Privacy Policy

Data controller

The data controller is Théo Divialle, operating the Atlas Conciergerie brand, whose registered office is located at 231 rue du Faubourg Saint Honoré, 75008 Paris.

For any question about your data: t.divialle@atlas-conciergerie.com

Data we collect

We only collect the data you send us, or the data required for the website to function properly:

• Lifestyle Brief: name, email, phone, destination, dates, number of guests, stay, accommodation and transport preferences, culinary wishes, desired activities and any details you choose to add.
• Appointment booking: name, email, chosen time slot and any notes.
• Direct exchanges (email, phone, WhatsApp, Telegram): your contact details and the content of our conversations.
• Audience measurement, only with your consent: pages viewed, visit duration, device and browser type, approximate location.

Any allergies or dietary restrictions you choose to share with us may constitute health data: they are processed with your explicit consent and used solely to organise your services.

Purposes and legal bases

• Responding to your Lifestyle Brief and preparing a tailored proposal: pre-contractual measures taken at your request.
• Arranging an appointment and replying to your messages: pre-contractual measures and legitimate interest in following up on your requests.
• Measuring website traffic in order to improve it: your consent.
• Ensuring the security and proper functioning of the website: legitimate interest.

Your data is never sold and is not used for marketing purposes without your consent.

Recipients and service providers

Your data is intended exclusively for the Atlas Conciergerie team. It may be processed on our behalf by the following technical providers:

• Webflow, Inc. (United States): website hosting.
• Cloudflare, Inc. (United States): secure routing of the form.
• Resend (United States): sending emails from the form.
• OVHcloud (France): email service.
• Cal.com, Inc. (United States): appointment booking.
• Google (Ireland and United States): audience measurement via Google Analytics.

If you choose to contact us via WhatsApp or Telegram, these services also process your data under their own privacy policies.

Transfers outside the European Union

Some of our providers are based in the United States. These transfers are covered by appropriate safeguards: certification under the EU–US Data Privacy Framework or standard contractual clauses adopted by the European Commission.

Retention periods

• Enquiries and exchanges not followed up: 3 years from the last contact.
• Client data: for the duration of the relationship, then 5 years after it ends.
• Audience measurement cookies: 13 months maximum; related statistics: 14 months maximum.
• Your cookie preferences: 6 months.

At the end of these periods, data is deleted or anonymised.

Cookies

The website uses cookies that are strictly necessary for it to function, which do not require your consent, as well as Google Analytics audience measurement cookies, which are only set if you accept them.

You can accept or refuse these cookies on your first visit, then change your choice at any time. Refusing cookies has no impact on your browsing.

The Cal.com booking module embedded on the Contact page may set its own technical cookies required for it to work.

Your rights

Under the GDPR, you have the following rights over your data:

• the right of access, rectification and erasure;
• the right to restriction of processing and the right to object;
• the right to data portability;
• the right to withdraw your consent at any time and to set instructions regarding your data after your death.

To exercise these rights, write to us at t.divialle@atlas-conciergerie.com. We will reply within one month. Proof of identity may be requested in case of reasonable doubt.

If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr

Security

We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), access restricted to authorised persons only, and providers selected for their security guarantees.

Changes to this policy

This policy may be updated to reflect changes to the website or to regulations; the date of the last update appears at the top of the page. To learn more about the website publisher, see our legal notice.

The website is available in several languages: only the French version is legally binding.