Your details are used only to answer you.

Who is responsible

The data controller is Jérôme POPA, sole trader (entrepreneur individuel, EI) operating under the brand CA Conciergerie — SIREN 830 367 454 — Royal Cap, building C, apartment 317, 95 avenue Jacques-Yves Cousteau, 06270 Villeneuve-Loubet, France — contact@ca-conciergerie.fr. The site is hosted in France by OVH SAS (Roubaix).

What we collect

Only what you send us voluntarily: through the site’s forms (identity, contact details, information about a home, stay dates and preferences, professional information for partners, free-text message), by e-mail, by phone or on WhatsApp.

• Only with your consent, the site sets the Google Analytics audience-measurement cookies (see below). No advertising or social-network cookie.
• A language preference (FR / EN) may be remembered by your browser; it does not leave your device.
• Forms are passed on to our mailbox; a copy of each request is kept in our management tool, hosted in France by OVH and accessible to us alone, while we handle it, together with our follow-up notes (calls, appointments, stages of the study) (see “For how long”). No profiling is carried out.
• After a visit, the study of your property (our observations, a few photos of the home, the costing and our proposal) is given to you through a private link, viewable for six months; we keep it with your request.
• During a meeting, we note your project and the condition of the property, with a few photos. We keep them for three years at most after our last exchange, and delete them with your request.
• To reply to you and prepare the study, we may use Anthropic’s Claude model (United States), which processes these texts on our behalf without using them to train its models: a draft reply based on the content of your request (town, type of property, dates, message), tidying up our visit notes and, if you read English, translating the study. For a review of your listing, we may send it the listing’s text and photos, without names or contact details; the prices we note stay with us. After a meeting, we may send it our notes, without names or contact details, to prepare the summary we send you. Neither your name, your e-mail address nor your phone number is sent to it; we review every text before sending it to you.
• To limit abusive submissions, an encrypted fingerprint of your IP address is kept for 24 hours at most.
• For a property study or a stay enquiry, an automatic acknowledgement is sent to you, with a fixed text: nothing you wrote is copied into it. To send only one per address and per day, an encrypted fingerprint of your e-mail address is kept for three days at most.
• Fonts are hosted on the site itself: no request is made to a third-party service during your visit.
• If you write to us on WhatsApp, the conversation goes through that Meta service, under its own terms. The link on the site only opens the conversation, with a first message you can edit.

Why

To answer your request: prepare a property study, reply to a stay enquiry, review a partner application, or handle a question. The basis for this processing is your request itself (pre-contractual steps) or our legitimate interest in answering it.

Who receives your information

CA Conciergerie and, should a contract or a stay materialise, the providers strictly necessary to carry it out (for example a photographer or a housekeeping company), told only what concerns them. Your information is neither sold, rented nor passed on for third-party marketing. The technical services that process it on our behalf are listed further down (Our service providers).

For how long

Requests that lead nowhere are kept for at most three years after the last exchange, then deleted. Information tied to a contract or a stay is kept for the duration of the relationship and of the legal obligations that follow from it.

• Property studies (photos included): three years after they were last changed.
• Listing reviews (photos included): deleted with the request or the property data they relate to.
• Security log (sign-ins, account actions, estimate report requests and appointments, with the IP address): six months.
• Statements, invoices and receipts: ten years, as French law requires for accounting records (Commercial Code, art. L123-22).
• Backups: every week, the database of our management tool and of the owner area is backed up, encrypted before it leaves the hosting, then copied to a second server in France. Erased information disappears from the backups within one year at most.

Your rights

You may access the information concerning you, have it corrected or erased, object to its processing, and request its restriction or portability, under the conditions set by the General Data Protection Regulation. Simply write to contact@ca-conciergerie.fr. If you believe your rights are not respected, you may contact the CNIL, the French data protection authority.

Income estimator

The Estimate page calculates what your property could earn as a holiday let. Nothing is stored during the calculation: the address you type is sent to the French government geocoding service (IGN Géoplateforme) to suggest addresses and locate the property, then used for the calculation (area, distance to the sea).

• If you ask for the full report: your first and last name, e-mail address and phone number (optional), the property address, your answers and the calculated figures are stored to send you the link to your report and, if you wish, to call you back. The legal basis is your request.
• The report stays available for six months through its private link, then it is erased. The request itself joins the other requests made on the website (three years at most, see “For how long”).
• To prevent abuse, an encrypted fingerprint of your IP address is kept for one day at most.
• The report request is also entered in our security log, with your e-mail address and IP address, for six months, to detect abusive submissions.

Phone appointments

The Appointment page lets you book a call. To offer the free slots, our tool reads the busy times of our own calendar; nothing is read on your side.

• When you book: your first and last name, phone number, email address, the town of the property and any message, with the time of the call. The basis for this processing is your request.
• The call is entered in our calendar (Apple iCloud), with your details, so that we call you at the agreed time.
• You receive a confirmation by email, a reminder the day before if the call was booked more than a day ahead, and a private link to cancel.
• The booking and its cancellation are also entered in our security log, with the IP address (and your e-mail address for the booking), for six months, to detect abusive submissions.
• Retention: a cancelled appointment is deleted after six months, the others three years after the call; your request follows the other requests made on the website (three years at most after the last exchange, see “For how long”).

Owner area

Owners whose property we manage have a private online area, which we open ourselves: there is no public sign-up. It is used to follow the property’s calendar and monthly statements, ask us to block dates and exchange messages with us. The legal basis is the performance of the management agreement.

• Account: first and last name, e-mail address, phone number and the properties concerned. The password is only stored as a hash: we never know it. The two-factor authentication secret is encrypted. If you create a passkey, we only keep its public part, with the type of device and the dates it was created and last used: your face, your fingerprint and your device’s code never leave the device.
• Calendar: stay dates, platform and booking reference, read from our property management software. It contains no information about guests.
• Statements and invoices: amounts paid out by the platforms for each stay (with no information about guests), cleaning fees, re-invoiced expenses with their receipts, invoices and their payment status.
• Property follow-up and quotes: issues, repairs, inventories and cleaning reports for your property, with their photos; the quotes we submit to you (from €150 incl. VAT) and your answer, with its date. Property documents we file for you (management agreement, certificates, diagnostics, manuals), with their expiry date if any, so we can remind you before they expire.
• Online signature, if we send you a document to sign (agreement, amendment): the document and its fingerprint, the name you type, the date and time, the IP address and type of device when you sign, and the confirmation with the code emailed to you. These prove your signature; they are kept with the signed document for ten years, as French law requires for a contract concluded online (Consumer Code, art. L213-1).
• Maintenance log: the equipment in your property (boiler, air conditioning…), its warranty, its manual and the dates of its servicing.
• Messages and attachments (photos, PDF documents): visible only to you and to CA Conciergerie. Photos are re-saved when uploaded, which removes their metadata, including GPS location.
• Security log: sign-ins, failed attempts and account actions, with IP address and device type, kept for six months to protect your account.
• Strictly necessary cookies, which require no consent: the session (12 hours at most, or 30 days if you choose “Rester connecté”, stay signed in), a form security token and a confirmation message lasting a few minutes. No audience measurement in the owner area.
• Automatic e-mails: replies to your requests, new messages, security alerts and, if you wish, new bookings (can be turned off under “Mon compte”).
• Notifications, if you turn them on under “Mon compte”: the subscription address your browser gives us (issued by Apple, Google, Mozilla or Microsoft, which deliver the encrypted notification), with the device type. A notification never contains the text of a message. The subscription is removed when you turn them off or sign out of the device.
• Writing and translation: the texts we write to you in the owner area (property follow-up, quotes, word of the month, expenses, documents, maintenance log, replies to your date requests, messages) may be tidied up from our notes and, if your area is in English, translated by Anthropic’s Claude model (United States); your messages are then translated into French for us. Anthropic processes these texts on our behalf and does not use them to train its models. Only the text is sent, with the listing’s photos when we review it: not your name, your contact details or the amounts in your statements (the word of the month may be drafted from the number of nights booked and what happened at the property). We review every tidied-up or drafted text; the translation is stored with the text and deleted with it.
• Admin assistant: to prepare our entries, we may ask the same model to read some data from the owner area (names of properties and owners, stay dates, property follow-up, quotes, date requests, messages exchanged), never your contact details or the totals of your statements. It does nothing by itself: every action it prepares is reviewed and approved by us before it is saved. These exchanges are deleted three months after the last one.
• Retention: owner area data is kept for the duration of the management agreement. When it ends, your account stays open, read-only: for three years you can still view your statements, invoices, annual summaries, and the property’s follow-up and documents (the calendar and date requests stop on the day the agreement ends). At the end of those three years, access closes and we erase your account, your messages and their attachments, your date requests, your entries in the security log, and the requests, appointments and studies linked to your e-mail address; for a property you owned alone, also its follow-up, quotes, documents and photo.
• What remains after that erasure: statements, invoices and receipts, kept for ten years as French law requires for accounting records (Commercial Code, art. L123-22), documents signed online and the proof of their signature, also kept for ten years (Consumer Code, art. L213-1), with the property’s record and its maintenance log; for a property you shared with another owner, its follow-up, quotes, documents and photo, which concern them too, your answers to its quotes being reduced to the decision and its date, without your name or comment.
• You may ask for earlier erasure by writing to contact@ca-conciergerie.fr: the read-only access then ends.

Access for cleaning providers

The cleaning companies we work with may receive access to the area, which we open ourselves, for the properties we entrust to them. The legal basis is the performance of the management agreement and of our contract with them.

• What the provider sees: the name and town of the properties entrusted to them, arrival and departure dates, the cleaning checklist and the access instructions (stored encrypted). Never the owner’s name, the guests or any amounts.
• What they send us: the cleaning report, with its photos. “All in order” appears straight away in the owner’s area; a reported issue is first reviewed by CA Conciergerie.
• Their account: first and last name, e-mail address, phone number and the properties entrusted to them, with the same security log as the owner area (six months).
• Retention: the account is deactivated when the collaboration ends, then erased. Their reports stay in the properties’ records, without their name.

Our service providers

The services we use, each for its own task only. Apart from the Géoplateforme and WhatsApp, which apply their own terms, they process this information on our behalf.

• OVH SAS (Roubaix, France): hosting of the website, of our management tool and of the owner area, database, mailbox, and a second server, in France, that receives the encrypted backup.
• GitHub (GitHub, Inc., United States): the automated task that copies this backup to the second server every night. The archive is encrypted before it leaves the hosting: neither GitHub nor that server can read it.
• Guesty (Guesty, Inc., United States): our property management software (calendars and bookings of the managed homes). Transfer covered by the European Commission’s standard contractual clauses.
• Indy (France): issuing our invoices to owners; data hosted in the European Union.
• Google (Google Ireland Limited and Google LLC): audience measurement, only with your consent (see “Cookies and audience measurement”); Google LLC is certified under the EU–US Data Privacy Framework.
• Anthropic (United States): the Claude model, for the assisted writing, translations and listing reviews described above, without your name or contact details. Transfer covered by the European Commission’s standard contractual clauses.
• Apple (iCloud calendar): phone appointments booked online are entered in it.
• Browser notification services (Apple, Google, Mozilla, Microsoft): they deliver the owner area’s notifications, encrypted, if you turn them on.
• IGN Géoplateforme (French public service): it receives the address typed in the estimator, sent by our server, to locate it.
• Brevo (France): sending automatic e-mails, only if we use it; otherwise they leave from our mailbox at OVH.
• WhatsApp (Meta): only if you choose to write to us there.

Cookies and audience measurement

To know which pages are useful and where enquiries come from, we use Google Analytics, a service of Google Ireland Limited and Google LLC. It only runs after your consent, given in the banner shown on your first visit; if you decline, nothing is loaded and your visit is not affected.

• Cookies set after consent: _ga and _ga_RGHZTKTH83, which tell visits apart without identifying you by name, for 13 months at most, not extended at each visit.
• What is measured: pages viewed, where visits come from, type of device, a form being sent, a click on the phone number, e-mail address or WhatsApp. Google Analytics does not keep your IP address; advertising features and Google Signals are switched off.
• Retention of detailed data in Google Analytics: 14 months at most.
• Transfer outside the European Union: Google LLC is certified under the EU–US Data Privacy Framework.
• Your choice is kept for six months in your browser, then asked again.

You can change your mind at any time: manage cookies. The link is also at the bottom of every page. Withdrawing consent deletes the measurement cookies.