Last updated: October 2026
SCI THEOLINA attaches great importance to protecting your data. This page explains what data we collect on theolina-location.fr, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
THEOLINA, a French property company (société civile immobilière), 15 rue des Pins, 81100 Burlats, France, represented by Flory Gomez, manager.
Contact for your data: [email protected]
2. Data collected, purposes and retention periods
| When | Data | Why | Legal basis | Retention |
|---|---|---|---|---|
| Online booking | Surname, first name, email, phone, address, country, number of adults and children, dates, special requests | Managing your stay, the deposit and balance, and the tourist tax | Performance of the contract; legal obligation | 5 years after the stay; invoices 10 years (accounting obligation) |
| Payment | Bank card details | Collecting the deposit | Performance of the contract | Processed solely by Stripe: we never have access to them |
| Foreign guests | Individual police registration form | Legal obligation for accommodation providers (Article R.814-1 of the French CESEDA) | Legal obligation | 6 months |
| Contact form or quote request | Name, email, phone, message, type of event | Responding to your request | Legitimate interest | 3 years after the last contact |
| Newsletter | Email, first name | Sending you our news and offers | Consent | Until you unsubscribe (link in every email); 3 years without opening |
| Browsing | IP address, pages viewed, browser (cookies) | Audience measurement, website operation | Consent (except necessary cookies) | 13 months maximum |
We do not sell or rent your data. We do not collect any sensitive data.
3. Recipients
Your data is reserved for SCI THEOLINA and the technical service providers who help us run the website, each for its own task only:
- O2switch (France): website hosting
- Stripe Payments Europe (Ireland): online payment
- Brevo (France): sending the newsletter and emails
- Google (United States): website fonts
- partner rental platforms, only to synchronise blocked dates (no personal data is shared)
- the authorities (tourist tax, police) where required by law
4. Transfers outside the European Union
Some providers (Stripe, Google) are US companies. Any transfers are governed by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
5. Cookies
On your first visit, a banner lets you accept, refuse or choose cookies. Cookies necessary for the website to work (booking, security, remembering your choice) do not require consent. Audience measurement and tracking cookies are only set with your consent. Refusing does not prevent you from booking. Your choice is kept for 6 months and you can change it at any time below:
6. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time and to set instructions regarding your data after your death. To exercise these rights, write to [email protected] or to SCI THEOLINA, 15 rue des Pins, 81100 Burlats, France. We reply within one month. Proof of identity may only be requested if there is reasonable doubt about your identity.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr/fr/plaintes
7. Security
The website uses HTTPS, access to the administration area is password-protected and payments are processed by Stripe, which is PCI-DSS certified. In the event of a data breach that poses a risk to you, we will inform you and the CNIL as required by the GDPR.
8. Changes to this policy
This policy may be updated. The date at the top of the page shows the latest version.