Privacy policy
What we collect, why, how long we keep it, and how to take back control at any time.
Who processes your data
The data controller is SAS Maisonseule, which operates Château de Maisonseule (07270 Saint-Basile, Ardèche) and whose registered office is at 64 rue La Boétie, 75008 Paris, France.
The data we collect
We collect only the information you choose to send us through the contact form:
- Identityfirst name and last name
- Contact detailsemail address, and telephone number if you choose to give one
- Your planstype of event, preferred dates, number of people, free-text message
No sensitive data is requested. No profiling or automated decision-making takes place.
What the server records automatically
As with any website, our host automatically logs certain technical information on every visit: your IP address, the date and time, the page viewed, the browser type and the operating system. These logs serve only to run the site, keep it secure and diagnose faults. They are not used to identify you, are not cross-referenced with any other data, and are kept by the host for no more than twelve months, in line with its legal obligations.
When you send the form, the server also keeps, for one hour, a fingerprint of your IP address (a derived value from which the address cannot be recovered) together with the time of sending: it serves only to block bursts of submissions (five enquiries per hour at most), and is then erased.
Why we process it
Your data is used solely to answer your enquiry, draw up a proposal suited to your plans and follow up on our exchanges. The legal basis is your consent, given through the form's tick box, together with the pre-contractual steps taken at your request.
Who has access to it
Your data is accessible only to the Château de Maisonseule team. It is never sold, rented or passed on to third parties for commercial purposes.
We disclose it to no one else, except in three cases: if you ask or allow us to; if it is necessary in order to provide the service you have requested; or if the law requires us to, at the formal request of a judicial or administrative authority.
To operate, the site relies on technical service providers, who act only on our instructions:
- OVH SAShosting of the site and sending of the form’s emails, from its data centres in France
- Google (Gmail)our team’s mailbox, which receives your enquiries; Google may process this data outside the European Union, under the safeguards provided for by the GDPR (standard contractual clauses, EU–US Data Privacy Framework)
- IGN – Géoplateforme and unpkg.combase map and display library for the map on the Contact page, which receive your IP address when that page is displayed
The form is handled by our own website: it forwards your enquiry by email to our team and sends you an acknowledgement. No outside form service is involved.
How long we keep it
- Enquiry that goes no further3 years from the last contact
- File that led to a contractfor the duration of the contractual relationship, then kept for the applicable legal and accounting purposes (ten years for accounting records)
- Server logstwelve months at most, at the host
- Form anti-abuse fingerprintone hour
- Browser session memoryuntil the tab is closed
Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.
To exercise those rights, write to us: we reply within one month. If our answer does not satisfy you, you may refer the matter to the French data protection authority, the CNIL: cnil.fr.
Cookies and analytics
This site sets no advertising cookies and no analytics trackers. No cookie is set, and nothing is stored permanently in your browser. Only a few technical flags are placed in its session memory: ms-visited (so the opening animation is not replayed on every page), ambianceOn and ambiancePos (whether the background music is off, and where it had got to), zoomEnter and zoomEnterSrc (transition between two pages, erased immediately). They disappear when you close the tab, never leave your device and allow no identification: being strictly necessary for the service you request, they require no consent.
The typefaces are hosted on our own server: displaying them involves no connection to any third-party service. The Contact page is the exception: it shows a map whose “Plan IGN” base layer is supplied by the IGN Géoplateforme, a French public service, and whose display library, Leaflet, is loaded from unpkg.com. Displaying it means connecting to those two services, which therefore receive your IP address. The other pages connect to no outside service.
Security
The site is served over HTTPS. Data sent through the form is encrypted in transit. We host no prospect database on this site.
Links to other sites
This site links to outside sites, in particular those of the Ardèche tourist board and of the CNIL. We have no control over their content or their data practices: visiting them is subject to their own terms. The Les Buis website is the exception: it is operated by the same entity as Château de Maisonseule, and this policy applies to it in the same way.
Contact us
For any question about this policy, or to exercise your rights, write to us through the contact form, or by post to Château de Maisonseule, 07270 Saint-Basile, France.
Last updated: 15 October 2026.