment details (processed exclusively by Stripe)
- Special requests entered in the form
- Messages sent through the contact form (name, email address, subject, message)
- Pseudonymous browsing data (pages viewed, where the visit came from, type of device), collected by Google Analytics
Purposes of Processing
Your data is used for the following purposes:
- Managing your bookings and your stay
- Communicating with you about your stay (confirmation, practical information)
- Responding to your enquiries
- Improving our services and the user experience
- Measuring website traffic and completed bookings
Legal Basis
The processing of your data is based on the performance of a contract (booking a stay) and on your consent for communications not directly related to the booking. Analytics is based on your consent, given through the banner shown on your first visit; you may withdraw it at any time (see “Cookies and Analytics” below).
Retention Period
Your personal data is kept for as long as necessary to manage your stay, then archived in accordance with French legal and tax obligations (for a maximum of 5 years). Analytics data is retained by Google Analytics for a maximum of 14 months.
Payment Security
Payments are handled entirely by Stripe, a PCI-DSS Level 1 certified provider. No card details are stored on our servers.
Your Rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
To exercise these rights, please contact us at contact.terradoro@gmail.com.
Cookies and Analytics
This website uses the following cookies:
- Session cookie (td_session): strictly necessary for the website and the booking process to work (form security, booking in progress). It is deleted when you close your browser.
- Consent cookie (td_consent): remembers whether you accepted or declined analytics, so that you are not asked again on every page. It is kept for 6 months.
- Google Analytics cookies (_ga, _ga_…), set only if you accept them: they show us, on a pseudonymous basis, how the website is used (pages viewed, where visits come from, device used) and how many bookings are made. They are kept for a maximum of 13 months.
Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Some data may be transferred to the United States under the EU–US Data Privacy Framework, to which Google is a party. If you have accepted these cookies, the cookie’s technical identifier is linked to your booking so that completed bookings can be measured (villa, amount); otherwise, the booking may be counted without any cookie or browser identifier. In either case, neither your name nor your email address is passed on to Google.
On your first visit, a banner lets you accept or decline these analytics cookies; none are set until you have made your choice. Declining has no effect on browsing or booking. Your choice is stored for 6 months, after which you will be asked again. You can change it at any time via the “Cookie settings” link at the bottom of every page: if you withdraw your consent, the Google Analytics cookies are deleted. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
No advertising cookies are used. To display certain resources, the website relies on third-party services that receive your IP address: Google Fonts (typefaces), jsDelivr (booking calendar) and Stripe (payment page, which is subject to its own privacy policy). The links to WhatsApp and Instagram only send data to those services if you use them. Finally, the fact that you have closed the language suggestion banner may be remembered in your browser's local storage; this information is never transmitted.