Privacy policy
Privacy policy
Last Update : 2026-07-21
Les Prairies d’Orcières attaches great importance to the protection of your personal data. This policy explains what information is collected on this site, why it is collected, how long it is retained, and what your rights are.
1. Who is responsible for your data
The data controller is:
L’alpage d’Orcières
SAS
LE VILLAGE, 05170 ORCIERES
SIRET : 80966911200017
Email : lesprairiesdorcieres@gmail.com
For any questions regarding your personal data, you may write to the email address above.
Given its size and activities, the establishment is not required to appoint a Data Protection Officer.
2. The data we collect
2.1 When you make a booking
To process your stay, we collect:
- your surname and first name
- Your email address
- your phone number
- your postal address, your city, your postal code, and your country
- the dates of your stay
- the number of adults and children, as well as the possible presence of a baby
- the comments you send to your host
- the amount and status of your payment
2.2 When you make a payment
Payment is processed by our service provider, PayPlug. No banking details are entered or stored on this site. Your card number is transmitted directly to PayPlug, which is PCI-DSS certified. We receive only the payment confirmation and a transaction ID.
2.3 When you contact us
The contact form collects the information you enter, typically your name, email address, and the content of your message.
2.4 When you sign up for our news updates
If you check the corresponding box when making your reservation, your email address will be used to send you our news and offers. This box is never checked by default.
2.5 When you browse the site
Technical data is automatically recorded: IP address, browser type, pages visited, and date of visit. This data is used for the proper functioning and security of the site.
3. Why we use this data
| Purpose | Legal basis |
|---|---|
| Managing your booking and your stay | Performance of the contract |
| Collecting your payment | Performance of the contract |
| Responding to your requests for information | Legitimate interest |
| Retention of accounting records | Legal obligation |
| Sending you our news | Your consent |
| Ensuring the security and functioning of the site | Legitimate interest |
| Place non-essential cookies | Your consent |
4. Who has access to your data
Your data is neither sold, rented, nor transferred to third parties for commercial purposes.
They are accessible to the Prairies d’Orcières team, as well as to the following service providers, who act as subcontractors and use your data solely for the assigned service:
- OVH SAS, host of the website and email services; data stored in France.
- PayPlug, payment service provider, data stored in the European Union
- Goûte only when you order a meal, and is limited to the information necessary to prepare your order.
Your data may also be disclosed to administrative or judicial authorities when required by law.
5. Transfers outside the European Union
This site includes a map provided by Google Maps, operated by Google Ireland Limited. Viewing it may result in data being transferred to the United States. This transfer relies on the EU-US Data Privacy Framework, to which Google adheres. The map only loads after you have accepted the corresponding cookies.
Apart from this case, your data is hosted and processed within the European Union.
6. How long your data is retained
| Data type | Duration |
|---|---|
| Booking file | 3 years from the end of the stay |
| Accounting records and invoices | 10 years, in accordance with the Commercial Code |
| Messages received via the contact form | 3 years from the last exchange |
| Email address registered for the newsletter | 3 years from your last contact, or until you unsubscribe |
| Server connection logs | 12 months |
| Cookies | Maximum of 13 months |
At the end of these periods, your data is deleted or anonymized.
7. Your rights
In accordance with the General Data Protection Regulation and the Data Protection Act, you have the following rights:
- Right of access: obtain confirmation that your data is being processed and receive a copy of it.
- Right to rectification: have inaccurate or incomplete information corrected
- Right to erasure: request the deletion of your data, subject to our legal retention obligations.
- Right to restriction: request the temporary suspension of processing
- Right to object: object to processing based on our legitimate interest
- Right to portability: receive your data in a machine-readable format.
- Right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out previously.
To exercise these rights, please write to lesprairiesdorcieres@gmail.com or to the postal address indicated in point 1. You will receive a response within one month. Proof of identity may be requested in the event of reasonable doubt.
If you believe that your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés:
CNIL
3 place de Fontenoy, TSA 80715
75334 Paris Cedex 07
www.cnil.fr
8. Telemarketing
If you do not wish to be contacted for telephone marketing purposes, you can register free of charge on the Bloctel opt-out list at www.bloctel.gouv.fr.
9. Cookies
9.1 What a cookie is
A cookie is a small file placed on your device during your visit. It allows your browser to be recognized and certain information to be stored.
9.2 Cookies used on this site
Strictly necessary cookies. They enable the site to function and cannot be disabled. In particular, they store your cookie preferences, your display language, and the contents of your current booking. These cookies do not require your consent.
Third-party cookies. The Google Maps map embedded on the chalet page may place cookies when displayed. They are placed only after you have accepted them.
9.3 Managing your preferences
A banner allows you to accept or reject non-essential cookies during your first visit. You can change your choice at any time via the cookie settings link in the footer.
You can also configure your browser to reject cookies. Please note, however, that certain features of the site, including the booking module, may no longer function correctly.
10. Security
We implement appropriate technical and organizational measures to protect your data: an encrypted HTTPS connection across the entire site, administrative access restricted to authorized personnel, regular backups, and security updates.
As no system is infallible, we cannot guarantee absolute security. In the event of a data breach likely to result in a high risk to your rights, you would be informed in accordance with regulations.
11. Minors
This site is not intended for individuals under the age of 15. Reservations must be made by adults. No data is knowingly collected from a minor without the consent of their legal guardian.
12. Changes to this policy
This policy may be updated, particularly in the event of changes to the site or regulations. The date at the top of the page indicates the version currently in effect. You will be notified of any significant changes.