1. Who is responsible for your data

Croisette Collection is the data controller for the personal data described in this policy. We are a short-term rental host based in Cannes, France, and process personal data in line with the EU General Data Protection Regulation (GDPR) and French data protection law.

2. What data we collect

• Booking details: name, email, phone number, postal address, dates of stay, number of guests.
• Identity information: date of birth and nationality for each guest, and, where required by French law, a copy of a passport or ID card (see clause 5).
• Payment information: card or transfer details, processed by our payment provider — we do not store full card numbers ourselves.
• Communications: messages you send us by email, WhatsApp, or through a booking platform, kept to help us assist you during and after your stay.
• Website usage data: pages visited and general browsing information, collected via cookies where you have consented (see clause 8).

3. Why we process your data

• To take and manage your booking, and to provide the accommodation and related services you have requested (performance of a contract).
• To meet our legal obligations, including French identity-recording requirements for tourist accommodation, tax reporting, and accounting records (legal obligation).
• To respond to enquiries, resolve issues during your stay, and handle complaints (legitimate interest in providing good service).
• To send you practical information about your upcoming stay, such as check-in instructions (performance of a contract).
• With your separate consent, to send occasional offers or updates about Croisette Collection, and to use non-essential website cookies (consent — you can withdraw this at any time).

4. Who we share it with

We only share personal data where necessary, and never sell it. Recipients may include:

• Our local property manager and cleaning team, so they can prepare the apartment and assist you on site.
• Payment processors, to take and secure your payment.
• The booking platform through which you reserved (e.g. Airbnb, Booking.com), where relevant to that booking.
• French public authorities, where the law requires it (for example, identity records for tourist accommodation, or tax authorities).
• Professional advisers such as our accountant, bound by confidentiality, where needed to run our business.

Where any service provider is located outside the European Economic Area, we put appropriate safeguards in place (such as the European Commission's Standard Contractual Clauses) before sharing data with them.

5. Identity documents

French law requires furnished tourist accommodation hosts to record certain identity details of foreign guests. Where we ask for a copy of a passport or ID card, we use it solely for this purpose, keep it only as long as legally required, and store it securely and separately from routine booking records.

6. How long we keep your data

• Booking and guest records: for the duration of any legal retention period applicable in France (generally up to 5 years after your stay for civil/consumer purposes, and up to 10 years for accounting and tax records).
• Identity documents collected for legal compliance: for the minimum period required by French tourism regulations, then securely deleted.
• Marketing consent and preferences: until you withdraw your consent or ask us to stop, whichever is sooner.
• Website cookies: as set out in the cookie lifetimes shown in our cookie banner/settings.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, where we are not required to keep it for legal reasons.
• Ask us to restrict or object to certain processing, including direct marketing.
• Receive your data in a portable, machine-readable format, where technically feasible.
• Withdraw consent at any time, where processing is based on consent, without affecting processing carried out before that withdrawal.

To exercise any of these rights, contact us at hello@croisettecollection.com. If you are not satisfied with our response, you have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the supervisory authority in your own EU country of residence.

8. Cookies

Our website uses essential cookies needed for it to function, and, only with your consent, optional cookies for analytics and marketing purposes. You can manage or withdraw your cookie preferences at any time via [COOKIE SETTINGS LINK / BANNER].

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, and we limit access to those who need it to provide your stay.

10. Changes to this policy

We may update this Data Policy from time to time, for example to reflect changes in the law or in how we operate. The 'last updated' date at the top of this page shows when it was last revised.

11. Contact

Croisette Collection · hello@croisettecollection.com · Castellaras-Le Neuf, 06370, Mouans-Sartoux, France