Privacy policy

PRIVACY AND DATA USE POLICY

Last updated: 9 August 2026

1. Data controller

The controller of personal data collected on this website is:

Valentin Masson – Valco Locations
Address as shown in the website’s legal notice
Email: contact@valco-locations.fr
Telephone: +33 6 37 37 74 03

2. Personal data collected

When you request information or make a booking, the following data may be collected:

• the identity of the guest and anyone staying with them;

• postal addresses, telephone numbers and email addresses;

• dates, duration, selected accommodation and information about the stay;

• data needed for invoicing, payment and tourist tax;

• information needed to arrange check-in and check-out;

• communications with Valco Locations before, during and after the stay;

• technical information about browsing the website, such as IP address, browser and cookies.

Only data needed for the booking, payment, security and smooth running of the stay is requested.

3. Purposes of processing

Personal data is used to:

• respond to requests for information;

• check availability and manage bookings;

• collect payments and manage any refunds;

• set up and manage the card pre-authorisation for the security deposit;

• provide useful information before, during and after the stay;

• prepare accounting documents and collect tourist tax;

• prevent fraud, incidents and misuse;

• comply with legal, tax and accounting obligations;

• operate, secure and improve the website.

4. Legal bases

Depending on their purpose, processing activities are based on:

• performance of the booking contract or steps taken before entering into a contract;

• compliance with Valco Locations’ legal obligations;

• legitimate interests relating to website security, fraud prevention and the protection of Valco Locations’ rights;

• the visitor’s consent where required, particularly for certain cookies.

5. Recipients of data

Data is accessible only to the people and service providers who need it to arrange the booking and stay.

It may, in particular, be shared with:

• Smoobu GmbH, for website hosting, booking management and guest communications;

• Stripe, for secure processing of payments and card pre-authorisations;

• ChargeAutomation, for automating security deposits and formalities relating to the stay;

• service providers involved in managing and preparing the accommodation, limited to the information they need to perform their tasks;

• competent public authorities where required by law.

Data is neither sold nor rented to third parties for commercial purposes. Valco Locations does not store full bank card numbers. Such data is processed directly by secure payment providers.

6. Data transfers

Some service providers may process data outside the European Economic Area. Any such transfer must be subject to the safeguards required by applicable data protection regulations.

Guests may consult the main providers’ privacy policies:

Smoobu: https://www.smoobu.com/en/privacy-policy/
Stripe: https://stripe.com/fr/privacy
ChargeAutomation: https://chargeautomation.com/privacy-policy/

7. Retention periods

Data is kept only for as long as needed for its purpose, then archived or deleted in accordance with legal obligations.

• Data needed to manage the stay is retained throughout the contractual relationship, then for as long as needed to handle any complaints.

• Contracts and business correspondence may be retained for five years.

• Invoices and accounting records are retained for ten years in accordance with legal obligations.

• Data relating to an enquiry that does not lead to a booking may be retained for up to three years from the last contact.

• Payment and security deposit data is retained by the relevant providers in accordance with their own legal obligations and retention policies.

8. Cookies and trackers

The website may use cookies that are essential for its operation, security, booking engine and payment functions.

Non-essential cookies, particularly those used for analytics or third-party services, must only be placed after the visitor’s consent where required. Visitors must be able to accept, reject or change their choices with equal ease.

Visitors may also configure their browsers to restrict or delete cookies. Rejecting strictly necessary cookies may, however, prevent certain website features from working properly.

9. Your rights

Under the General Data Protection Regulation and the French Data Protection Act (Loi Informatique et Libertés), individuals have the following rights, depending on their circumstances:

• access to their data;

• rectification;

• erasure;

• restriction of processing;

• objection;

• data portability;

• withdrawal of consent at any time where processing is based on consent.

To exercise these rights, please email contact@valco-locations.fr.

Proof of identity may be requested only where necessary to verify the requester’s identity.

Anyone who believes their rights have not been respected may lodge a complaint with the French data protection authority:

CNIL
3 place de Fontenoy – TSA 80715
75334 Paris Cedex 07, France
https://www.cnil.fr/

10. Security

Valco Locations and its service providers implement technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.

Despite these precautions, no transmission or storage of data over the Internet can be considered entirely risk-free.

11. Changes to this policy

This policy may be amended to reflect changes to the website, service providers or regulations. The last updated date at the top of this page identifies the applicable version.