Privacy Policy

The data controller for personal data collected on the C&V Baby in Provence website is: Christopher Guyon 17 chemin de la Marianne, 13560 Sénas, France Email: cv.bebeenprovence@hotmail.com

As part of its activity, C&V Baby in Provence collects the following personal data: Customers (renters): - Last name and first name - Email address - Phone number - Delivery address - GPS coordinates of the delivery address (calculated via Google Maps for delivery fee calculation) - Payment data: managed exclusively by Stripe and never stored on C&V Baby in Provence servers Affiliate partners (concierges, property owners): - Contact name - Company name - Professional email address - Professional phone number - SIRET number - Commission history

The data collected is used for the following purposes: - Management and tracking of equipment reservations - Organization of delivery and return of equipment - Billing and payment management - Security deposit tracking (card imprint) - Management of the partner affiliate program - Transactional communication: sending booking confirmation emails, pre-delivery reminders, end-of-rental reminders, and deposit release confirmations

The processing of personal data is based on the following legal grounds: - Performance of the contract (Article 6.1.b GDPR): processing is necessary for the performance of the rental agreement between the Renter and C&V Baby in Provence (reservation, delivery, billing, deposit). - Consent (Article 6.1.a GDPR): for non-essential cookies (analytics, if added later). - Legitimate interest (Article 6.1.f GDPR): for fraud prevention and transaction security.

Customers (renters): personal data is retained for a period of three (3) years from the last reservation. Affiliate partners: contractual data (name, company, contact, SIRET) is retained for the duration of the partnership plus five (5) years after its end (civil prescription, article 2224 of the French Civil Code). Commission data is retained for ten (10) years after the close of the financial year (article L123-22 of the French Commercial Code). Payment data is retained in accordance with Stripe's retention policy and is not stored by C&V Baby in Provence. Upon expiration of these periods, data is deleted or anonymized.

For the purposes of its activity, C&V Baby in Provence uses the following sub-processors: - Stripe (payments) - headquarters in the United States, transfer governed by Standard Contractual Clauses (SCC) - Resend (transactional emails) - headquarters in the United States, transfer governed by Standard Contractual Clauses (SCC) - Supabase (database) - hosted in the European Union (Frankfurt, Germany) - Vercel (website hosting) - headquarters in the United States, transfer governed by Standard Contractual Clauses (SCC) - Google Maps (delivery distance calculation) - headquarters in the United States, transfer governed by Standard Contractual Clauses (SCC) - Sentry (technical error monitoring) - headquarters in the United States, transfer governed by Standard Contractual Clauses (SCC)

Some personal data may be transferred to sub-processors located in the United States (Stripe, Resend, Vercel, Google, Sentry). These transfers are governed by Standard Contractual Clauses (SCC) in accordance with the General Data Protection Regulation (GDPR), ensuring an adequate level of protection for personal data.

In accordance with the GDPR, any data subject (customer or affiliate partner) has the following rights regarding their personal data: - Right of access: obtain confirmation that data concerning them is being processed and receive a copy - Right to rectification: request correction of inaccurate or incomplete data - Right to erasure: request deletion of their personal data (subject to legal retention obligations) - Right to data portability: receive their data in a structured, commonly used, machine-readable format - Right to object: object to the processing of their data on legitimate grounds - Right to restriction: request restriction of the processing of their data To exercise these rights, send a request by email to: cv.bebeenprovence@hotmail.com C&V Baby in Provence commits to responding within thirty (30) days of receiving the request. You also have the right to file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr

The C&V Baby in Provence website uses the following cookies: Strictly necessary cookies (no consent required): - Session cookie: maintaining the user session - Locale cookie: remembering the language preference (French or English) - Consent cookie: remembering your cookie choice (duration: 1 year) Cookies requiring consent: - Affiliate cookie: identifying the referring partner (duration: 30 days). This cookie is only set if you accept cookies via the consent banner. If declined, partner attribution is managed only during your current browsing session, without a persistent cookie. If third-party cookies (analytics, statistics) are added in the future, they will require prior user consent via the cookie management banner.

C&V Baby in Provence reserves the right to modify this privacy policy at any time. Changes take effect upon publication on the website. The Renter is advised to regularly consult this page to stay informed of any updates. The date of the last update is indicated at the top of this page.