Privacy Policy

Last updated: 2026-08-06

1. Data Controller

The controller of the personal data collected through this site is manoir-reves-sauvages.

For any question regarding your personal data: contact@example.com.

Remember to replace this address with your actual contact address before going live.

2. Data Collected and Purposes

The personal data collected depends on the features you use. The exhaustive list is in the Subprocessors section below, where each recipient indicates precisely what data they process and for what purpose.

3. Legal Basis for Processing

The processing of your data relies on one of the legal bases set out in Article 6 of the GDPR depending on the context: contract performance, legitimate interest, consent, or legal obligation.

4. Subprocessors and Recipients

To provide this service, we work with third-party subprocessors. Each subprocessor only handles the data strictly required for their task, under a contract compliant with Article 28 of the GDPR.

Vercel Inc.

440 N Barranca Ave #4133, Covina, CA 91723, USA

Outside EU
Purpose
Hosting and serverless function execution (Frankfurt region - fra1)
Data processed
  • IP addresses
  • Server logs
  • Session cookies
Retention
30 days for logs
Legal basis
Legitimate interest (Art. 6.1.f GDPR)
Transfer / details
Standard Contractual Clauses (SCC). Functions run in the EU (Frankfurt) but legal entity is US-based
More info
Privacy policyData Processing Agreement (DPA)

Databricks, Inc. (Neon)

160 Spear Street, 13th Floor, San Francisco, CA 94105, USA

Outside EU
Purpose
PostgreSQL database hosting
Data processed
  • All application data stored in the database
Retention
Account lifetime (deletion on request)
Legal basis
Contract performance (Art. 6.1.b GDPR)
Transfer / details
Standard Contractual Clauses (SCC). Database region configurable (eu-central-1 available)
More info
Privacy policyData Processing Agreement (DPA)

Resend Inc.

2261 Market Street #4667, San Francisco, CA 94114, USA

Outside EU
Purpose
Transactional email delivery
Data processed
  • Recipient email
  • Content of sent emails
Retention
30 days for delivery logs
Legal basis
Contract performance / legitimate interest
Transfer / details
Standard Contractual Clauses (SCC)
More info
Privacy policyData Processing Agreement (DPA)

Cloudflare, Inc.

101 Townsend Street, San Francisco, CA 94107, USA

Outside EU
Purpose
File storage and distribution (uploaded binary objects)
Data processed
  • User-uploaded files
  • Metadata (name, MIME type, size)
Retention
Account lifetime (deletion on request)
Legal basis
Contract performance (Art. 6.1.b GDPR)
Transfer / details
Standard Contractual Clauses (SCC)
More info
Privacy policy

OpenFreeMap

Projet open source, serveurs dédiés en Hongrie (UE)

EU
Purpose
Rendering vector map tiles on the Contact & Directions page
Data processed
  • Visitor IP address when map tiles are loaded
Retention
No durable retention (ephemeral technical logs)
Legal basis
Legitimate interest (Art. 6.1.f GDPR)
Transfer / details
No transfer outside the EU (servers located in Hungary)
More info
Privacy policyData Processing Agreement (DPA)

Metricool Software, S.L.

c/ Téllez, nº 12, Entreplanta H, 28007 Madrid, Espagne

EU
Purpose
Website audience measurement (visit counts, pages viewed, country of origin). Cookie-free tracker: nothing is written or stored on your device, and no unique identifier is assigned to you.
Data processed
  • Visitor IP address, used to infer the country then discarded (not stored)
  • Page viewed and referrer
Retention
IP address never stored. Aggregated statistics kept for the duration of the subscription
Legal basis
Legitimate interest (Art. 6.1.f GDPR)
Transfer / details
No transfer outside the EU (Spanish company, EU servers)
More info
Privacy policyData Processing Agreement (DPA)

Smeetz SA

c/o École Hôtelière de Lausanne, Route de Cojonnex 18, 1000 Lausanne 25, Suisse

Outside EU
Purpose
Conversational assistant (the chat bubble on the site) and ticketing for the Wild Mission escape game
Data processed
  • Technical identifier stored on your device, used to retrieve your conversation thread
  • Content of the messages you send in the chat
  • IP address, pages viewed, date and time
Retention
Period set by Smeetz for conversation history
Legal basis
Legitimate interest (Art. 6.1.f GDPR)
Transfer / details
Switzerland, recognised by the European Commission as providing adequate protection: no additional safeguards required
More info
Privacy policyData Processing Agreement (DPA)

5. Your Rights

Under the GDPR, you have the following rights over your data:

  • Right of access and rectification
  • Right to erasure (right to be forgotten)
  • Right to data portability
  • Right to object and to restrict processing
  • Right to withdraw your consent at any time (when processing is based on consent)
  • Right to lodge a complaint with the CNIL (cnil.fr) or any other competent authority

To exercise your rights: contact@example.com. We commit to responding within a maximum of one month.

6. Cookies

This site uses no advertising or profiling cookies. The only cookies set are those strictly necessary for its operation (session, preferences).

Audience measurement is handled by Metricool, without any cookie: nothing is written to your device and no unique identifier is assigned to you. Our conversational assistant, provided by Smeetz, does store a technical identifier in your browser’s memory as soon as a page opens: it is used to retrieve your conversation thread if you come back to write to us.

7. Modifications

This policy may be updated to reflect changes to the services and subprocessors used. The last update date is shown at the top of this page. Substantial changes will be notified by email to registered account holders.