Privacy policy
This page explains what personal data is processed when you visit this website, book Chalet Alpina or contact us, and how to exercise your rights. The website itself neither collects nor stores any guest data.
Data controller
The data controller is ALPINA L2A, RCS Grenoble 913 278 297, represented by its chairman, Patrick Merland. Contact: [email protected].
Visiting the website
The website sets no tracking or advertising cookies, so it shows no consent banner. Visits are measured with Cloudflare Web Analytics, a cookie-free tool that produces aggregate statistics (page views, referrers) without identifying visitors. Like any hosting provider, Cloudflare technically processes IP addresses to deliver pages and protect the site; technical logs are kept in accordance with Cloudflare’s policy.
Booking
When you book, your contact details and stay information are entered in the Beds24 booking module embedded in the Book page; card payments are processed by Stripe, and the security deposit as a card pre-authorisation via tyllt.com. This data is used to perform the rental contract, send you arrival information (including by WhatsApp) and meet our legal and accounting obligations, including the tourist tax return. Retention period: 5 years after the stay for contracts and bookings (civil limitation period), 10 years for accounting records. The Beds24 module sets a single cookie, a session cookie needed for the booking process and deleted when you close your browser; as it is strictly necessary for the service you request, it does not require your consent.
Contacting us
If you email us, message us on WhatsApp or call us, your details and message are used only to reply and prepare your stay. Retention period: 3 years after the last exchange.
Recipients and transfers
The data is accessible to the publisher and its technical providers: Beds24 for bookings, Stripe for payments, tyllt.com for the security deposit and Cloudflare for hosting. Cloudflare states that it adheres to the EU–US Data Privacy Framework. Booking data is processed by Beds24 GmbH (Berlin) and hosted in Germany. Payments are processed by Stripe Payments Europe, Limited (Ireland); any transfers to the United States are covered by the EU standard contractual clauses and the Data Privacy Framework. The security deposit is handled by TYLLT, a French company (Bordeaux); it acts under its own privacy policy; its services are hosted by Scaleway, in France, and no data is transferred outside France; the payment service operator is W-HA (an Orange group subsidiary), through its API Money solution. See tyllt’s privacy policy (in French).
Your rights
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, email [email protected]. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).