Privacy policy

In brief.: This site does not place any cookies without your consent. The only tag offered is a Google Ads measurement tag, which is loaded only if you accept it in the banner (you can change your mind at any time via the ‘Cookies’ link at the bottom of the page). Data from the contact form are used solely to reply to you. The online booking module is provided by Elloha and the map by OpenStreetMap.

This English translation is provided for convenience only. The French version is the legally binding text.

This privacy policy sets out and informs you of how BOUME (hereinafter the ‘Site Publisher’) uses and protects the information you provide to us when you use this website, accessible at the following URL: https://www.metairie-castelculier.com (hereinafter the ‘Site’). This privacy policy supplements the legal notice, which users can consult by clicking on the ‘Legal notice’ section. An anonymous audience measurement tool (Umami) counts visits without using cookies or personal data.

This privacy policy may be amended or supplemented at any time by the Site Publisher, in particular in order to comply with any legislative, regulatory, case-law or technological developments. In such a case, the date of the update will be clearly indicated at the top of this policy. Such amendments are binding on the User as soon as they are posted online. The User should therefore consult this privacy and cookie policy regularly in order to be aware of any changes.

Access to the Site implies the User’s full and unreserved acceptance of this Privacy Policy and of the cookie policy.

The User acknowledges having read the information below and authorises the Site Publisher to collect and process, as specified in the Privacy Policy, the personal data that the User provides on the Site in connection with their contact request.

The Privacy Policy applies to all pages hosted on the Site and to the records of this Site. It does not apply to pages hosted by third parties to which the Site Publisher may link and whose privacy policies may differ. The Site Publisher therefore cannot be held responsible for any data processed on or by those sites.

Article 1: General principles governing the collection and processing of data

In accordance with Article 5 of European Regulation 2016/679 (hereinafter the ‘GDPR’) and Articles 6 and 36 of the loi Informatique et Libertés (the French Data Protection Act) of 6 January 1978, as amended by the Act of 6 August 2004 relating to information technology (hereinafter the ‘Informatique et Libertés’ Act), the collection and processing of the data of users of the site comply with the following principles:

  • Lawful, fair and transparent data: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data are collected, the user will be informed that their data are being collected and for what reasons;
  • Specified, explicit and legitimate purposes: data are collected and processed in order to meet one or more of the objectives set out in this privacy policy;
  • Adequate, relevant and limited data: only the data necessary for the proper fulfilment of the objectives pursued by the site are collected;
  • Data kept for a limited time: data are kept for a limited period, of which the user is informed.
  • Accurate and, where necessary, up-to-date data: the data collected and processed will be kept up to date. All reasonable measures will be taken to ensure that inaccurate data are erased and rectified as soon as possible.
  • Integrity and confidentiality of the data collected and processed: the data controller undertakes to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

In order to be lawful, and in accordance with the requirements of Article 6 of the GDPR, the collection and processing of personal data may only take place if at least one of the following conditions is met:

  • The user has expressly consented to the processing;
  • The processing is necessary for the performance of a contract to which the data subject is party;
  • The processing is necessary for compliance with a legal obligation to which the data controller is subject;
  • The processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • The processing is necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party, unless the interests and fundamental rights of the data subject override the interests of the data controller.

Article 2: Personal data collected

Generally speaking, you may visit the Site Publisher’s Site without providing any personal information about yourself. You are under no obligation whatsoever to provide such information to the Site Publisher.

However, if you decline to do so, you may not be able to receive certain information or services that you have requested.

Article 2.1: Contact form

In certain cases, the Site Publisher may ask you to provide your title, surname, first name, email address, telephone number, postal address and country (hereinafter your ‘Personal Information’).

Article 2.2: Server log file

When the User accesses the Site, the servers consulted automatically record certain data, such as:

  • the type of domain through which the User connects to the internet;
  • the IP address assigned to the User (when connecting);
  • the date and time of access to the Site and other traffic data;
  • the time spent viewing pages;
  • location data or other communication data;
  • the pages viewed;
  • the type of browser used;
  • the platform and/or operating system used;

This information is kept solely for statistical purposes and to improve the Site.

Article 3: Purposes of processing and retention periods

The Site Publisher may process your Personal Information:

Data relating to prospective customers:

  • The data are used to respond to your enquiries, to make commercial proposals and to build and manage a prospect database, for a period of 3 years from the date of collection or of the last contact initiated by the prospective customer.
  • The data are used to provide you with the information you requested by subscribing to the newsletter and are kept for 3 years after you unsubscribe.

Data relating to active customers:

  • The data are used to perform the contract, manage the business relationship, monitor invoicing and manage unpaid amounts, and are kept for the entire duration of the contractual relationship.

Data relating to inactive customers:

  • Customer account data, orders, invoices and payment information are kept for the applicable statutory, civil and tax limitation periods.

Data generated by cookies:

  • Data relating to your browsing on the website are used to optimise the operation of our website and to measure visitor numbers, and are kept for a maximum of 13 months.

Data generated by server log files:

  • These data relating to browsing on the website are used to detect malfunctions, cyber attacks and fraudulent attempts, and are kept for a maximum of 13 months.

Article 4: Disclosure of data to third parties

Article 4.1: Sharing your personal data with third-party companies

The Site Publisher is the sole recipient of your Personal Information. It is never passed on to a third party, with the exception of the processors used by the Site Publisher: chartered accountant, website host, data host, emailing company and management software publisher. Neither the Site Publisher nor any of its processors sells the personal data of visitors to and Users of its Site.

Personal data may be transferred to countries outside the European Union (such as the United States) for the storage of your personal data.

In accordance with the GDPR, all transfers of personal data to a country outside the European Union and/or not offering a level of protection considered adequate by the European Commission have been covered by cross-border data flow agreements in line with the standard contractual clauses issued by the European Commission and declared to the CNIL. Other transfers of personal data to the United States, in particular for customer relationship management (CRM), are governed by the E.U. – U.S. PRIVACY SHIELD (the EU–US data protection framework): click here for more information.

Article 4.2. Sharing with the authorities

We may be required to disclose your personal data to administrative or judicial authorities where such disclosure is necessary to identify, apprehend or prosecute any individual likely to harm our rights, those of any other user or those of a third party.

Article 5: Security

The Publisher has taken appropriate organisational and technical measures to ensure a level of security appropriate to the risk and to ensure that the servers hosting the personal data processed prevent, as far as possible:

  • unauthorised access to or modification of such data;
  • improper use or disclosure of such data;
  • unlawful destruction or accidental loss of such data.

Organisational and technical measures:

  • The Publisher’s employees who have access to these data are bound by a strict duty of confidentiality. However, the Publisher cannot in any way be held liable if these data are misappropriated by a third party despite the security measures adopted.
  • The site has an SSL (‘Secure Socket Layer’) certificate to ensure that the information and data transferred via the site are secure. The purpose of an SSL certificate is to secure the data exchanged between the user and the site.
  • The web server on which the data are collected and hosted is secured in accordance with recognised and constantly revised IT standards.
  • The devices that process the data have up-to-date antivirus software, complex-password access and a firewall.

Users undertake not to engage in any conduct that may be contrary to this Privacy Policy or, more generally, to the law.

Article 6: Data hosting

The Site is hosted by:

Netlify, Inc., 101 2nd Street, Suite 575, San Francisco, CA 94105, United States, which can be contacted via its website www.netlify.com. Messages sent through the contact form are received and stored by Netlify in order to be forwarded to the Site Publisher.

Data may be stored by:

Google LLC, whose registered office is at 1600 Amphitheatre Parkway Mountain View, CA 94043, United States, which can be contacted via its website https://www.google.com/intl/fr/contact/.

Article 7: The data controller

The data controller for personal data is: Patricia Mezergues

The data controller can be contacted by telephone on +33 6 83 99 37 36, Monday to Friday, from 9 am to 12 noon and from 2 pm to 5 pm, or by email via the site’s contact form.

The data controller is responsible for determining the purposes and means of the processing of personal data.

Article 8: Obligations of the data controller

The data controller undertakes to protect the personal data collected, not to pass them on to third parties without the user having been informed, and to respect the purposes for which the data were collected. The data controller is required to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk involved.

In addition, the data controller undertakes to notify the user of any rectification or erasure of data, unless this would involve disproportionate formalities, costs and effort.

In the event of a personal data breach likely to result in a high risk to the user’s rights, the data controller undertakes to communicate the breach to the User without undue delay, in accordance with Article 34 of the GDPR.

Article 9: User rights

In accordance with the regulations on the processing of personal data, the user has the rights listed below.

In order for the data controller to grant their request, the user must provide their first name, surname and email address, together with a copy of their identity card or passport.

The data controller must reply to the user within a maximum of 30 (thirty) days.

Article 9.1: Right of access, right to rectification and right to erasure

The user may consult, update, modify or request the erasure of their data by sending an email to the personal data controller, specifying the subject of their request, using the Site’s contact form.

If they have one, the user has the right to request the deletion of their personal account by sending an email to the personal data controller, specifying the email address associated with their personal account.

Article 9.2: Right to data portability

The user has the right to request the portability of their personal data held by the site to another site, by submitting a data portability request to the data controller by email to the address given above.

Article 9.3: Right to restriction of processing and right to object

The user has the right to request the restriction of, or to object to, the processing of their data where one of the conditions referred to in Article 18 of the GDPR applies.

To request the restriction of the processing of their data or to object to the processing of their data, the user must submit a request for restriction of the processing of their personal data to the data controller, by email to the address given above.

Article 9.4: Right not to be subject to a decision based solely on automated processing

In accordance with Article 22 of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing where the decision produces legal effects concerning them or similarly significantly affects them.

Article 9.5: Right to decide what happens to data after death

The user is reminded that they may set out what is to happen to their collected and processed data in the event of their death, in accordance with Article 40 of the loi Informatique et Libertés.

Article 9.6: Right to lodge a complaint with the competent supervisory authority

If you consider that the Data Controller is not complying with its obligations with regard to your Personal Information, you may lodge a complaint or submit a request to the competent authority. In France, the competent authority is the CNIL (the French data protection authority), to which you may submit a request online by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet or by post:

Commission Nationale de l'Informatique et des Libertés
Service des plaintes
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

Article 10: Personal data of minors

In accordance with Article 8 of the GDPR and the loi Informatique et Libertés, only minors aged 15 or over may consent on their own to the processing of their personal data.

Where the child is under 15, consent must be given jointly by the minor and the holder(s) of parental authority.

If the user is a minor under the age of 15, the consent of a legal representative will be required in order for personal data to be collected and processed.

The Site Publisher reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the consent of a legal representative before browsing the site.

Article 11: Cookie policy

When you first visit the Publisher’s website, a banner informs you that information relating to your browsing may be stored in files known as ‘cookies’. Our cookie policy helps you to understand the measures we implement with regard to browsing on our website. In particular, it informs you about all the cookies present on our website and their purpose, and explains how to configure them.

Article 11.1: General information about the cookies on the Publisher’s site

The publisher of this website may place a cookie on the hard drive of your device (computer, tablet, mobile phone, etc.) in order to ensure smooth and optimal browsing on our website.

‘Cookies’ are small text files of limited size that allow us to recognise your computer, tablet or mobile phone in order to personalise the services we offer you.

The information collected through cookies does not in any way allow you to be identified by name. It is used exclusively for our own needs, in order to improve the interactivity and performance of our website and to send you content tailored to your interests. None of this information is disclosed to third parties except where the Publisher has obtained your prior consent or where disclosure of the information is required by law, by order of a court or of any administrative or judicial authority entitled to receive it.

To give you a clearer picture of the information that cookies identify, you will find below a list of the different types of cookies that may be used on the Publisher’s website, their name, their purpose and their retention period.

Article 11.2: Setting your cookie preferences

You can accept or refuse cookies at any time.

When you first visit the Publisher’s website, a banner appears briefly presenting information about the placing of cookies and similar technologies. This banner warns you that by continuing to browse the Publisher’s website (for example by loading a new page or clicking on various elements of the site), you accept the placing of cookies on your device. You are also deemed to have consented to the placing of cookies by clicking on the ‘X’ icon on the right of the banner.

If you have any questions or require further information about this cookie policy, please contact us using our form.

Depending on the type of cookie concerned, your consent to the placing and reading of cookies on your device may be required.

Cookies exempt from consent

In accordance with the recommendations of the Commission Nationale de l’Informatique et des Libertés (CNIL), certain cookies are exempt from the requirement to obtain your prior consent insofar as they are strictly necessary for the operation of the website or their sole purpose is to enable or facilitate communication by electronic means. These include, in particular, session identifier cookies, authentication cookies, load-balancing session cookies and interface customisation cookies. These cookies are fully subject to this policy insofar as they are issued and managed by the Site Publisher.

List of cookies requiring your prior consent

This requirement applies to cookies issued by third parties that are described as ‘persistent’ in that they remain on your device until they are deleted or reach their expiry date.

As such cookies are issued by third parties, their use and placement are subject to those third parties’ own privacy policies, links to which are given below. This category includes audience measurement cookies (Google Ads), advertising cookies (which the Publisher does not use), social media sharing cookies (in particular from Facebook, YouTube, Twitter, Google+, LinkedIn and Viadeo) and external content cookies (in particular Facebook and Twitter badges and buttons, Google Maps and YouTube or Dailymotion videos).

Audience measurement cookies compile statistics on visits to and use of various elements of the website (such as the content/pages you have visited). These data help to improve the usability of the Publisher’s website. One audience measurement tool is used on this website:

  • Google Ads (measuring the effectiveness of adverts), placed only if you click ‘Accept’ in the cookie banner: Google’s privacy policy

Social media sharing cookies are issued and managed by the publisher of the social network concerned. Subject to your consent, these cookies allow you to easily share some of the content published on the Publisher’s site, in particular via a sharing ‘button’ specific to each social network. Four types of social media sharing cookies are present on the Publisher’s site:

Various tools are available to you to manage cookies

Most internet browsers are set by default to allow cookies. Your browser gives you the option of changing these standard settings so that all cookies are systematically rejected, or so that only some cookies are accepted or refused depending on who issues them.

PLEASE NOTE: We would draw your attention to the fact that refusing cookies on your device may nevertheless affect your user experience and your access to certain services or features of this website. Where this is the case, the Site Publisher accepts no liability for the consequences of any deterioration in your browsing conditions resulting from your choice to refuse, delete or block cookies necessary for the operation of the site. Such consequences shall not constitute damage and you will not be entitled to any compensation as a result.

Your browser also allows you to delete existing cookies on your device or to be alerted when new cookies may be placed on your device. These settings do not affect your browsing but mean that you lose all the benefit provided by the cookie.

Please see below the various tools available to you for configuring the cookies placed on your device.

The cookie management tool provided by the website:

Cookies can be disabled at any time while you are browsing. You can manage your cookies via a banner available at the bottom right of the page you are viewing (‘Manage services’ button), which lists all active cookies. To disable a cookie, simply click on the cross next to the service concerned. If all cookies are disabled, the banner used to obtain the user’s consent will reappear when the page is refreshed.

Your internet browser settings

Each internet browser has its own cookie management settings. To find out how to change your cookie preferences, you will find below links to the help pages explaining how to access the relevant menu in your browser:

For more information on tools for controlling cookies, you can visit the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.