Privacy Policy

Version: 1.0 Last updated: To be completed

---

Your privacy matters

At Rayal, we place great importance on the protection of your personal data.

This policy explains in a transparent manner:

• what data we collect;
• why we collect it;
• how long we retain it;
• your rights;
• the way in which we protect it.

We comply with the General Data Protection Regulation (GDPR) as well as applicable French regulations.

---

1. Data Controller

Personal data is processed by:

Rayal – Maison d'hôtes

Address:

13 Impasse Evenor Rivière

97430 Le Tampon

Île de La Réunion

Phone: To be completed

Email: To be completed

---

2. Data Collected

Depending on your use of the site, we may collect in particular:

Identification data

• first name
• last name
• email address
• phone number
• postal address (if provided)

---

Booking-related data

• rooms booked
• arrival dates
• departure dates
• number of travellers
• chosen services
• meals booked
• additional services

---

Technical Data

• IP address (if statistical cookies are accepted)
• browser
• operating system
• language used
• device type
• screen resolution

---

Navigation Data

When you accept the relevant cookies:

• pages visited
• visit duration
• browsing path on the site
• visitor origin
• visit frequency
• clicks on sharing links
• interactions with the chatbot

---

3. Why do we collect this data?

Your data is used to:

• manage your reservations;
• prepare your stay;
• communicate with you;
• respond to your requests;
• monitor your reservation;
• manage payments;
• improve the website;
• produce anonymised statistics;
• ensure the security of the website.

We never collect data without a legitimate purpose.

---

4. Legal Basis

The processing is based in particular on:

• your consent;
• the performance of the reservation contract;
• compliance with our legal obligations;
• our legitimate interest in improving our services.

---

5. Data Recipients

Your data is accessible only to:

• the manager of Rayal;
• authorized administrators;
• technical service providers essential to the operation of the site.

We never resell your personal data.

---

6. Retention Period

Data is retained only for as long as necessary.

As an indication:

---

7. Security

We implement technical and organizational measures designed to protect your data against:

• unauthorized access;
• loss;
• alteration;
• disclosure.

Access to the back-office is protected by user rights and secure passwords.

---

8. Cookies

The site uses a GDPR-compliant consent management tool.

You may at any time:

• accept all cookies;
• refuse them;
• customize your choice;
• change your decision.

No optional cookie is placed without your consent.

---

9. Statistics

When you accept statistical cookies, we may measure in particular:

• the number of visitors;
• unique visitors;
• pages viewed;
• navigation paths;
• consultation times;
• acquisition sources (social networks, search engines, external links, direct access);
• clicks on sharing buttons.

These statistics are used solely to improve the site and the services offered.

---

10. Chatbot

The chatbot is designed to assist visitors.

Exchanges may be temporarily stored in order to:

• improve the quality of responses;
• correct any errors;
• ensure a better service.

They are never resold.

---

11. Your Rights

In accordance with the GDPR, you have in particular the following rights:

• right of access;
• right of rectification;
• right of erasure;
• right to restriction;
• right to object;
• right to data portability.

You may exercise these rights at any time by contacting Rayal.

---

12. Account Deletion

You may request the deletion of your account.

When the deletion is permanent, Rayal proceeds with the erasure of personal data that is no longer necessary.

Certain information may nevertheless be retained when required by law, particularly for accounting or tax purposes.

---

13. Subcontractors

Rayal may use technical service providers for:

• website hosting;
• sending emails;
• backups;
• statistics;
• chatbot operation.

These service providers are carefully selected and must comply with the GDPR.

---

14. Data Transfer

Data is hosted in environments offering a level of security compliant with applicable regulations.

Where processing involves service providers located outside the European Union, Rayal ensures that appropriate safeguards are implemented.

---

15. Complaint

If you believe that your rights are not being respected, you can lodge a complaint with the CNIL.

Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy

75007 Paris

Site : https://www.cnil.fr

---

16. Evolution of this policy

This policy may evolve in order to:

• take into account regulatory developments;
• improve transparency;
• support new features of the site.

The latest version is always available on the site.

---

At Rayal, the protection of your personal data is a priority.