Privacy Policy

This is a courtesy translation. Only the French version (politique-confidentialite.html) is legally binding.

Last updated: 15 October 2026. This policy may change over time. Any substantial modification will be notified to you.

1. Data controller

Arnaud CURVELIER (sole trader — trading as “Camping Brudy — Brudy Plage”)
Chemin de Brouillet, 48150 Le Rozier, France
SIRET: 399 559 491 00044
Email: contact@camping-des-gorges.fr
Phone: +33 (0)5 65 62 66 33

The data controller is Arnaud CURVELIER, in his capacity as operator.

2. Data collected and purposes

a) Booking request

• Data: surname, first name, email, phone, dates of stay, number of people, type of accommodation, optional message
• Purpose: processing your request, calling you back, confirming your booking
• Legal basis: performance of pre-contractual measures (art. 6.1.b GDPR)
• Retention: 3 years after the last contact (prospects); 10 years for booked stays (proof of a contract concluded at a distance, article L.213-1 of the French Consumer Code, and accounting obligations)
• Invitation to leave a review — after a confirmed and completed stay, we send you a single email inviting you to share your review (legal basis: legitimate interest, art. 6.1.f GDPR). You may object to this at any time on simple request.

b) Newsletter

• Data: email, optional first name, preferred language
• Purpose: sending news, seasonal offers and editorial content
• Legal basis: explicit consent (art. 6.1.a GDPR)
• Retention: until you unsubscribe: every mailing reminds you that you can simply reply “stop”, or write to us at contact@camping-des-gorges.fr

c) Reviews and comments

• Data: the name as it appears on the original platform (first name and surname), the month of the stay or a short detail, the rating and the text of the review (submitted via Google, TripAdvisor, Booking, Camping.info or our guestbook)
• Purpose: public display, improvement of our services
• Legal basis: legitimate interest in presenting our guests’ reviews (art. 6.1.f GDPR)
• Retention: for as long as the review remains published on the third-party platforms; removed on simple request
• Translation: the text of the review is automatically translated into English, German and Dutch by DeepL SE (Germany).

d) Browsing (cookies)

• The site sets no tracking or advertising cookies and uses no analytics tool. We do not measure your audience.
• Only the following are used: a small piece of local storage that remembers your cookie choice, and technical cookies reserved for the owners’ management area (a session cookie, and a “stay signed in” cookie — “rester connecté” — kept for 30 days).
• Legal basis: legitimate interest (cookies strictly necessary for the site to work)
• Details in our cookie policy

e) Protection of the forms

• Data: a fingerprint of your IP address, computed with a secret key (it cannot be used to recover the address), and the time of your submissions
• Purpose: limiting abusive use of the forms (booking, newsletter) and login attempts on the management area
• Legal basis: legitimate interest in protecting the site (art. 6.1.f GDPR)
• Retention: two hours at most

3. Recipients (processors)

Your data is accessible only to the following recipients, strictly to the extent necessary:

• The managers of Camping Brudy — to process your request, contact you back and handle invoicing. Booking requests and sign-ups are stored on the site’s hosting and notified by email to the managers.
• Evann Costes EI — the provider who built the site and handles its hosting and maintenance on our behalf, in France.
• o2switch — host of the site and of the data, on servers located in France (European Union) — o2switch website
• MailChannels — o2switch’s backup provider: if its sending server is unavailable, an automatic email from the site may go through it.
• Apple, Google or Mozilla, depending on the managers’ phones — their notification services carry the alert for each new request, end-to-end encrypted: they cannot read its content.
• DeepL SE (Germany) — automatic translation of the site’s texts, including the text of the reviews.

The site uses no external emailing service and no analytics tool. No data is sold, rented or transferred to third parties.

4. Transfers outside the European Union

Your data (bookings, messages, sign-ups) is hosted in France, within the European Union (o2switch, Clermont-Ferrand). Three exceptions: the alert sent to the managers’ phones, end-to-end encrypted, may pass through Apple’s or Google’s servers in the United States, which cannot read it; as a backup, an automatic email may go through MailChannels, which has servers in North America and Europe; and, at your own initiative, if you click “Show the map” (Google Maps), your IP address is transmitted to Google — see our cookie policy.

5. Your rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

• Right of access (art. 15) — obtain a copy of your data
• Right to rectification (art. 16) — correct inaccurate data
• Right to erasure / “right to be forgotten” (art. 17)
• Right to restriction of processing (art. 18)
• Right to data portability (art. 20) — retrieve your data in a structured format
• Right to object (art. 21) — in particular to direct marketing
• Right to withdraw your consent at any time (newsletter, cookies)
• Post-mortem directives on what happens to your data

How to exercise them: write to contact@camping-des-gorges.fr with your request — a copy of an identity document may be requested only in case of reasonable doubt about your identity. Reply within 1 month (extendable by 2 months for complex requests).

6. Complaint to the CNIL

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, the French data protection authority):

CNIL
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Phone: +33 (0)1 53 73 22 22
Online complaint: www.cnil.fr/fr/plaintes

7. Data security

We implement appropriate technical and organisational measures:

• HTTPS / TLS encryption of all communications
• bcrypt hashing of the administrator password
• Booking and newsletter data stored in a folder that is not publicly accessible
• Principle of least privilege (access strictly limited to what is necessary)
• No third-party cookies, no trackers
• Administrator access log kept for security purposes (a file on the server) — it contains no visitor data: email addresses are replaced there with an anonymous fingerprint
• A technical log of the emails sent to customers (date, type, address) is kept for a maximum of 12 months and limited to the last 200 entries
• Content deleted from the management area remains in the recycle bin for 30 days before permanent erasure

8. Minors

Our site is not intended for minors under 15. If you are a minor, you must obtain your parents’ consent before providing your personal data.

9. Data Protection Officer (DPO)

Camping Brudy is not legally required to appoint a DPO. For any question, please contact the data controller directly at contact@camping-des-gorges.fr.