Privacy Policy
This page explains what personal data this website collects, why, who receives it, how long it is kept and how to exercise your rights.
It describes how ASSOCIATION EDUCATIVE ET CULTURELLE DES ANCIENS ET AMIS DE DON BOSCO, whose registered office is located at 2-4 rue du Lachat – 74230 THONES (hereinafter “AEC Vacances”, the “Data Controller”, “we” or “us”), collects, uses and protects the personal data of the website’s users (hereinafter “you”), in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act no. 78-17 of 6 January 1978.
Who processes your data
The publisher of this website decides which personal data is collected and how it is used. Any question about this policy can be sent to the contact below.
What we collect, and why
In the course of operating the website, we may collect the following categories of personal data:
- Identification data: surname, first name, email address, phone number, postal address;
- Browsing data: IP address, browser type, pages viewed, date and time of connection;
- Data collected through forms: information you voluntarily enter in the contact form or the quote/booking request form (surname, first name, email, desired stay, message);
- Booking and stay data: dates of stay, chosen property, stay composition, number and identity of participants, selected services, information required to manage the booking and, where applicable, its payment;
- Data from your exchanges with us: correspondence, information requests and complaints.
Mandatory or optional data: some data is essential to process your request (name, email). Without it, we cannot handle your contact, quote or booking request. Other data is optional and helps us improve the quality of our exchanges.
Online booking
The data requested when you book online is used to manage your booking, prepare and follow up your stay, and meet our legal and contractual obligations. Where you have consented, or where the law allows it, it is also used to send you information and marketing communications from AEC Vacances.
How we process your data
The table below sets out, for each purpose, the applicable legal basis and the data retention period:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Handling contact and quote requests | Pre-contractual measures (Art. 6(1)(b) GDPR) | 3 years from the last contact |
| Managing bookings and stays | Performance of a contract (Art. 6(1)(b) GDPR) | As long as needed to manage the booking and the stay, then as required by applicable legal obligations |
| Sending marketing communications (newsletter) | Consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn |
| Website improvement and audience statistics | Consent (cookies) | See the “Cookies” section |
| Website security and fraud prevention | Legitimate interest (Art. 6(1)(f) GDPR) | 1 year (connection logs) |
Maintenance and security monitoring
The accounts of this site — not its visitors. Every account is concerned, whatever its role.
Purposes
- Ensuring the security and availability of a website under a maintenance contract.
- Recognising a legitimate action by the maintenance provider, and distinguishing it from an action nobody claims.
Legal basis
Legitimate interest: ensuring the security and availability of a website under a maintenance contract.
Data processed
- The login name of the account that performed a notable administration action.
- The IP address from which that action was performed.
- The date and time of the action.
- No password, no password hash, and no email address of an account.
- No visitor data: no order, no form, no comment, no browsing statistics, and no site content.
Recipients
- A technical maintenance provider — Acting on behalf of the site owner for the performance of the maintenance contract.
- The alert address configured for this site — Notable events are also sent to this address. A message that has been received is no longer subject to any deletion carried out by this site.
Who receives your data
Your data is accessible only to authorised departments and service providers, strictly to the extent necessary for their tasks:
- AEC Vacances’ internal departments;
- the website host: OVH SAS;
- our emailing provider: Brevo;
- our audience measurement providers: Google Analytics, Microsoft Clarity;
- where applicable, administrative or judicial authorities, under a legal obligation.
AEC Vacances undertakes never to sell, rent or transfer your personal data to third parties for commercial purposes without your prior consent.
How long we keep it
The retention period for each processing activity is shown in the table above. Once it has expired, the data is deleted or anonymised.
Maintenance and security monitoring
Retention
- Administration events — Kept for as long as is necessary for the technical follow-up of the site, then deleted or stripped of their author.
- Alert messages — Kept according to the retention rules of the mailbox that receives them, which this site does not govern.
Your rights
You have the following rights over your personal data:
- Access the data held about you, and obtain a copy of it.
- Have inaccurate data corrected, and incomplete data completed.
- Have your data erased, where the law allows it.
- Restrict or object to a processing activity.
- Receive the data you provided in a reusable format, and have it transferred.
- Withdraw your consent at any time where processing relies on it — for example by unsubscribing from our marketing communications via the link included in every email.
- Set instructions regarding what happens to your data after your death.
- Lodge a complaint with the supervisory authority.
To exercise any of these rights, email us at contact@aec-vacances.com or write to ASSOCIATION EDUCATIVE ET CULTURELLE DES ANCIENS ET AMIS DE DON BOSCO, 2-4 rue du Lachat – 74230 THONES.
We will respond within one month of receiving your request. This period may be extended by two months for complex requests.
Maintenance and security monitoring
Your rights
- Right of access to the data concerning you, and right to rectification.
- Right to object, and right to erasure.
- An erasure request removes the author and the address from the events; the events themselves are kept, because a security record that its own subject could empty would no longer be one.
- Right to lodge a complaint with the supervisory authority.
Automated decision-making and profiling
AEC Vacances does not make any fully automated decision producing legal effects concerning you or similarly significantly affecting you, and does not carry out profiling for that purpose.
How your data is protected
AEC Vacances implements appropriate technical and organisational measures to ensure the security and confidentiality of your data: secure connections (HTTPS), access restricted to authorised persons only, and regular backups.
Please remain careful nonetheless: do not disclose unnecessary or sensitive information in our forms. If you need to send us such information, please use another channel.
Cookies
What is a cookie?
A cookie is a small text file placed on your device when you visit a website.
Categories of cookies used
- Strictly necessary cookies (exempt from consent): website operation and security.
- Audience measurement and statistics cookies (subject to consent).
- Functional cookies: maps, embedded videos (subject to consent).
Services and cookies used on the website
The list below gives an overview of the services and cookies used on this website. It is provided for transparency and may not be exhaustive or fully up to date: for the most accurate information, please refer to each service’s privacy policy. This list does not affect the validity of your consent or our compliance with applicable regulations.
Last updated: September 30, 2026 Inventory not yet verified by an anonymous browsing run
Consent and managing your choices
On your first visit, a banner lets you accept or refuse non-essential cookies. In line with the recommendations of the French data protection authority (CNIL), refusing is as easy as accepting, no non-essential cookie is set before you consent, and your consent is kept for a maximum of 13 months.
You can change your choices at any time, including withdrawing consent you have already given:
Lodging a complaint
If you believe your rights are not being respected, you may lodge a complaint with the supervisory authority.
TSA 80715
75334 Paris Cedex 07
Changes to this policy
AEC Vacances reserves the right to amend this policy at any time to reflect legal, regulatory or technical changes.