1. About this privacy statement
This privacy statement describes which personal data Camping Liabaquet processes, why we do so, how we keep it secure, and what rights you have. We handle personal data with care and in accordance with the General Data Protection Regulation (GDPR) and its implementing legislation.
Last updated on 26 July 2026. We may amend this statement from time to time; the most current version will always be available on this page.
2. Who is the data controller?
Camping Liabaquet is the data controller within the meaning of the GDPR for personal data collected via this website, our services, and our communications.
Address 327 Route de Liabaquet 24270, Sarlande, FR E-mail liabaquet@gmail.com Telephone +33 7 70 29 41 26
3. What personal data do we process?
For guests who make a booking, we process: name, address, e-mail address, telephone number, number of guests, dates of stay and — where applicable — identification details for the tourist tax register.
In addition, certain data are collected automatically when you use our website: IP address, browser type, device type, and information about how the site is used. These data are necessary for the website to function and to prevent misuse.
4. For what purpose and on what legal basis?
We process personal data for the following purposes:
Performance of a contract — providing the services purchased, customer contact, support, and invoicing.
Legal obligation — statutory retention requirements for tax purposes (7 years) and other administrative obligations.
Legitimate interest — securing our systems, fraud prevention, and improving our services.
Consent — when you sign up for communications or give your consent for specific processing activities.
We do not process special categories of personal data (such as health, religion, or political preference), unless you provide these to us of your own accord and they are necessary for the service.
5. How long do we retain your data?
We do not retain personal data for longer than is necessary for the purpose for which it was collected, or for as long as a statutory retention obligation requires:
Category Retention period
Customer file & communications Duration of contract + 2 years Invoicing and administration 7 years (statutory tax retention requirement) Contact form submissions Maximum 2 years after last contact Website logs (security) Maximum 6 months E-mails from applicants Maximum 4 weeks after completion (unless consent to retain is given)
6. With which third parties do we share data?
We share personal data solely with processors who help us deliver our service. A data processing agreement has been concluded with each processor, setting out the protection of your data.
Processor Purpose Location / safeguards Velify Software Development Hosting + technical maintenance of website EU — Frankfurt (Supabase) + Vercel Edge · DPA via Velify platform Vercel Inc. Hosting and CDN United States, with EU edge nodes · DPA + Standard Contractual Clauses (SCCs) Supabase Inc. Database for reservations + contact form EU — Frankfurt · DPA available, processing within EU Resend Inc. Sending e-mails (confirmation + newsletter) United States · DPA + SCCs
We do not sell personal data to third parties. Transfer to countries outside the European Economic Area takes place only on the basis of Standard Contractual Clauses (SCCs) issued by the European Commission or another appropriate transfer mechanism.
7. Security
We have put in place appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access:
TLS encryption (HTTPS) on all our traffic
Database encryption at rest (AES-256)
Row-level security so that customers can only view their own data
HMAC-signed session cookies
Restricted access (least privilege) for our team, with audit logging
Regular updates to our software dependencies
Should a data breach occur despite our measures, we will report it to the relevant supervisory authority within 72 hours and — where legally required — notify the individuals concerned as well.
8. Your rights
Under the GDPR, you have the following rights:
Access You may request details of the personal data we process about you. Rectification You may ask us to correct inaccurate or incomplete data. Erasure You may request that we delete your data when it is no longer necessary or when you withdraw your consent. Restriction You may have processing temporarily restricted, for example whilst a rectification request is pending. Portability You may receive your data in a structured digital format for transfer to another party. Objection You may object to processing based on legitimate interest or direct marketing. Withdrawal of consent Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Would you like to exercise a right? Send an e-mail to liabaquet@gmail.com. We will respond within four weeks. To verify your identity, we may request additional information.
9. Lodging a complaint
Are you unhappy with the way we handle your data? Please contact us first so that we can resolve the matter together. You also have the right at any time to lodge a complaint with the relevant data protection supervisory authority in your country of residence.
10. Cookies
This website uses cookies. How they work and your options for refusing cookies are described in our cookie statement.
11. Changes to this statement
We may update this privacy statement from time to time — for example when we add new services or when required to do so by law. In the event of significant changes, we will actively inform existing customers. The date at the top of this page indicates when the most recent change was made.
12. Contact
Do you have questions about this statement or about how we handle your data? Send an e-mail to liabaquet@gmail.com.