Your data
Privacy policy
What data we collect when you book, buy a gift card or visit our website, why, and how to exercise your rights.
This is an English translation for your convenience. The French version is the legally binding one.
At Abitarela, we take the protection of your personal data seriously. This page explains, in plain words, what data we collect, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Who is responsible for your data?
The data controller is CAPOG, SASU with a share capital of €40,000, RCS Narbonne 853 216 547, which runs the Abitarela guest house, 7 rue Nationale, 11130 Sigean, France. For any question: sigean@abitarela.fr or +33 4 68 41 53 19.
What data do we collect, and why?
Your booking
When you book on our website, your booking is recorded in our booking engine Beds24: surname, first name, email, phone, address, dates of stay, number of guests and, where applicable, payment or guarantee details. If you book through a platform (for example Booking.com), it sends us the information needed for your stay and its own privacy policy applies.
Why? To manage your booking and your stay (performance of the contract), and to meet our legal obligations (invoicing, accounting, tourist tax).
Your stay
The information you give us to prepare your stay: arrival time, need for a baby cot, food intolerances for breakfast… The latter is only used to prepare your breakfast, and only if you choose to tell us.
Buying a gift card
To order a gift card from our shop: surname, first name, billing address, phone, email, and the name (and, if you wish, the email) of the recipient. Card payments are processed by Stripe: we never have access to your card number.
Why? To process your order and issue the gift card (performance of the contract), to prevent payment fraud (legitimate interest) and to keep our accounts (legal obligation).
Your messages
When you contact us by phone, email, WhatsApp, Messenger or through a form, we use your contact details and your message to reply to you (legitimate interest). Our “what can we do better?” feedback form is anonymous: it does not ask for your name or email.
Your visit to the website
With your consent, we measure website traffic with Google Analytics (pages viewed, where visits come from, type of device) to improve it. Some cookies are also essential for the website to work (basket, payment, language, remembering your choices). All the details are in our cookie policy.
Who has access to your data?
Your data is intended only for our team. We never sell it. It may be processed on our behalf and according to our instructions by our service providers:
- o2switch (website hosting, in France);
- Beds24 (booking engine and booking management);
- Stripe (online card payments);
- Google (Google Analytics audience measurement, Google Maps, web fonts, display of our Google reviews);
- our email delivery provider (order and booking confirmations);
- our accountant, for accounting and tax obligations.
If you choose to write to us on WhatsApp or Messenger, these Meta services process your messages under their own privacy policy.
Does your data leave the European Union?
Some providers (in particular Google and Stripe) may process data outside the European Union, especially in the United States. These transfers are covered by the safeguards provided by the GDPR: an adequacy decision (EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses.
How long do we keep it?
- Bookings and stays: for the duration of our relationship, then 3 years after your last stay or contact;
- Invoices and accounting records: 10 years, as required by law;
- Messages and requests for information: 3 years after our last exchange;
- Audience measurement cookies: 13 months maximum; the related statistics are kept for 14 months maximum.
Your rights
You can at any time access your data, have it corrected or deleted, ask for its processing to be restricted, object to its use, ask for its portability, and set instructions for what happens to it after your death. Where processing is based on your consent (audience measurement cookies), you can withdraw it at any time.
To exercise your rights, write to us at sigean@abitarela.fr or by post to CAPOG – Abitarela, 7 rue Nationale, 11130 Sigean, France. We will reply within one month. If, after contacting us, you feel that your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, 75007 Paris).
Security
The website is protected by an encrypted connection (HTTPS). We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure, and we limit access to the people who need it.
Changes
We may update this policy, for example if we add a new service. The date below shows the latest version.
Last updated: 16 October 2026
