1. Who are we?

Data controller: Camping Sainte-Catherine — kaamp.fr Address: 241 Route du Camping, 69440 Sainte-Catherine Contact email: contact@kaamp.fr

The kaamp.fr website is an online booking platform allowing visitors to check availability and book a pitch at Camping Sainte-Catherine, located in the Rhône-Alpes region.

2. Data collected

As part of the use of our site, we are required to collect the following categories of personal data.

2.1 Booking and account data

• First and last name

• Email address

• Phone number

• Postal address, for billing purposes

• Login credentials, when creating an account

• Booking history

2.2 Payment data

• Credit card number, processed securely via our PCI-DSS certified payment provider

• Expiry date and security code, never stored on our servers

• Amount and date of transactions

Bank details are processed exclusively by our secure payment provider. We do not have access to your full card details.

2.3 Navigation data, cookies and analytics

• IP address

• Browser type and operating system

• Pages visited and duration of visit

• Behavior data on the site, via Google Analytics

3. Purposes and legal bases of processing

• Management of online bookings — Legal basis: execution of a contract

• Creation and management of your customer account — Legal basis: execution of a contract

• Secure payment processing — Legal basis: execution of a contract

• Sending booking confirmations and stay reminders — Legal basis: execution of a contract

• Improvement of user experience, analytics — Legal basis: legitimate interest

• Response to requests via the contact form — Legal basis: legitimate interest

• Compliance with legal and accounting obligations — Legal basis: legal obligation

4. Retention period

• Customer account data: until the deletion of the account, then 3 years

• Booking and billing data: 10 years, in accordance with legal accounting obligations

• Payment data: not kept on our servers beyond the transaction

• Navigation data, analytics cookies: 13 months maximum

• Contact form: 3 years from the last contact

5. Data sharing with third parties

We do not sell or rent your personal data to third parties.

However, your data may be transmitted to:

• Our secure payment provider, for example Stripe, PayPlug or equivalent, for processing transactions

• Google LLC via Google Analytics, for traffic statistics, with anonymized data

• Our web host, for the technical operation of the site

These third parties are subject to strict contractual obligations of confidentiality and may only use your data for the intended purposes.

6. Cookies

Our site uses cookies to improve your browsing experience.

During your first visit, a banner allows you to accept or refuse non-essential cookies.

Types of cookies used

• Essential technical cookies: necessary for the operation of the site and the booking process. They are always active.

• Analytical cookies, Google Analytics: allow to measure audience and visitor behavior. They are subject to your consent.

You can withdraw your consent at any time via the "Manage my cookie preferences" link, available at the bottom of each page.

7. Your rights

In accordance with the General Data Protection Regulation, or GDPR — Regulation EU 2016/679 — you have the following rights:

• Right of access: obtain a copy of the data concerning you

• Right to rectification: correct inaccurate or incomplete data

• Right to erasure, or right to be forgotten: request the deletion of your data

• Right to restriction of processing: restrict the use of your data

• Right to portability: receive your data in a structured and readable format

• Right to object: object to certain processing based on legitimate interest

• Right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal

To exercise these rights, contact us by email at: [votre@email.fr].

A copy of your ID may be requested if necessary. We undertake to respond within one month.

8. Complaint to the CNIL

If you feel that your rights are not respected, you have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l’Informatique et des Libertés — CNIL

• Website: www.cnil.fr

• Address: 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07

9. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure.

These measures include in particular:

• SSL/TLS encryption of communications

• Restricted access to data

• Regular backups

10. Update of this policy

This privacy policy may be updated to reflect changes to our site or regulations.

The date of the last update is indicated at the top of this document.

In the event of a substantial modification, you will be informed by email or via a banner on the site.