Privacy policy

1. Data controller

The controller of any processing carried out following a voluntary contact is:

2. Data collected directly by the website

The website does not directly record any personal data entered by visitors.

It contains:

• no user account;
• no newsletter;
• no audience-measurement tool;
• no profiling or targeted-advertising system;
• no form that sends data to a Le Surplage database or server.

3. How the contact form works

The form shown on the home page works only in the visitor’s browser. When the send button is selected, the website prepares a message and opens the email software or application configured on the device.

The information entered is therefore neither sent to nor stored by the website. Visitors remain free to edit, send or abandon the message in their own email application.

4. Voluntary contact by email or telephone

When a person chooses to send an email or contact LE SURPLAGE directly, they voluntarily provide the information needed to process their request, such as their name, contact details and the content of their message.

This information is used only to answer the request, potentially prepare a booking or manage a contractual relationship. It is not sold, rented or used for marketing without prior consent.

The legal basis for processing is the performance of pre-contractual measures taken at the person’s request, the performance of a contract where a booking is completed, or LE SURPLAGE’s legitimate interest in replying to requests received.

5. Retention of correspondence

Messages that do not lead to a commercial relationship are retained only for as long as necessary to process them and are then deleted within a reasonable period. Correspondence relating to a booking, invoice or dispute may be retained for the periods required by applicable law or needed to defend LE SURPLAGE’s rights.

6. Cookies and trackers

The website places no advertising cookie, audience-measurement cookie or tracker requiring visitor consent. In its current configuration, it therefore does not require a cookie-consent banner.

The technical hosting provider may nevertheless temporarily process certain connection data, including IP addresses and technical logs, where necessary for security, incident prevention and hosting operations. Such processing is governed by the hosting provider’s own terms and obligations.

7. Fonts, content and external resources

The website’s fonts are used locally or replaced by fonts available on the visitor’s device. Loading a page therefore does not call an external font service.

The website does not directly embed an interactive map, external video or social-media widget that could place trackers when the page opens.

8. Online booking and external links

The “Book” button directs users to the external Secureholiday platform. The data required for a booking is then collected directly by that platform under its own privacy policy and terms of use.

Similarly, the directions link opens Google Maps only when the visitor chooses to select it. From that point, the third-party service may process data under its own rules. LE SURPLAGE does not have access to browsing data held by those services.

9. Recipients of voluntarily provided data

Information voluntarily sent to LE SURPLAGE is accessible only to persons authorised to handle enquiries, bookings and the establishment’s administrative follow-up, and to strictly necessary service providers where a booking is made.

10. Your rights

Where a person has voluntarily provided data to LE SURPLAGE, they may, subject to the conditions laid down by law, request access to their data, its correction or deletion, restriction of processing, or object to certain processing.

Requests may be sent to lesurplage@gmail.com or by post to LE SURPLAGE, 47 avenue du Soleil Levant, 83400 Hyères, France.

If a matter remains unresolved, the person may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).

11. Security

LE SURPLAGE takes reasonable precautions to protect information voluntarily received against unauthorised access, loss, alteration or disclosure. Users are also asked not to send sensitive information or bank-card details by email.

12. Changes to this policy

This policy reflects the website’s current configuration. It must be updated before adding an audience-measurement tool, newsletter, server-connected form, embedded booking module, embedded map, external video or any other service that collects data.

Last updated: 14 July 2026.