Privacy policy

Last updated: April 2026 — version 1

This policy describes how Chalet Marketing processes your personal data when you visit chalet.marketing, in compliance with Regulation (EU) 2016/679 ("GDPR"), the French Data Protection Act of 6 January 1978 as amended, and the recommendations of the French data protection authority (CNIL).

1. Data controller

Given the size of our structure, we are not required to appoint a Data Protection Officer (DPO). Any question regarding your data can be addressed directly to the data controller at the address above.

2. Data collected and purposes

No sensitive data (health, political opinions, religion, etc.) is collected. We do not perform any automated decision-making producing legal effects concerning you.

3. Cookies and trackers

In accordance with Article 82 of the French Data Protection Act and the CNIL guidelines of 17 September 2020, we obtain your free, informed, specific and unambiguous consent before placing any non-strictly-necessary cookie. Refusing is as easy as accepting and has no consequence on accessing the site.

Detailed list of cookies used

We use Google Consent Mode v2 with anonymised IP. Until you accept audience measurement, no Google Analytics cookie is placed on your device.

You can change your choices at any time by clicking the "Cookies" button at the bottom left of every page. Your consent is stored for a maximum of 13 months, after which it will be requested again.

4. Processors and recipients

To operate the site and process your requests, we rely on the following processors, all contractually bound to comply with the GDPR:

5. International data transfers

Some of your data may be transferred to the United States in connection with the use of Google Analytics and Resend. These transfers are framed by:

• The Data Privacy Framework (DPF): European Commission adequacy decision of 10 July 2023 for certified companies (Google LLC and Resend Inc. are DPF-certified);
• The Standard Contractual Clauses (SCCs) of the European Commission (decision 2021/914) as a complement;
• Additional technical measures: IP anonymisation for Google Analytics, TLS encryption in transit.

6. Your rights

Under Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data at any time:

• Right of access — obtain confirmation that your data is processed and receive a copy;
• Right to rectification — correct inaccurate or incomplete data;
• Right to erasure ("right to be forgotten") — request deletion of your data;
• Right to restriction — restrict processing in certain cases;
• Right to data portability — receive your data in a structured, readable format;
• Right to object — object to the processing of your data on legitimate grounds;
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing;
• Right to set post-mortem instructions regarding the fate of your data after death.

To exercise any of these rights, write to [email protected] stating the purpose of your request. We will respond within one month (extendable by two months for complex requests). Proof of identity may be requested in case of reasonable doubt.

7. Data security

We implement appropriate technical and organisational measures to ensure the confidentiality and integrity of your data: HTTPS/TLS encryption, restricted data access, regular backups, secure hosting in Europe, security updates, principle of least privilege.

8. Complaint to the CNIL

If, after contacting us, you believe that your data protection rights are not being respected, you can file a complaint with the CNIL:

9. Policy changes

We reserve the right to modify this policy at any time to reflect legal, technical or business changes. Any substantial change will trigger a new collection of your cookie consent (the current version is indicated at the top of this page).