enfrnl
Book now

Privacy Policy

Last updated: November 4, 2026

1. Who is responsible for your data

The data controller is Rare Retreat Villas [legal form and registered name, e.g. SARL / sole trader], owner of Villa Mané and Sa Blava. Contact: vincent@hk97vince.com. The website is built and maintained by CBM Agency on the owner's behalf.

2. What we collect and why

  • Contact and booking requests — name, email, dates, number of guests and your message. Used to answer you. Legal basis: steps taken at your request before a contract.
  • Bookings — name, contact details, guests and stay details. Used to manage your stay and meet our legal obligations (accounting, tourist tax). Legal basis: the contract and legal obligations. Card details are handled by Stripe; we never see your full card number.
  • Guest reviews — name, email (never shown), rating, text and month of stay. Used to publish your review once approved. Legal basis: your consent.
  • Summer-weeks list — your email. Used to tell you when dates open. Legal basis: your consent. You can unsubscribe at any time.
  • AI chat assistant — the questions you type. Used to answer you; not used to identify you. If you choose to send the chat to the owner, your email and the conversation are emailed to him. Legal basis: legitimate interest (answering your questions) and, for the hand-off, steps at your request before a contract.
  • Sa Blava guest registration — ID details of each guest, sent to the Catalan police (Mossos d'Esquadra) as Spanish law requires and kept for 3 years. Legal basis: legal obligation.
  • Technical data — IP address and browser information in our host's server logs. Used to keep the site secure. Legal basis: legitimate interest.

3. Who receives your data

Your data is used by the owner and, for website maintenance only, by CBM Agency. It is never sold. We use these service providers, who process data on our instructions:

  • Vercel Inc. — website hosting (United States)
  • Smoobu GmbH — booking management (Germany)
  • Stripe — payments
  • Sanity — storage of guest reviews and journal content
  • Anthropic — AI chat assistant (United States)
  • Resend (United States) — delivery of contact and booking requests

Where data is transferred outside the European Union, it is protected by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

4. How long we keep it

  • Requests that do not lead to a booking: up to 3 years after our last contact.
  • Booking and accounting records: 10 years, as required by French law.
  • Reviews: for as long as they are published, or until you ask us to remove them.
  • Summer-weeks list: until you unsubscribe.
  • Server logs: up to 12 months.

5. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Write to vincent@hk97vince.com. We reply within one month.

If you think your rights have not been respected, you can complain to the CNIL (cnil.fr), the French data protection authority, or to the authority in your own country.

6. Cookies

See our Cookie Policy for details.