Sea view apartments in Roses, 100 metres from the beach
Last updated: March 2026
Definitions
The Publisher: Philippe Cantegreil owner of the site www.rosesrentals.com, hereinafter «we» or «the Publisher».
The Site: www.rosesrentals.com
The User: Any person consulting the Site or making a reservation, hereinafter referred to as «you».
Subcontractors: Third-party providers involved in data processing (SuprHote, Stripe, Trustindex, Infomaniak).
1 – Data collected
As part of the use of the Site and the seasonal rental service, we collect the following data:
Via the contact form: surname, first name, email address, free message.
Via the booking engine (SuperHote): name, surname, email address, phone number, stay dates, number of occupants.
Via payment (Stripe): bank card payment details. These details are processed directly and exclusively by Stripe – we do not have access to your complete bank details at any time.
Via traveller reviews (Trustindex): first name, rating and comment voluntarily left by tenants.
Automatically collected browsing data: IP address, browser type, pages visited, visit duration – solely for audience measurement purposes.
2 – Purposes of processing
Your data is collected and processed exclusively for the following purposes:
- Contact and enquiry management
- Processing and monitoring of seasonal rental bookings
- Secure payment processing via Stripe
- Sending communications related to your booking (confirmation, reminders, check-in)
- Sending out our newsletter, only if you have expressly agreed.
- Website Improvement via Anonymous Audience Measurement
- Displaying traveller reviews via Trustindex
We do not process your data for advertising, resale to third parties or commercial profiling.
3 – Legal basis for processing
Depending on the circumstances, the processing of your data is based on:
- Execution of the rental agreement (booking, payment, stay management)
- Your consent (newsletter, non-essential cookies)
- Our legitimate interest (site security, audience measurement)
- Compliance with a legal obligation (retention of accounting data)
4 – Subcontractors and data transfers
To ensure the operation of the Site and the booking service, we use the following subcontractors:
| Service provider | Role | Privacy Policy |
|---|---|---|
| SuperHotel | Reservation management and channel manager | superhote.com/legal/privacy |
| Stripe | Secure payment processing | stripe.com/fr/privacy |
| Trustindex | Collection and display of traveller reviews | trustindex.io/privacy-policy |
| Infomaniak | Website hosting | https://www.infomaniak.com/fr/cgv/politique-de-confidentialite |
| Audience measurement (if Google Analytics is enabled) | policies.google.com/privacy |
These providers act as subcontractors and undertake to comply with the GDPR. No data transfers are carried out outside the European Union, with the exception of Stripe and Google, whose servers may be located in the United States, within the framework of appropriate guarantees (standard contractual clauses).
5 – Data retention period
| Data type | Shelf life |
|---|---|
| Booking details | 5 years from the end of the stay (accounting obligation) |
| Contact details (form) | 3 years since last contact |
| Payment details | Managed by Stripe according to their own rules |
| Audience measurement cookies | 13 months maximum |
| Newsletter data | Until unsubscribe |
6 – Cookies
The Site uses the following types of cookies:
Strictly necessary cookies (no consent required): ensure the proper functioning of the site (session, security, booking basket).
Audience measurement cookies (consent required): used to measure traffic and improve the site. These cookies are only set after your explicit consent via the banner displayed on your first visit.
Third-party cookies (consent required): linked to Trustindex services (reviews), SuprHote (booking engine) and potentially social networks (sharing buttons).
You can change your cookie preferences at any time via the management banner available at the bottom of each page, or by configuring your browser.
7 – Your Rights
In accordance with GDPR (Regulation EU 2016/679) and the amended Data Protection Act, you have the following rights concerning your personal data:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate or incomplete data
- Right to be forgotten: request the deletion of your data
- Right to data portability: Receive your data in a structured and reusable format
- Right to object: object to processing based on our legitimate interest
- Right to withdraw consent: withdraw your consent at any time (newsletter, cookies)
To exercise your rights, please contact us by email at: contact[@]rosesrentals.com
We undertake to respond within a maximum period of one month. In the event of an unsatisfactory response, you have the right to lodge a complaint with the CNIL : www.cnil.fr
8 – Data Security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. Payments are processed by Stripe with bank-grade AES-256 bit encryption. In the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to inform you as soon as possible.
9 – Modifications to the Privacy Policy
This policy may be updated to reflect changes in the law or our practices. The date of the last update is shown at the top of the document. If there are any substantial changes, we will inform you by email if you are a customer or a subscriber to our newsletter.
10 – Contact and complaints
Controller: Philippe Cantegreil – contact[@]rosesrentals.com
Supervisory authority: National Commission for Information Technology and Freedoms (CNIL) 3 Place de Fontenoy 75007 Paris.