Legal
Privacy Policy
Last updated: 31 August 2026
This policy explains what personal data we collect when you use this website, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is Jakub Stanek, host of the Provençal Garden Studio, L'Isle-sur-la-Sorgue, Vaucluse, Provence, France.
For any question about your data, write to stay@sorguestudio.com.
2. What we collect
Enquiries: your name, email address, dates of interest and the content of your message.
Bookings: your name, email address, phone number (if provided), stay dates, number of guests and the amount paid.
Payments: card details are entered directly with our payment provider, Stripe. We never see or store your full card number — we only receive a confirmation, the last four digits and the payment reference.
Technical data: standard server logs (IP address, browser type, pages requested) generated by our hosting provider for security and reliability.
3. Why we use it and on what legal basis
To answer enquiries and prepare a reservation — legitimate interest and pre-contractual steps at your request.
To take payment, confirm and manage your stay — performance of the accommodation contract.
To meet French accounting, tax and tourist-accommodation obligations — legal obligation.
We do not use your data for marketing and we never sell it.
4. Who else processes your data
Stripe Payments Europe Ltd — card payment processing.
Resend — sending booking confirmations and host notifications by email.
Supabase — secure database hosting for bookings and enquiries (EU region).
Lovable — website hosting.
Each acts as a processor under contract and only on our instructions. Where any transfer outside the EEA occurs, it is covered by the European Commission's Standard Contractual Clauses.
5. How long we keep it
Enquiries that do not lead to a booking: deleted after 12 months.
Booking records: kept for 10 years, as required by French accounting and tax law.
Server logs: kept for a maximum of 12 months.
6. Cookies
This site uses strictly necessary cookies only. There is no analytics, no advertising and no tracking pixel, so no consent banner is required under the ePrivacy Directive.
Session cookie — keeps the host signed in to the private admin area. Expires when the session ends.
Stripe cookies — set on the secure payment page for fraud prevention and to complete your payment.
7. Your rights
You may request access to your data, correction, erasure, restriction or portability, and you may object to processing based on legitimate interest. Write to stay@sorguestudio.com and we will reply within one month.
If you are not satisfied, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
8. Security
Data is stored on encrypted, access-controlled servers. Payment data is handled entirely by Stripe, a PCI-DSS Level 1 certified provider.