Privacy Policy – ALP Chartres
Last updated: 10 October 2026
SCI ALP CHARTRES places particular importance on protecting the personal data of its guests and website visitors www.alp-chartres.fr.
This policy describes the processing of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French law.
1. Data controller
SCI ALP CHARTRESSIREN: 982 547 366Registered office: 14 rue Saint-Brice, 28000 Chartres, FranceWebsite: www.alp-chartres.fr
Data protection contacts: Alexandre and Laetitia PELÉ.
Any request relating to the protection of personal data may be sent by post to the SCI’s registered office.
2. Data collected
To provide its tourist accommodation services, ALP Chartres processes, in particular:
- Travellers’ first and last names.
- Contact details required for bookings and stays.
- Stay dates and booking information.
- Financial transaction references and statuses.
- Correspondence relating to bookings, incidents or complaints.
- Information required to comply with legal obligations.
The website also uses Google Analytics to measure visitor traffic and Google Search Console to monitor its performance in search results.
ALP Chartres does not store full bank card numbers. Payments are processed securely by Stripe.
3. Purposes and legal bases
Data is used to:
- Manage bookings and stays on the basis of performing the contract.
- Process payments and refunds on the basis of performing the contract.
- Meet accounting, tax and regulatory requirements, on the basis of applicable legal obligations.
- Manage incidents, damage and complaints, based on ALP Chartres’ legitimate interest in protecting its property and defending its rights.
- Measure website traffic using Google Analytics, subject to visitors’ consent where required.
- Secure access to the properties on the basis of ALP Chartres’ legitimate interests, within the limits set by applicable regulations.
4. Service providers and recipients
Data required to manage stays and payments are processed primarily by:
Smoobu: booking management software for reservations, calendars and communications with travellers.
GDPR policy and commitments: www.smoobu.com
Stripe: a service provider responsible for securely processing payments and any authorised additional transactions.
Privacy policy: https://stripe.com/fr/privacy
Google Analytics: a service used to analyse website traffic, after obtaining the required consent.
Google Search Console: a tool for monitoring website performance in Google search results.
Data may also be accessed by technical service providers required to operate the website and by authorities legally entitled to access it.
For bookings made through Airbnb or Booking.com, these platforms also apply their own privacy policies.
Guest data is not sold to third parties.
5. Data retention periods
Data is retained only for as long as necessary to fulfil its purposes.
- Contractual information and complaints: generally five years after the end of the stay, to allow any disputes to be handled, unless a different period is required by law.
- Accounting records and supporting documents: ten years, in accordance with record-keeping requirements.
- Individual police registration forms for foreign travellers: six months where collection is legally required.
- Video surveillance footage: no more than seven days, unless a recording is retained where justified in connection with an incident or legal proceedings.
- Audience measurement data: retained in accordance with the retention settings configured in Google Analytics and applicable rules.
At the end of the retention periods, data is deleted or anonymised, subject to legal retention obligations.
6. Video surveillance
A video surveillance system is in place to secure access to the accommodation, particularly the key safes.
The cameras are directed at the relevant areas. Motion detection is limited to the key safe areas.
The system is not intended to monitor guests during their stay.
Recordings are retained for a maximum of seven days and then deleted, unless it is necessary to retain footage in the event of an incident.
Access to the footage is restricted to persons authorised by ALP Chartres.
Information about the presence of the device is displayed near the monitored area.
7. Cookies and audience measurement
The website uses cookies necessary for its operation, as well as Google Analytics to measure visitor traffic.
Where consent is required, Google Analytics trackers are activated only after the visitor has given their consent.
Visitors may refuse these trackers or withdraw their consent using the cookie management tool available on the website.
Google Search Console is used to analyse organic search performance and, by itself, does not require any additional tracking cookies to be installed on the website.
8. Security and international transfers
ALP Chartres uses specialised service providers, including Smoobu and Stripe, which have security measures and contractual commitments in place regarding data protection.
Some data may be processed or transferred outside the European Economic Area.
Depending on the services and transfers concerned, service providers rely on the safeguards provided for under the GDPR, including applicable adequacy decisions and the European Commission’s standard contractual clauses.
Information about these safeguards may be requested from ALP Chartres.
9. Your rights
Under the GDPR, everyone has the following rights, subject to the conditions set out in applicable regulations:
- Access to your personal data.
- Correction of inaccurate information.
- Erasure of data where legally required conditions are met.
- Restriction of processing.
- Object to certain processing.
- Data portability where this right applies.
- Withdrawal of consent where processing is based on consent.
Requests may be sent to Alexandre and Laetitia PELÉ at the registered office of SCI ALP CHARTRES.
A response will be provided within the statutory time limits, generally within one month.
If you have any concerns, you may submit a complaint to the CNIL: www.cnil.fr.
10. Updates
ALP Chartres may amend this policy to reflect changes to its services or to applicable regulations.
The version published on the website indicates the date it was last updated.
