Privacy policy

Identity and contact details of the data controller: to be completed. Contact for personal data questions: to be completed.

• Booking: first name, last name, email, phone (optional), number of persons, free message, selected boat and slot.
• Technical logging: IP address for admin actions and login attempts (security and auditing).
• Online payments (when offered) are processed by Stripe: card data is entered on Stripe's secure page and never transits or is stored on this site. Only the payment status and the Stripe session identifier are kept.

Processing of booking requests, confirmation or refusal of rentals, communication with the customer (performance of pre-contractual measures and the rental contract). Security logging (legitimate interest).

Booking data: period to be defined with the operator (proposal: duration of the business relationship plus accounting obligations, then deletion or anonymisation). Audit and security logs: proposed 12 months. Email logs (message bodies): proposed 12 months.

Data is hosted on a dedicated server located in the European Union. Processors used: Resend (transactional email delivery — transfers to the United States covered by standard contractual clauses); Cloudflare Turnstile (anti-bot verification, when enabled). The up-to-date list is maintained in docs/RGPD.md.

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: contact to be completed. You may lodge a complaint with the CNIL (cnil.fr).

This site only uses cookies strictly necessary for its operation (admin session). No advertising or analytics trackers are installed, so no consent banner is required at this stage. If Cloudflare Turnstile is enabled, it falls under the security exemption; this policy will be updated if other trackers are added.