PRIVACY AND COOKIES POLICY

(Effective as of mars 19, 2026) IMPORTANT : Translation for convenience only These legal notice was originally drafted in French. In the event of any inconsistency or conflict, the French‑language version shall prevail and be legally binding.

1. Data Controller

UPSTAYS SAS, UPSTAYS SASwith a share capital of €10,000, registered with the Cannes Trade and Companies Register under number 801 766 957, with its registered office at 16-18 rue des Suisses, 06400 Cannes, is the data controller for personal data collected on the website www.upstays.com..

For any questions regarding the protection of personal data, please contact: welcome@upstays.com.

2. Data Collected

UPSTAYS collects personal data when you:

  • fill in a contact form
  • submit a property valuation or management request
  • submit a request as a traveler
  • subscribe to the newsletter
  • browse the website

2.1 Identification Data

Depending on the form used, the following data may be collected:

  • Name
  • Last name
  • Email address
  • Phone number
  • Information relating to a property
  • Information relating to a rental project
  • Any other information voluntarily provided in free text fields

 

Certain fields are mandatory in order to process your request.

UPSTAYS reserves the right to add new forms or additional fields in the future, in compliance with applicable legal requirements.

2.2 Browsing Data

When you browse the website, the following data may be collected:

  • IP address
  • Connection data
  • Browser type
  • Pages viewed
  • Statistical data

 

This data is collected through cookies and analytics tools (see Section 8).

3. Purposes of Processing

Personal data is collected for the following purposes:

  • Responding to contact requests
  • Processing valuation or management requests
  • Managing relationships with property owners and travelers
  • Sending communications and newsletters (subject to consent)
  • Improving user experience
  • Measuring website traffic and performance
  • Implementing advertising and retargeting campaigns

4. Legal Basis for Processing

Processing activities are based on:

  • The performance of pre-contractual measures (valuation or contact requests)
  • The performance of a contract
  • The legitimate interests of UPSTAYS (service improvement, security)
  • Consent (newsletter subscriptions, advertising cookies)
  • Compliance with legal obligations

5. Recipients of Data

Data may be shared with the following service providers:

  • Brevo (email and newsletter management)
  • Google Analytics 4 (audience measurement)
  • Google Ads (advertising and retargeting)
  • Meta (advertising and retargeting)
  • Axeptio (cookie consent management)
  • Infomaniak (website hosting)
  • Technical service providers necessary for the operation of the website

 

These providers act as data processors within the meaning of the GDPR.

6. Transfers Outside the European Union

Some tools used (notably Google and Meta services) may involve transfers of data to the United States.

Such transfers are governed by appropriate legal safeguards, including:

  • Standard Contractual Clauses approved by the European Commission
  • The European Commission adequacy decision regarding the EU–US Data Privacy Framework, where applicable

7. Data Retention Period

  • Personal data is retained for limited periods:

    • Prospect data: 3 years from the last contact
    • Client data: duration of the contractual relationship plus legal retention obligations (up to 10 years for accounting purposes)
    • Newsletter data: until consent is withdrawn
    • Browsing data: maximum of 13 months

8. Cookies

The website uses cookies and tracking technologies. A consent management banner is implemented through the Axeptio solution. The cookies used may include:

8.1 Strictly Necessary Cookies

Essential for the proper functioning of the website.

8.2 Analytical Cookies

Google Analytics 4 is used to measure audience traffic and improve the website.

8.3 Advertising Cookies

  • Google Ads
  • Meta Pixel

 

These cookies enable the display of personalized advertising and the measurement of advertising performance.

You may at any time:

  • accept
  • refuse
  • customize your preferences

 

via the cookie banner or through the preference management link available on the website.

Cookies are retained for a maximum period of 13 months.

9. Data Security

UPSTAYS implements appropriate technical and organizational measures to ensure the security of personal data, including:

  • Secure hosting via Infomaniak
  • HTTPS encryption protocol
  • Automatic backups via Updraft
  • Restricted access to personal data

10. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to withdraw your consent at any time

 

You may exercise your rights by contacting: welcome@upstays.fr

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

11. Changes to the Policy

UPSTAYS reserves the right to modify this policy at any time in order to ensure compliance with applicable regulations.

The applicable version is the one published on the website on the date of consultation.