Privacy Policy

The data controller for Data collected in connection with the use of the Platform is: Rentalake, Simplified joint-stock company, RCS Marseille 948 019 281, 25 bd des dames 13002 Marseille.

Visitor

Visitor: any person visiting the website, likely to use the contact form, before any booking request or Host account creation.
Data collected: First name, last name, email address and any other information shared via the contact form.
Purpose: Responding to information requests (via contact form notably), invitations to promotional events, newsletter sending.
Legal basis: The Visitor's consent or Rentalake's legitimate interest.
Retention period: 3 years or upon Visitor's request for data deletion, whichever comes first.

Tenant

The Tenant is defined in the Terms and Conditions.

Data collected: First name, last name, email address, postal address, telephone, economic and financial information.

Purpose: Personalization of Tenant experience and service improvement, booking management, Tenant/Host relationship monitoring, complaint management, invitations to promotional events, newsletter sending.

Legal basis: Execution of Terms and Conditions and Rentalake's legitimate interest.

Retention period: 5 years after the end of contractual relations, accounting and financial data are kept for 10 years from the closing date of the accounting year.

Host

The Host is defined in the Terms and Conditions.

Data collected:
If the Host is an individual (as defined in the Terms and Conditions): First name, last name, email address, date of birth, postal address, telephone, tax reference number, IBAN, identity document.
If the Host is a professional (as defined in the Terms and Conditions): First name, last name, email address, date of birth, postal address, telephone of the representative(s).

Purpose: Service improvement, booking management, Tenant/Host relationship monitoring, complaint management, tax declaration management, invitations to promotional events, newsletter sending.

Legal basis: Execution of Terms and Conditions and Rentalake's legitimate interest.

Retention period: 5 years after the end of contractual relations, accounting and financial data are kept for 10 years from the closing date of the accounting year.

Rentalake implements appropriate technical, administrative, physical and organizational security measures to protect Data against any misuse, unauthorized access or any disclosure, loss, modification or destruction.

The recipients of Data are Rentalake's partners, employees and interns who process information requests from Visitors, Tenants and Hosts.

Data may also be communicated to Rentalake's service providers or subcontractors who need it as part of their mission execution:

Host name: Sotiaf Telematique Associés

Data collected:
– First name, last name, email address and any other Visitor information shared via the online form.
– Tenant Data: First name, last name, email address, postal address, telephone, economic and financial information.
– Host Data: First name, last name, email address, postal address, telephone, economic and financial information (bank details), identity document.
Purpose: Hosting and backup of the website www.rentalake.fr, storage of Visitor data, storage of Tenant and Host Data when using services.
Storage location: France

Chartered accountant

Data collected: First name, last name, email address, telephone of Tenants and Hosts and economic and financial information.

Use of specialized software ACD. More info: https://www.acd-groupe.fr/politique-de-protection-des-donnees-personnelles.

Purpose: Accounting, billing, payment, debt recovery.

Storage location: France and EU

Tools used internally:

Google (Google Drive, Google Sheet)

Data collected: First name, last name, email address of Tenant/Host and any information given in the contact form. First name, last name, email address, telephone, postal address of Client and any information useful for order management.

Purpose: Managing information requests, event animation and organization, Client order tracking.

Storage location: EU and outside EU.

https://policies.google.com/privacy/frameworks?hl=fr,https://policies.google.com/privacy?hl=fr#europeanrequirements.

Microsoft 365 (Word, Excel, OneDrive)

Data collected: First name, last name, email address and telephone of User and any information given in the contact form. First name, last name, email address, telephone, postal address of Client and any information useful for order management.

Purpose: Managing information requests, event animation and organization, Client order tracking.

Storage location: France, EU and outside EU,

https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?lang=13, https://learn.microsoft.com/fr-fr/compliance/regulatory/offering-eu-model-clauses

These third parties are required to use appropriate confidentiality protection measures and may only use this information for the purpose of providing the relevant services.

Rentalake may disclose your Data if necessary to comply with the law, a court order or subpoena, or to prevent any illegal activities such as deliberate attacks on Rentalake's computer systems.

Rentalake will not sell or share your Data with any third party without your authorization, except in the cases provided above.

You can exercise the following rights:

– Right of access: the right to be informed and to request access to your Data;

– Right to data portability: the right to request a copy of your Data in a structured, machine-readable format in order to transfer it to a third party;

– Right of rectification: the right to ask us to modify or update inaccurate or incomplete Data;

– Right to erasure (right to be forgotten): the right to ask us to permanently delete Data when the data subject considers that we no longer have any reason to collect/process it;

– Right to restriction of processing: the right to ask us to temporarily stop processing all or part of the Data;

– Right to object: right to object at any time, for reasons relating to the data subject's situation, to the processing of Data concerning them based on the pursuit of legitimate interest. Unless we demonstrate a compelling legitimate interest justifying such processing, we will no longer process the Data concerned;

– Right to decide the fate of your Data after death: right to impose the fate you wish to reserve for your Data in case of death;

– Right to file a complaint with the supervisory authority or obtain redress from competent courts.

These rights can be exercised by contacting: [email protected] Any request must be accompanied by proof of identity.

We remind you that you have the possibility to file a complaint with the competent supervisory authority.

In France, this authority is the National Commission for Information Technology and Civil Liberties (CNIL), whose website address is: https://www.cnil.fr.