Privacy Policy

AMBREA is committed to protecting the privacy of its clients and website visitors. This Privacy Policy explains what personal data we collect, how we use it and the rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data Controller

The data controller is AMBREA (formerly Look So Tanned). For any question relating to the processing of your personal data, please write to contact@ambrea.com.

Data We Collect

We collect only the data necessary to respond to your booking enquiries and provide our service: first name, last name, email address, phone number, requested location (villa, hotel, yacht), preferred date and any information you choose to share via the contact form or WhatsApp.

Purposes & Legal Basis

Your data is processed to: (i) reply to your enquiries and manage your appointments (performance of a contract / pre-contractual measures); (ii) comply with our legal and accounting obligations (legal obligation); (iii) occasionally inform you about the maison, only with your prior consent (Art. 6(1)(a) GDPR).

Retention Period

Booking and client data is retained for the duration of our commercial relationship and up to three (3) years after the last contact for prospection purposes. Accounting documents are retained for ten (10) years in accordance with French law.

Recipients

Your data is intended solely for AMBREA and its technical service providers (hosting, email, messaging) acting as processors under contract. We never sell or rent your personal data to third parties.

International Transfers

Some of our service providers may process data outside the European Union. In such cases, transfers are governed by appropriate safeguards (European Commission adequacy decisions or Standard Contractual Clauses).

Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your personal data, as well as the right to data portability and the right to define directives concerning the fate of your data after death. You may exercise these rights at any time by writing to contact@ambrea.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.