Personal data
Privacy policy
What data Domaine de Cieux collects, why, how long it keeps it, and how to exercise your rights.
Last updated October 31, 2026
Data controller
The data controller for the data collected on the website domainedecieux.fr is PESCATOR, an SAS (simplified joint-stock company) whose registered office is at 34 avenue du Lac, 87520 Cieux, France, which operates Domaine de Cieux (full details in the legal notice).
For any question about your data, write to contact@domainedecieux.fr or to the registered office address. PESCATOR has not appointed a data protection officer.
Data collected
Booking: first name, surname, email address and phone number of each angler; dates, length of stay and pegs booked; amounts, payment method and any promotional code; website language; date and version of the terms of sale accepted.
Payment: processed by Stripe. The estate keeps the payment reference and amount, never the card details.
Customer area: email address and password, stored in a hashed form that no one can read back; bookings, gift cards, requests and messages exchanged with the estate; for the lake’s shareholders, the name entered by the estate.
Catch log: species, weight, date and peg of each catch, an optional photo and comment, and the name displayed (first name and initial of the surname).
Early access: the guest’s email address, the date the link was sent and the date of the last visit.
Browsing: IP address, date and page requested, recorded in the server’s technical logs; a random tab identifier, used for the anonymous visitor counter. See also the cookie policy.
Form fields are mandatory unless stated otherwise: without them, the booking or request cannot be processed.
Purposes and legal bases
Your data is used only for the purposes below. It is not sold, rented out or used for advertising; the estate sends no newsletters and no marketing communications.
| Purpose | Data | Legal basis |
|---|---|---|
| Managing bookings and payments; sending the confirmation, the invoice and the access code for the estate | Booking, payment | Performance of the contract (Art. 6(1)(b) GDPR) |
| Running the customer area; handling requests, cancellations and date changes | Customer area, booking | Performance of the contract (Art. 6(1)(b)) |
| Applying the lake shareholders’ discount and gift cards | Customer area | Performance of the contract (Art. 6(1)(b)) |
| Issuing and keeping invoices and accounting records | Booking, payment | Legal obligation (Art. 6(1)(c)) |
| Publishing catches in the lake’s catch log | Catch log | Consent, which may be withdrawn at any time (Art. 6(1)(a)) |
| Opening the website to guests before the official opening | Early access | Legitimate interest: letting people discover the estate before it opens (Art. 6(1)(f)) |
| Keeping the website secure; preventing fraud and abuse | Browsing, booking, payment | Legitimate interest: protecting the website and its users (Art. 6(1)(f)) |
| Showing the number of visitors currently on the website | Tab identifier | Legitimate interest: showing how busy the website is without identifying anyone (Art. 6(1)(f)) |
| Handling complaints and defending the estate’s rights in the event of a dispute | Booking, payment, messages | Legitimate interest (Art. 6(1)(f)) |
Recipients
Your data is accessible only to the members of the estate’s team who need it to manage bookings and respond to requests.
It is also entrusted to service providers acting on PESCATOR’s instructions, within the limits of their assignment: OVH (hosting of the website and data), Stripe (online payment) and the email service provider that delivers the estate’s emails.
It may be disclosed to authorities that request it in accordance with the law. The name displayed, the photos and the comments in the catch log are public (see the terms of use).
Hosting and transfers
The website and its data are hosted by OVH on a server located in London (United Kingdom). The United Kingdom benefits from an adequacy decision of the European Commission: its level of data protection is recognised as equivalent to that of the European Union.
Stripe may process payment data in the United States. These transfers are governed by the EU–US Data Privacy Framework and by the European Commission’s standard contractual clauses.
Some content comes from third-party services, which then receive your IP address: base maps from IGN (Géoplateforme), video thumbnails (YouTube) and, on the payment page, the fonts of the Stripe payment form (Google Fonts). A YouTube video only loads if you start playing it.
Retention periods
Data is kept for as long as necessary for its purpose, then deleted or anonymised.
| Data | Retention period |
|---|---|
| Bookings and anglers’ contact details | 5 years after the end of the stay (limitation period) |
| Invoices and accounting records | 10 years (Article L. 123-22 of the French Commercial Code) |
| Customer area | 3 years after your last stay or your last contact with the estate, or sooner at your request |
| Requests and messages | 3 years after the last contact |
| Catch log entries | As long as the catch log is online, or until removal is requested |
| Early access list | Until the official opening, then 6 months at most |
| Server technical logs | 1 year at most |
| Visitor counter identifier | Deleted from the server no more than 15 minutes after you leave |
| Payment data held by Stripe | According to Stripe’s own obligations, described in its privacy policy |
Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. You may withdraw your consent to the publication of your catches at any time; withdrawing it does not affect what was published before.
You may also give instructions on what should happen to your data after your death, under Article 85 of the French Data Protection Act (loi Informatique et Libertés).
To exercise these rights, write to contact@domainedecieux.fr or to PESCATOR’s registered office. You will receive a reply within one month, which may be extended by two months if the request is complex. If there is reasonable doubt about your identity, you may be asked for proof of identity.
Some data cannot be erased for as long as the law requires it to be kept, such as invoices.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Security
The website is served exclusively over HTTPS. Passwords are hashed, sessions are encrypted, and administration is restricted to the estate’s team. Card details are entered directly with Stripe and never pass through the estate’s servers.
In the event of a data breach that poses a risk to your rights, PESCATOR notifies the CNIL and, if the risk is high, informs you.
Minors
Only adults may book. When a minor fishes accompanied by an adult, the minor’s first name and surname are provided by the adult who books, with the consent of the minor’s legal guardian.
Changes
This policy may change, in particular as the website’s services evolve. The date of its last update appears at the top of the page.