This privacy policy describes how SCI Les Bruyères, operator of La Ferme du Cerf Bleu, collects, uses, and protects the personal data of visitors and customers of the website www.lafermeducerfbleu.com, in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the French Data Protection Act (loi Informatique et Libertés) of January 6, 1978, as amended.

1. Data Controller

The data controller is:

SCI Les Bruyères

Registered Office: 2 rue Léopold Garnuchot, 89390 Ravières, France

SIRET: 448 118 703 00025

Email: info@lafermeducerfbleu.fr

Phone: +33 6 30 41 95 00

2. Collected Data and Purposes

We only collect data that you voluntarily provide to us in the following cases:

Contact Form

Collected data: name, email, message.

Purpose: to respond to your request for information.

Legal basis: legitimate interest in responding to visitors' requests.

Newsletter Subscription

Collected data: email address (and first name if requested).

Purpose: to send you our seasonal news (stays, events on the estate, offers).

Legal basis: consent, collected at the time of subscription.

You can unsubscribe at any time via the link included in each email.

Booking

When you make a booking via our booking engine, your data (name, contact details, payment information) are processed directly by our rental management provider, Hospitable.com, acting as a subcontractor. We invite you to consult their privacy policy on hospitable.com.

Online Conversation Assistant (if applicable)

If a conversational assistant is available on the site to answer your questions, your exchanges may be processed by our technical service provider in order to improve the quality of the responses. No data is used for commercial purposes other than those described here.

Site Navigation

Technical data (IP address, browser type, pages viewed) may be collected for audience measurement purposes, via cookies (see section 6).

3. Recipients of the Data

Your personal data is intended for SCI Les Bruyères and, depending on the cases listed above, for its following subcontractors, each acting within the scope of its own GDPR obligations:

• Brevo (newsletter and email campaign management) — a French company, with data hosting in Europe.

• Hospitable.com (booking and payment management) — Property Management System.

• Framer B.V. (website hosting) — Netherlands.

• SuiteOp (guest portal and digital welcome book application), if applicable.

We do not sell or rent your personal data to third parties.

4. Retention Period

• Contact form data: kept for 3 years from the last exchange, unless an early deletion is requested.

• Newsletter data: kept until you unsubscribe.

• Booking data: kept in accordance with legal, accounting, and tax obligations (generally 10 years), managed by Hospitable.com.

5. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: to obtain confirmation that your data is being processed, and to obtain a copy of it.

• Right to rectification: to correct inaccurate or incomplete data.

• Right to erasure: to request the deletion of your data, subject to legal retention obligations.

• Right to object: to object to processing, particularly for commercial prospecting.

• Right to restriction of processing.

• Right to data portability.

To exercise these rights, please contact us at info@lafermeducerfbleu.fr. We commit to responding within one month.

You also have the right to lodge a complaint with the National Commission for Information Technology and Civil Liberties (CNIL) — www.cnil.fr — if you believe that your rights are not being respected.

6. Cookies

The site may use the following types of cookies:

• Strictly necessary cookies: essential for the functioning of the site (e.g., remembering your language preferences).

• Audience measurement cookies: allow us to understand how the site is used, in order to improve it.

• Third-party cookies: placed by our service providers (Brevo for the newsletter, Hospitable for bookings) when you interact with their tools integrated into the site.

On your first visit, a banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time through your browser settings.

7. Security

We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration.

8. Changes to the Privacy Policy

This policy may be updated to reflect changes in our practices or for legal or regulatory reasons. The date of the last update is shown below.