Privacy Policy / GDPR

Data controller

Rando d’Azur — Maddy Polomeni, sole trader (entrepreneur individuel).

22 avenue des Broussailles, Les Chênes A, 06400 Cannes, France.

Email : bonjour@maddypolomeni.com. Telephone : +33 6 67 90 69 32.

SIRET : 818 711 764 00048. EU VAT number : FR50818711764. Code NAF : 9329Z.

https://randodazur.com

Information and purposes

When you contact Maddy by email, telephone or WhatsApp, the contact details and information you provide are used to answer your enquiry, prepare a quotation and, where applicable, arrange and follow up your booking. Only share information relevant to your request.

Website hosting involves technical information needed to deliver and secure pages, including the IP address and technical request information.

The newsletter form sends your email address and express consent to Brevo via its official secure form. A confirmation email is requested; you join the newsletter only after clicking the confirmation link within 7 days. Submitting the form alone does not complete your subscription. Online booking links open the external Regiondo shop (https://randodazur.regiondo.fr/categories). No booking or payment widget loads on this website. Instagram and Facebook links also open external sites; their own privacy and cookie choices apply after you open them.

Newsletter and consent

Rando d’Azur uses Brevo as its newsletter processor to manage email addresses, consent and confirmation records and send the newsletter. This processing is based on your explicit consent (Article 6(1)(a) GDPR). The checkbox is not preselected. You can withdraw consent at any time through the unsubscribe link in newsletter emails or by writing to bonjour@maddypolomeni.com.

Newsletter data is used while your subscription is active. Consent and suppression records may be retained where necessary to respect withdrawal or demonstrate consent; the 7-day confirmation window does not by itself mean unconfirmed records are deleted. Unconfirmed requests are not treated as active newsletter subscriptions. Brevo’s data protection information is available at https://www.brevo.com/legal/privacypolicy/.

This website submits directly to Brevo and then displays the provider’s response page. No embedded Brevo widget, tracking pixel or marketing script loads on this website. Brevo’s external form applies its own privacy and cookie information.

Legal bases

Responding to quotation requests and handling bookings is based on pre-contractual steps at your request and performance of the contract.

Accounting and other legally required processing is based on legal obligations. Website operation and security are based on the legitimate interest in providing a reliable, secure service while respecting your rights.

Optional audience measurement and contact or booking-request click measurement are based on your prior consent (Article 6(1)(a) GDPR). They remain disabled until you allow them. You can refuse or withdraw via “Audience measurement settings” in the footer without losing access to the website.

Optional Vercel Web Analytics

After your consent, Vercel Web Analytics measures page visits and four click categories: WhatsApp, telephone, email and booking requests. Custom events have fixed names only, with no contact details, link destination, message content, form values or customer identifier. A click indicates an intention to contact us, not a completed booking.

Vercel processes technical request data to create aggregated statistics, including device/browser information, approximate location and a short-lived visit hash. According to Vercel, the visit identifier is discarded after 24 hours; this is not the retention period of aggregate statistics. No identify/group feature or analytics cookie is enabled. Page URLs are limited to public routes and stripped of queries and fragments. Events with potentially identifying referrers are filtered out.

The provider is Vercel Inc. Processing can involve transfers outside the EEA; its data processing agreement and transfer safeguards are described at https://vercel.com/legal/dpa. Analytics privacy details: https://vercel.com/docs/analytics/privacy-policy. Aggregate statistics are retained according to the applicable Vercel plan and project retention settings; they are not added to customer or booking records.

The first-party local storage entry rando-analytics-consent-v1 contains only your allow/refuse choice and its expiry, valid for a maximum of 180 days and removed on your next visit after expiry. It is used solely to respect your privacy preference, not to identify or track you. No preference is stored until you make a choice. If browser storage is unavailable, the choice lasts only for the current page session.

Recipients and external services

Information is intended for Maddy Polomeni and authorised people needed to handle your request or arrange the service, and for technical email and hosting providers where their involvement is necessary.

The website is hosted by Vercel Inc., based in the United States. Hosting may involve processing outside the European Economic Area. Vercel’s information about processing, international transfers and safeguards is available at https://vercel.com/legal/privacy-policy.

Opening WhatsApp or another external service takes you away from this website. That service’s processing is governed by its own privacy policy.

Retention and security

Enquiries and correspondence are kept for the time needed to handle them and follow up the relationship. Booking information is retained to provide the service and, where necessary, to meet legal obligations or defend rights within applicable limitation periods.

Relevant accounting records and supporting documents are kept for the statutory 10-year period under Article L. 123-22 of the French Commercial Code. Other data is deleted or anonymised when no longer needed, subject to statutory retention obligations.

Access to information must be restricted to authorised people. Connections to this website are encrypted using HTTPS.

Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction of processing, portability and object to processing based on legitimate interests.

Send requests to bonjour@maddypolomeni.com or the business address above. Identity verification may be requested where there is reasonable doubt. Replies are provided within the statutory GDPR time limits.

You may also complain to the French data protection authority, CNIL: https://www.cnil.fr.