Privacy Policy

Last updated: 08/04/2026

1. Data Controller

Location en Corse
Alzone, Albitreccia, Corse du Sud, France
Phone: +33 6 72 76 48 15

2. Data Collected

We collect the following personal data when you create an account:

• Name
• Email address
• Password (stored in hashed form)

We also automatically collect:

• IP address (for session management and security)
• Browser user agent (for session management)

3. Purpose of Processing

Your personal data is processed for the following purposes:

• Account creation and authentication
• Property management (for administrators)
• Security and fraud prevention

4. Legal Basis (GDPR Article 6)

• Consent: You consent to data processing when creating your account.
• Legitimate interest: Security and fraud prevention.

5. Data Retention

Your personal data is retained for the duration of your account. Sessions expire after 120 minutes of inactivity. You may delete your account and all associated data at any time from your account settings.

6. Your Rights

Under GDPR and CNIL regulations, you have the right to:

• Access your personal data
• Rectify inaccurate data (via your profile settings)
• Delete your account and data (via your profile settings)
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at the address above or delete your account directly from your settings page.

7. Cookies

This site uses only essential cookies required for the website to function (session, CSRF protection). No analytics or advertising cookies are used. Essential cookies do not require consent under CNIL guidelines.

8. Data Security

We implement appropriate security measures including: encrypted sessions, HTTPS enforcement, password hashing (bcrypt), CSRF protection, Content Security Policy headers, and rate limiting.

9. CNIL Complaints

If you believe your data rights have been violated, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes): www.cnil.fr