Privacy Policy

The controller of the data collected on lavillacoliving.com is SCI Sleep In (trading as La Villa Coliving), 8 rue du Mont Blanc, 74100 Annemasse, France — contact: jerome@lavillacoliving.com.

a) Application form. When you apply to join one of our houses, we collect: first name, last name, email address, phone number, planned arrival period, intended length of stay and how you heard about us.
Purpose: reviewing your application, contacting you and organising the next steps (exchange, discovery call, visit). Legal basis: pre-contractual measures taken at your request (art. 6(1)(b) GDPR).

b) Tenancy management. If your application leads to a tenancy, additional data is collected to establish and perform the rental agreement (supporting documents, billing data).
Legal basis: performance of the contract (art. 6(1)(b)) and legal obligations (art. 6(1)(c)).

c) Direct exchanges. When you contact us by email or WhatsApp, we process the data you provide on that occasion.
Purpose: answering your requests. Legal basis: legitimate interest (art. 6(1)(f)) or pre-contractual measures.

d) Browsing data and audience measurement. We use Google Analytics 4 to understand how the Site is used (page views, journeys, traffic sources).
Legal basis: your consent (art. 6(1)(a)). You can refuse or block these cookies at any time (see section 7).

We do not collect any "sensitive" data and we make no fully automated decisions producing legal effects.

Your data is intended exclusively for the publisher and is never sold or rented. To operate, the Site relies on technical providers (processors within the meaning of the GDPR):

• Supabase — database hosting (applications); hosting region: Frankfurt
• Vercel Inc. (United States) — Site hosting
• Google LLC (United States) — audience measurement (Google Analytics 4)
• Meta Platforms (WhatsApp) — when you choose to contact us via WhatsApp
• Resend (Resend, Inc., United States — sending operated from the EU region, eu-west-1) — transactional emails (confirmations, login links)
• Internal automation tools (n8n Cloud, Hostinger infrastructure)

Some of these providers are located outside the European Union (United States). Transfers are governed by the mechanisms provided for by the GDPR (standard contractual clauses of the European Commission and/or the EU–US Data Privacy Framework to which these providers adhere).

• Unsuccessful applications: 2 years from the last contact, then deletion.
• Residents' files: duration of the tenancy, then the applicable statutory retention periods (civil, accounting and tax limitations).
• Email/WhatsApp exchanges: as long as needed to handle the request, then limited archiving.
• Audience measurement data: 14 months maximum (Google Analytics setting).

In accordance with the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to set post-mortem directives.

To exercise them, write to jerome@lavillacoliving.com stating your request. You will receive a reply within one month. You may withdraw your consent at any time for the processing operations that rely on it.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the CNIL (cnil.fr).

We implement appropriate technical and organisational measures to protect your data: encrypted exchanges (HTTPS), database access control, access restricted to authorised persons only.

The Site uses cookies and trackers:

• Strictly necessary cookies for the operation of the Site (exempt from consent);
• Audience measurement cookies (Google Analytics 4) — you can block them at any time in your browser settings.