Privacy policy

1. Data controller

The controller of personal data is:

EmiRise — SAS with a share capital of €1,000
RCS Aix-en-Provence — SIREN 927 450 569
Registered office: 4 Rue Paul Marie Couton, Lotissement L'Esquirou, 13790 Rousset
Email: contact@emirise.fr
Telephone: +33 7 82 88 01 96

Represented by its President: Emilio Arias.

2. Personal data collected

2.1 Data provided directly by the user

Via the booking request form:

• — Title, surname, first name
• — Email address
• — Telephone number
• — Requested dates of stay
• — Number of guests
• — Requested property
• — Messages or special requests

Via the newsletter sign-up form:

• — Email address
• — First name and surname (optional)
• — Language of the website at the time of sign-up (French or English)

Via the contact form:

• — Surname, first name
• — Email address
• — Telephone number (optional)
• — Content of the message

When a booking is confirmed:

• — Identity document (to verify that you are of age and, for foreign nationals, for the police registration form)
• — Payment details (processed by our secure payment provider)
• — Postal address (for invoicing)

2.2 Data collected automatically

When you browse the Site, certain data may be collected automatically:

• — IP address
• — Browser type and version
• — Operating system
• — Pages viewed
• — Date and time of connection
• — Referring website

These data are collected via cookies (see section 7).

3. Purposes of processing

The personal data collected are processed for the following purposes:

• — Processing booking requests and managing the stay
• — Communicating with the client before, during and after the stay
• — Invoicing
• — Compliance with legal obligations (in particular the individual police registration form for foreign nationals and the retention of invoices)
• — Sending the newsletter (subject to consent)
• — Responding to requests made via the contact form
• — Improving the user experience on the Site
• — Audience measurement and browsing statistics
• — Fraud prevention

The EmiRise newsletter (La lettre d'EmiRise). If you sign up for the newsletter, you will receive a welcome email and then, once a month, the EmiRise newsletter (new addresses in Aix, new properties, offers reserved for subscribers), in French or in English depending on the language of the website when you signed up. Your email address, first name and surname are stored with our email service provider, Brevo (Sendinblue SAS, France), and in our database (Google Firebase). You may unsubscribe at any time, without giving any reason, using the « Unsubscribe » link at the bottom of each email, or by writing to contact@emirise.fr. Your unsubscription takes effect immediately.

4. Legal bases for processing

In accordance with Article 6 of the GDPR, the processing of personal data is based on the following legal bases:

• — Performance of a contract: processing of bookings, management of the stay, invoicing
• — Legal obligation: retention of invoices, police registration form for foreign nationals
• — Legitimate interest: fraud prevention, audience measurement, improvement of the Site
• — Consent: newsletter sign-up, non-essential cookies

5. Recipients of the data

The personal data are intended for:

• — Authorised members of the EmiRise team
• — The owners of the booked Properties (only the data strictly necessary for the stay to take place)
• — Technical service providers (hosting provider Vercel Inc., payment provider, email delivery tools such as Brevo, etc.)
• — Administrative or judicial authorities upon request and in accordance with the law

EmiRise undertakes never to sell, rent or transfer personal data to third parties for commercial purposes.

Some service providers may be located outside the European Union (in particular our hosting provider Vercel Inc., located in the United States). In such cases, EmiRise ensures that appropriate safeguards are in place to protect the data, in accordance with Articles 44 et seq. of the GDPR.

6. Retention period

Personal data are retained for the following periods:

• — Booking and stay data: 5 years from the end of the stay (contractual limitation period)
• — Invoices and accounting documents: 10 years (accounting obligation)
• — Marketing data (newsletter): 3 years from the last contact
• — Cookies: period varying according to the type of cookie (see section 7)
• — Browsing data (logs): 12 months maximum

At the end of these periods, the data are deleted or anonymised.

7. Cookies

7.1 What is a cookie?

A cookie is a small text file placed on your device when you visit a website. It allows the user to be recognised on subsequent visits and certain information to be remembered.

7.2 Types of cookies used

EmiRise uses the following types of cookies:

• — Essential cookies: necessary for the Site to function (for example, to remember your language preferences). These cookies do not require your consent.
• — Audience measurement cookies: used to measure traffic on the Site and improve how it works. These cookies are subject to your consent.
• — Personalisation cookies: used to personalise your experience on the Site. These cookies are subject to your consent.

7.3 Managing cookies

On your first visit to the Site, a consent banner allows you to accept, refuse or customise the use of non-essential cookies.

You may change your preferences at any time by clicking on the « Cookie settings » link at the bottom of the page.

You may also configure your browser to block or delete cookies. However, disabling certain cookies may affect the functioning of the Site.

8. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

• — Right of access: to obtain confirmation that data concerning you are being processed and to obtain a copy of them
• — Right to rectification: to have inaccurate or incomplete data corrected
• — Right to erasure: to have your data deleted, under certain conditions
• — Right to restriction of processing: to temporarily suspend the processing of your data
• — Right to data portability: to receive your data in a structured format and transmit them to another controller
• — Right to object: to object to the processing of your data, in particular for marketing purposes
• — Right to withdraw your consent at any time, for processing based on consent
• — Right to set instructions regarding what happens to your data after your death

To exercise these rights, you may contact us:

• — By email: contact@emirise.fr
• — By post: EmiRise, 4 Rue Paul Marie Couton, Lotissement L'Esquirou, 13790 Rousset

Proof of identity may be requested in order to verify your identity.

EmiRise undertakes to respond to your request within one month of its receipt.

9. Complaint to the CNIL

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, the French data protection authority):

CNIL
3 Place de Fontenoy — TSA 80715
75334 Paris Cedex 07
Website: www.cnil.fr
Telephone: +33 1 53 73 22 22

10. Data security

EmiRise implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data, and in particular to protect them against any unauthorised access, loss, destruction or accidental disclosure.

Payments are processed by a PCI-DSS certified payment provider, ensuring the security of banking data.