GDPR

Privacy policy

This policy explains how Château de la Touche processes personal data collected through chateaudelatouchedamour.com, in compliance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

CHATEAU DE LA TOUCHE — 1 La Touche, 85620 Rocheservière, France — Email: chateau.touche@gmail.com.

2. Data we collect

We only collect data you voluntarily provide through our contact form:

DataPurposeLegal basisRetention
First name, last nameIdentifying you and replyingConsent / pre-contractual steps1 year after last contact
EmailReplying in writingConsent / pre-contractual steps1 year after last contact
PhoneCalling you back if neededConsent / pre-contractual steps1 year after last contact
Event type, date, guests, messageAssessing your projectPre-contractual steps1 year after last contact
Anonymised analytics dataMeasuring website audienceConsent (cookie)13 months max

3. Recipients

Your data is used solely by Océanne Ravet and Yoan Fady, co-managers. It is never sold, rented or transferred to third parties. Data may be processed by strictly necessary technical sub-processors: Hostinger (hosting, EU), Domavera (contact form processing) and, with your consent, Google Analytics (audience measurement).

4. Retention

Contact form data is kept for 1 year after your last contact with us. Beyond that, it is deleted, unless a legal obligation applies or the project results in a booking contract.

5. Cookies

No non-essential cookie is set without your consent. On arrival, a banner lets you accept or decline analytics cookies. You can change your choice anytime via the "Manage cookies" link in the footer.

6. Your rights

Under GDPR, you have the right to access, rectify, erase, restrict, object to, port, and withdraw consent regarding your data. To exercise these rights, email chateau.touche@gmail.com. We reply within one month.

7. Complaints

If you feel your rights are not respected, you may lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

8. Security

We implement appropriate technical and organisational measures to secure your data: EU-based hosting, HTTPS encryption, restricted access.

9. Updates

This policy may change; any substantial update will be posted on the site.

Last updated: September 2026.