Privacy Policy

2. Data collected

For visitors

• Browsing data (analytics cookies, if consent given)
• Contact requests: name, email, message, desired dates

For registered users (travellers)

• Registration data: email, password (hashed)
• Favourites and contact request history

For owners

• Registration data: email, password (hashed)
• Property data: name, address, description, photos, rates
• Phone number (for verification)
• Billing data (if applicable)

3. Processing purposes

Your data is collected for the following purposes:

• Matchmaking: enabling travellers to contact owners
• Account management: creation and administration of your personal space
• Service improvement: anonymised analytics to understand site usage
• Communication: transactional emails (confirmation, contact notifications)
• Security: protection against abuse and fraud

4. Legal basis for processing

• Consent: for analytics cookies and marketing communications
• Contract performance: for managing your account and providing the service
• Legitimate interests: for site security and fraud prevention
• Legal obligation: for retaining billing data

5. Data retention period

• Active accounts: duration of service use + 3 years after last login
• Contact requests: 2 years
• Billing data: 10 years (legal obligation)
• Analytics cookies: 13 months maximum

6. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data ('right to be forgotten')
• Right to restriction: restrict the processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, contact us at: support@holicosy.fr

We commit to responding to your data export request within 72 hours and processing account deletion requests within 30 days.

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

7. Cookies

Holicosy uses two types of cookies:

Essential cookies (always active)

Necessary for site operation: authentication, session preferences, security. These cookies do not collect personal data for marketing purposes.

Analytics cookies (optional)

With your consent, we use cookies to analyse site usage anonymously (pages visited, visit duration). This data helps us improve the service.

You can manage your cookie preferences at any time via the 'Cookie settings' link in the footer.

8. Data security

We implement technical and organisational measures to protect your data:

• HTTPS encryption of all communications
• Passwords hashed with a secure algorithm (bcrypt)
• Data access restricted to authorised personnel
• Monitoring and detection of suspicious activity
• Regular encrypted backups

9. Data transfers

Your data is hosted within the European Union. In case of transfer to a third country, we ensure appropriate safeguards are in place (standard contractual clauses, adequacy decision).

Contact

For any questions regarding the protection of your personal data: support@holicosy.fr