Privacy
Privacy policy
How Appart-One collects, uses and protects your personal data, in accordance with the GDPR.
The purpose of this privacy policy is to inform you of how Appart-One collects, uses and protects your personal data when you use the https://www.appart-one.com website.
1. Data controller
The controller responsible for processing personal data is Appart-One, represented by its president OBEO Asset Management.
For any question relating to your personal data, you can write to communication@appart-one.com.
2. Data collected
We only collect the data you provide to us voluntarily via the site's forms:
- Contact form
- Booking / stay enquiry form
- Newsletter sign-up
- Professional forms (business travel, seminars, long-stay)
The information collected may include: surname, first name, email address, telephone number, the relevant destination (aparthotel), desired stay dates and, for professional enquiries, your company name and the details of your requirement.
3. Purposes of processing
Your data is used to:
- Respond to your request for information or booking
- Process your booking and organise your stay
- Send you the requested documents or confirmations
- Handle professional enquiries (companies, seminars, long-stay)
- Improve our service and the quality of our welcome
4. Legal basis
Processing is based on two legal grounds (Article 6 of the GDPR):
- The consent you give us when filling in a form
- Appart-One's legitimate interest in responding to your commercial requests and in managing the ongoing relationship
5. Retention period
Your data is kept for three years from your last contact with Appart-One (last request, last exchange or last visit). After this period, it is deleted or anonymised, unless there is a legal obligation to keep it for longer (accounting, rental agreement, etc.).
6. Recipients of the data
Your data is intended exclusively for Appart-One's internal teams (sales and operations) in charge of handling your request. It is never sold or transferred to third parties for commercial or advertising purposes.
The site is hosted by Cloudflare, Inc. (a global network with points of presence in the European Union). Forms are processed via a Cloudflare serverless function and then routed by the transactional email service Brevo (a French company, with servers located in the European Union). Any transfer outside the European Union is governed by the Standard Contractual Clauses approved by the European Commission, guaranteeing an adequate level of protection in accordance with Article 46 of the GDPR.
7. Cookies and trackers
Appart-One uses Plausible Analytics, a privacy-friendly European audience measurement solution:
- No cookie placed on your device
- No personal identifier collected
- No data passed to third parties (advertising, profiling)
- Aggregated and fully anonymised statistics
The site therefore does not use a cookie consent banner, since no tracking cookies are used.
8. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data:
- Right of access to the data concerning you
- Right to rectification of inaccurate data
- Right to erasure (right to be forgotten), subject to conditions
- Right to data portability
- Right to object to processing, in particular for marketing purposes
- Right to restriction of processing
9. Exercising your rights
To exercise any of these rights, send your request by email to communication@appart-one.com, specifying the subject of your request. We undertake to respond within a maximum of one month. Proof of identity may be requested in the event of reasonable doubt.
10. Complaint to the CNIL
If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL — Commission Nationale de l'Informatique et des Libertés):
- By post: CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- Online: cnil.fr/fr/plaintes
11. Security
Appart-One implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access: HTTPS connection, secure hosting, access restricted to authorised persons.
12. Changes to the policy
This privacy policy may be amended at any time to reflect legal, technical or organisational developments. The applicable version is the one published on the site on the date of your visit. We invite you to consult it regularly.