Your Data
Privacy policy
Respecting your privacy.
This page explains, simply, what data we collect when you write to us, what it is used for, who can see it, how long we keep it and how to exercise your rights.
Data controller
The personal data collected on this website is processed by SCI CASTAGNETTES, Résidence Marina di Fiori, 20137 Porto-Vecchio, France, which rents out Domaine Diva.
For any question about your data, write to us at contact@domainediva.com.
The data we collect
Stay request: first name, last name, email address and, if you provide them, phone number, country of residence, preferred language for our exchanges, dates, number of adults and children, bedrooms needed, occasion, services you are considering and your message.
Simple question: first name, email address and, if you provide them, last name, the subject of your question, and your message.
With each request we also record the date it was sent, the language of the site you were using, your agreement to be contacted and the type of browser used, which helps us spot automated submissions.
We never ask for payment details on this website, nor for any sensitive data.
Why we use it
To reply to you personally, look at your dates, send you a proposal and, if you wish, prepare your stay and the rental agreement.
To send you an acknowledgement by email, and to protect the form against abuse.
Your data is never sold, never used for advertising and never passed on to third parties for commercial purposes. We do not subscribe you to any newsletter.
Legal basis
Handling a stay request is based on pre-contractual steps taken at your request, with a view to a possible rental. Answering a simple question and keeping the site secure are based on our legitimate interest in replying to you and protecting the form.
Anonymous audience measurement is based on our legitimate interest in improving the site. Playing the video on the Story page is your choice.
Who can see it
Your requests are read only by the family who manages the rental. They are shared with a professional (chef, boat rental, practitioner…) only with your agreement, when you ask us to introduce you.
We use technical service providers who process some data on our behalf and on our instructions:
Vercel (website hosting and anonymous audience measurement); Supabase (storage of requests, on servers located in Ireland); Resend (sending notification and acknowledgement emails); Google Workspace (the family’s email, where we receive your requests and from which we reply).
Transfers outside the European Union
Vercel, Resend and Google are companies headquartered in the United States. Some data may therefore be processed outside the European Union. These transfers are covered by the safeguards provided for by the GDPR, in particular the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
How long we keep it
A request that does not lead to a stay is kept for no more than three years after our last exchange, then deleted.
If you stay at Domaine Diva, the information linked to your rental is kept for the duration of our relationship, then archived for the periods required by law (in particular ten years for accounting records).
The host’s technical logs, which contain the IP address, are kept only for a short time, for the security of the site.
Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you may request access to your data, its rectification or erasure, the restriction of its processing, object to its processing and request its portability. You may also set instructions on what happens to your data after your death.
To exercise these rights, write to us at contact@domainediva.com. We will reply within one month.
If, after contacting us, you feel your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
The YouTube video on the Story page
The Story page offers a video hosted by YouTube (Google). Until you play it, only its preview image is loaded from YouTube’s servers, with no player and no cookie.
The player is loaded only when you press play, in its “no cookie” version (youtube-nocookie.com). YouTube’s own privacy rules then apply.
The Google map on the Request a stay page
The Request a stay page offers a Google map showing where the house is. Until you choose to show it, only a photograph hosted on this site is displayed: nothing is loaded from Google.
The map is loaded only when you click “Show the map.” Google may then set cookies, and its own privacy rules apply.
Security
The site is served over an encrypted connection (HTTPS). Requests are stored in a database with restricted, protected access. The form is protected against automated submissions.
Changes
This policy may change, for example if we add a service to the site. The date of the last update is shown at the bottom of the page.
Last updated: October 2026.