Privacy Policy

We take privacy seriously. This notice describes how Velvetsurfpalace gathers, processes and protects personal data belonging to guests and people who visit this website.

Last updated: 2026-07-20 · Effective immediately.

1. Who we are

Velvetsurfpalace ("we", "us", "our") runs the website at https://velvetsurfpalace.space/. Our registered office is 58 La Croisette, 06400 Cannes, FR. For questions about privacy please write to [email protected].

2. Information we collect

We gather the following types of information:

• Reservation details: name, address, contact information, payment data, dates of stay, dietary and accessibility preferences.
• Communication data: messages you send through our website, email or telephone.
• Website usage: IP address, browser, device, referring page, pages visited, timestamps, anonymised analytics events.
• Cookies and similar technologies: see Section 6 below.

3. How we use information

Personal data is handled solely to deliver and refine our services, including:

• To process reservations, payments and to provide the services you book with us.
• To reach you about your stay, deliver confirmations and answer enquiries.
• To meet legal duties (tax records, anti-money-laundering, gaming licence requirements).
• To refine our website and services, measured through aggregated, privacy-respecting analytics.
• To send marketing messages where you have given clear consent; you may opt out whenever you wish.

4. Legal basis (GDPR)

For visitors in the European Economic Area and the United Kingdom we rely on these legal bases under Articles 6(1)(a)-(f) of the General Data Protection Regulation: your consent, performance of a contract, compliance with a legal obligation, and our legitimate interest in operating a secure, reliable website.

5. Sharing of personal data

We never sell personal data. We disclose it only to: trusted vendors working for us (payment processors, booking systems, IT hosting) under written contracts; public authorities when the law demands it; and successors if a corporate reorganisation occurs.

6. Cookies

This site relies on strictly necessary cookies to operate. Optional analytics and marketing cookies appear only after you consent via our cookie banner. You can withdraw consent at any time by clearing browser storage for this domain.

7. Data retention

We keep reservation and accounting records for as long as tax and gaming-licence rules require (typically 10 years). Marketing data remains only while your consent stays valid. Server logs are removed within 30 days.

8. Your rights

Depending on local law, you may access, correct, erase, limit or object to processing of your personal data, and request data portability. To use any of these rights write to [email protected]. You may also file a complaint with your local data protection authority.

9. International transfers

When personal data leaves the European Economic Area, we maintain adequate protection through Standard Contractual Clauses or comparable safeguards.

10. Children

This website is meant for adults aged 18 and over. We do not knowingly gather personal data of children under 16. If you think such data was submitted, contact us so we can remove it.

11. Changes to this policy

We may revise this policy periodically. The "Last updated" date at the top of this page shows the current version. Significant updates will be announced on this website.