Privacy Policy — Data Protection

1. Data Controller

The controller of personal data collected on the alpeon.fr website is:

CompanyALPÉON SAS

For any questions relating to the protection of your personal data, you may contact us at the address above.

2. Data Collected and Purposes

ALPÉON collects a minimum of personal data, strictly necessary for the purposes described below.

Collection point	Data collected	Purpose	Legal basis
Contact / quote request form	Last name, first name, email address, phone number, message	Respond to enquiry, establish initial commercial contact	Legitimate interest (art. 6.1.f GDPR)
Estimator tool	Property characteristics (resort, area, capacity, standing) — no personally identifiable data at this stage	Generate a rental income estimate	Performance of a service (art. 6.1.b GDPR)
Estimation result (final step)	Email address (if voluntarily provided)	Sending the estimation report by email	Consent (art. 6.1.a GDPR)
Navigation (server logs)	IP address (anonymised), pages visited, browser, date/time	Technical security, aggregated audience analysis	Legitimate interest (art. 6.1.f GDPR)

3. Cookies and Trackers

The alpeon.fr website uses a very limited number of cookies:

Strictly necessary technical cookies: enable the website to function (session, language preferences). No consent required.
No advertising cookies: no advertising trackers, no third-party advertising networks.
No profiling cookies: ALPÉON does not engage in behavioural profiling.

Should we integrate audience analytics tools in the future (e.g. Plausible Analytics, a cookie-free solution), we would inform users by updating this policy.

4. Retention Period

Contact and quote request data: retained for 3 years from the date of last contact, unless a contractual relationship has been established.
Contract data (partner property owners): retained for the duration of the contract, then for 5 years in accordance with accounting and tax legal obligations.
Navigation logs: retained for a maximum of 12 months, in anonymised form after 6 months.
Estimation data: not persisted on our servers beyond the session.

5. Data Recipients

Your personal data is not sold, rented or transferred to third parties. It may be transmitted only to the following technical service providers, strictly within the limits of their remit:

Vercel Inc. — website host (navigation data)
Email service provider — sending the estimation report by email (on explicit request)

These sub-processors are bound by contractual clauses compliant with the GDPR. No transfer of data outside the European Economic Area is carried out without appropriate safeguards (standard contractual clauses of the European Commission).

6. Your Rights

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights regarding your personal data:

Right of access: obtain a copy of the data held about you
Right of rectification: have inaccurate or incomplete data corrected
Right to erasure: request the deletion of your data ("right to be forgotten")
Right to restriction of processing: suspend the use of your data in certain cases
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interest
Right to withdraw consent: withdraw your consent at any time

To exercise these rights, please contact us at reservations@alpeon.fr, providing proof of your identity. We will respond within a maximum of 30 days.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés — French Data Protection Authority): cnil.fr — 3, Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

7. Security

ALPÉON implements appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. The website is served exclusively over HTTPS (TLS). Data transmitted via forms is encrypted in transit.

8. Changes to This Policy

ALPÉON reserves the right to amend this privacy policy at any time to reflect changes in processing activities or applicable regulations. The update date shown in the header will be revised with each amendment. In the event of a material change, affected users will be notified by email or by a notice on the website.