1. Data Controller. The rentygo.fr website (“the Site”) is operated under the Rentygo brand by ECHAPURSA, a simplified joint-stock company (SAS) with a capital of €1,000, registered with the Dax Trade and Companies Register (RCS) under number 937 839 819, with its registered office at Résidence Côte Basque — Tour Bateau, 771 boulevard de la Dune, 40150 Soorts-Hossegor. ECHAPURSA processes personal data (“the Data”) concerning Site users and customers booking a stay, acting as the data controller within the meaning of Regulation (EU) 2016/679 (GDPR) and the “Informatique et Libertés” law. For any questions regarding this policy or your Data: echapursa@gmail.com or by mail to the registered office.
2. Data Collected. ECHAPURSA may collect: identification data (surname, first name, postal address, email, telephone, country of residence); data relating to the stay (dates, reserved accommodation, number of travelers, preferences, content of exchanges); billing and payment data (amounts, terms, invoice references — the processing of credit card data is entrusted to the secure payment provider Stripe; ECHAPURSA does not retain the full card number); inventory data (timestamped photographs of the accommodation); connection and navigation data (IP address, connection logs, pages viewed, cookies — see below). This Data is collected directly from you (booking, contact form, exchanges) or automatically during navigation.
3. Purposes and Legal Bases. Your Data is processed for: managing bookings and executing the rental contract (registration, confirmation, stay management, access provision, assistance) — legal basis: contract performance; billing and accounting — contract performance and legal obligation; managing the security deposit, inventories, claims, and recovery (including the establishment of proof in case of payment dispute) — contract performance and legitimate interest; fraud prevention and security — legitimate interest; sending information and commercial offers (newsletter) — consent, collected via an unchecked checkbox; you can unsubscribe at any time via the link in each message or by writing to echapursa@gmail.com; audience measurement and Site improvement — consent (cookies).
4. Data Recipients. The Data is intended for ECHAPURSA’s internal services and, within the scope of their missions, for its subcontractors and partners: payment provider (Stripe), booking tool and Site host (OVH, France), review management tool (Trustindex), booking platforms where applicable (Airbnb, Booking.com, Abritel), email service providers, accountant, and advisors. It is neither sold nor rented to third parties.
5. Retention Periods. Data is retained for limited and proportionate periods: booking and contract performance data — duration of the contract then applicable limitation period (generally 5 years); billing data — 10 years from the end of the financial year; inventory and security deposit data — applicable limitation period for liability actions; prospecting data — 3 years from the last active contact or until consent is withdrawn; cookies — limited durations compliant with CNIL recommendations.
6. Cookies and Trackers. During your first visit, a consent banner (Complianz module) allows you to accept or refuse, globally or by purpose, the deposit of non-essential cookies. Technical cookies strictly necessary for the operation of the Site (session, security, booking cart, language memorization) are placed based on legitimate interest and do not require consent. Audience measurement and third-party service cookies (e.g., Google Maps for accommodation location, Trustindex for displaying reviews) are only placed with your consent. You can change your choices at any time via the “Manage cookies” link on the Site or your browser settings. To learn more: www.cnil.fr.
7. Transfers Outside the European Union. If Data transfers are made to third countries (particularly by certain American providers such as Stripe or Google), ECHAPURSA ensures that they are governed by appropriate safeguards (adequacy decision, standard contractual clauses of the European Commission).
8. Your Rights. In accordance with amended Law No. 78-17 of January 6, 1978, and the GDPR, you have the rights to access, rectify, erase, restrict, object to, and port your Data, as well as the right to define directives regarding its fate after your death and the right to withdraw your consent at any time. These rights can be exercised by email to echapursa@gmail.com or by mail to the registered office, accompanied, if applicable, by proof of identity. You also have the right to lodge a complaint with the CNIL (www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).
9. Security. ECHAPURSA implements appropriate technical and organizational measures to protect Data against destruction, loss, alteration, or unauthorized access (TLS encryption of the Site, PCI-DSS certified payment provider, restricted access).
10. Updates. This policy may be amended at any time; the applicable version is the one published on the Site. Version of June 12, 2026.
