Privacy Policy

1. Data controller

Ma Salle SAS, registered in Paris, France, is the data controller for personal data collected via masalle.paris.

Contact: [email protected]

2. Data collected

• Identification data: name, email address, phone number.
• Payment data: card information is processed by Stripe and not stored on our servers.
• Usage data: booking history, access times, login logs.
• Technical data: IP address, browser type, pages visited (via analytics cookies).

3. Processing purposes

• Account and booking management.
• Payment processing.
• Sending access codes and confirmations (email, SMS).
• Service improvement and statistical analysis.
• Legal compliance.

4. Legal basis

• Contract execution (booking and service access).
• Consent (analytics cookies, marketing communications).
• Legitimate interest (security, fraud prevention).
• Legal obligations (billing data retention).

5. Data retention

• Account data: duration of commercial relationship + 3 years after last activity.
• Billing data: 10 years per French accounting law.
• Access logs: 12 months.
• Cookies: 13 months maximum per CNIL recommendations.

6. Data recipients

• Stripe (payment processing).
• Our hosting provider (Hetzner, Germany — EU servers).
• Competent authorities when legally required.

7. Your rights (GDPR)

You have the right to access, rectify, erase, port, object to, and restrict processing of your personal data.

To exercise your rights: [email protected]

You may also file a complaint with the CNIL (www.cnil.fr).

8. Security

We implement appropriate technical and organizational measures: SSL/TLS encryption, access controls, regular backups.