This policy explains how SWEET NARCISSE SARL collects, processes, and protects personal data on the sweet-narcisse.fr website.

Privacy Policy
Last updated: 04/06/2026
Data Controller
SWEET NARCISSE SARL, Pont Saint-Pierre, 68000 Colmar, France
Contact: [email protected], +33 3 89 41 01 94
Data We Collect
Identity and contact details (first name, last name, email, phone).
Booking information (stay dates, number of guests, preferences).
Customer service history and communications.
Payment data processed via third-party providers (Stripe); no card data is stored on this site.
Purposes
Managing booking requests and accommodation contracts.
Customer relationship management (responses, follow-up messages).
Accounting and legal obligations.
Anonymous performance analytics to improve user experience.
Recipients
Authorised staff of SWEET NARCISSE SARL.
Technical processors and essential third-party tools (OVH hosting, email services, analytics).
Payment providers such as Stripe (payment data).
Retention Periods
Customer data: duration of the contractual relationship plus 5 years to meet statutory requirements.
Accounting records: 10 years in accordance with legal obligations.
Cookie data: up to 13 months.
Technical logs: up to 12 months for security and maintenance purposes only.
Your Rights
Rights of access, rectification, erasure, objection, restriction, and portability.
Right to withdraw consent at any time when processing is based on consent.
Right to lodge a complaint with the CNIL (www.cnil.fr).
To exercise your rights online, visit our "My Data" page accessible from the footer.
You can also contact us by email: [email protected].
Cookies and Trackers
Use limited to essential technical cookies, payment tools (Stripe), and anonymised analytics.
You can configure your browser to refuse cookies, but this may affect certain features.
No advertising or profiling cookies are deployed.
Security Measures
Technical and organisational safeguards protect data against loss, alteration, or unauthorised access.
Restricted access granted only to personnel who require the data for their duties.
Regular testing, updates, and monitoring reduce potential vulnerabilities.
Transfers Outside the EU
Data is primarily hosted within the European Union through OVH.
Where third-party tools (e.g. email services, SaaS platforms) involve transfers outside the EU, Standard Contractual Clauses and equivalent safeguards are implemented.