PRIVACY POLICY

ARTICLE 1: INTRODUCTION

MySunbed aims to offer the best possible experience to its users and customers. In the context of the services offered and for the purpose of continuously improving our services, we collect certain personal data.

All data is collected, stored, and used by us in accordance with the General Data Protection Regulation (EU) No. 2016/679 ('GDPR') and is never sold to third-party companies.

This privacy policy aims to inform users of the site:

How their personal data is collected and processed. Personal data refers to any data that can identify a user;
What rights users have regarding their data;
Who is responsible for processing the collected and processed data;
To whom the data is transmitted;
The site's policy regarding cookies.

This privacy policy supplements the legal notice and the General Terms and Conditions of Use and Sale, which users can consult at the following address:

ARTICLE 2: GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING

In accordance with Article 5 of European Regulation 2016/679, the collection and processing of user data on the site respect the following principles:

Lawfulness, fairness and transparency: data can only be collected and processed with the consent of the data subject. Whenever personal data is collected, the user will be informed that their data is being collected and for what purpose;
Purpose limitation: the collection and processing of data is carried out to meet one or more objectives set out in this privacy policy;
Data minimization: only the data necessary for the proper execution of the site's objectives is collected;
Storage limitation: data is retained for a limited period, of which the user is informed. Where this duration cannot be specified, the criteria used to determine it will be provided;
Integrity and confidentiality: the data controller undertakes to guarantee the integrity and confidentiality of the collected data.

To be lawful and in accordance with Article 6 of the European Regulation 2016/679, the collection and processing of personal data can only occur if at least one of the following conditions is met:

The user has expressly consented to the processing;
The processing is necessary for the performance of a contract;
The processing is necessary for compliance with a legal obligation;
The processing is necessary to protect the vital interests of the data subject or another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHILE USING THE SITE

We use your data only with your consent, for contract performance, or based on legitimate interest.

Except as specified below, only MySunbed personnel have access to your data to perform booking services and respond to messages via email or the website's contact form.

Data is also processed in the following cases:

To send you our communications (MySunbed newsletters and promotional offers)
To allow you to leave reviews for venues where you booked services.

3. A. Your User Account and Orders on MySunbed

When you create an account or place a service order on MySunbed, the following data may be recorded based on the type of service to fulfill the order:

Title, first name, and last name
City and postal code
Date of birth
Nationality
Language
Phone number
Email address
Password chosen by the user
Optional consent to receive newsletters and promotional content
Payment method used (only when ordering)
Order date and time

We will send you booking-related emails (confirmations, updates, reminders, cancellations) and user account management emails (e.g., password resets). These are required to execute the contract under appropriate data protection measures.

The personal data collected and used for this purpose is retained as long as your MySunbed account exists – 3 months from account deletion or 5 years and 3 months after inactivity.

3. B. Our Exchanges via Contact Form or Email

Our website provides a contact form to communicate with us.

You provide your first and last name, email address, and subject of your request. Address, phone number, and other data in the message are optional.

We draw your attention to our privacy policy when you type your message.

You may also contact us via the provided email address. In this case, any personal data included in the email is stored.

This data is processed with your consent to respond to your questions.

This data is retained as long as your account exists – or 5 years and 3 months after inactivity or if no account exists.

3. C. Subscription to Our Communications

You can subscribe to our communications via homepage, account creation, or during booking.

Only messages about our services are sent. We may remind you of incomplete bookings, ask for survey feedback, or notify you after regular/inactive usage.

Homepage subscription

You fill in name and email, and agree to receive communications.

During account creation

You tick the box to accept communications.

During order validation

You tick the box to accept communications.

Processing is based on your consent and intended only to keep you informed.

To improve quality, we track email opens and clicks with tracking pixels.

Your consent is requested and linked to this policy.

You can unsubscribe anytime using the link in emails or by emailing [email protected].

Your consent is the legal basis (Art. 6(1)(a) GDPR).

Data is retained while your account is active – or 5 years and 3 months after inactivity or deletion.

3. D. Reviews of Venues

When you leave reviews, we collect the following data for public display:

1. Review content
2. Rating
3. Venue name
4. Date and time
5. Response to review

Your consent is the legal basis (Art. 6(1)(a) GDPR).

You can edit or delete reviews you have left at any time from your personal space or by contacting us by email at: [email protected]

Data is retained while your account is active – or 5 years and 3 months after inactivity or deletion.

3. E. Data Sharing with Third Parties

Data may be transmitted to the following third party(ies):

- Payment service provider

Stripe handles payments and stores data as required. Learn more at https://stripe.com/fr/privacy

- Partner venue performing the reserved service

The partner venue with which you made a reservation will receive the following information:

PRIVACY POLICY

ARTICLE 1: INTRODUCTION

All data is collected, stored, and used by us in accordance with the General Data Protection Regulation (EU) No. 2016/679 ('GDPR') and is never sold to third-party companies.

This privacy policy aims to inform users of the site:

How their personal data is collected and processed. Personal data refers to any data that can identify a user;
What rights users have regarding their data;
Who is responsible for processing the collected and processed data;
To whom the data is transmitted;
The site's policy regarding cookies.

This privacy policy supplements the legal notice and the General Terms and Conditions of Use and Sale, which users can consult at the following address:

ARTICLE 2: GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING

In accordance with Article 5 of European Regulation 2016/679, the collection and processing of user data on the site respect the following principles:

Lawfulness, fairness and transparency: data can only be collected and processed with the consent of the data subject. Whenever personal data is collected, the user will be informed that their data is being collected and for what purpose;
Purpose limitation: the collection and processing of data is carried out to meet one or more objectives set out in this privacy policy;
Data minimization: only the data necessary for the proper execution of the site's objectives is collected;
Storage limitation: data is retained for a limited period, of which the user is informed. Where this duration cannot be specified, the criteria used to determine it will be provided;
Integrity and confidentiality: the data controller undertakes to guarantee the integrity and confidentiality of the collected data.

To be lawful and in accordance with Article 6 of the European Regulation 2016/679, the collection and processing of personal data can only occur if at least one of the following conditions is met:

The user has expressly consented to the processing;
The processing is necessary for the performance of a contract;
The processing is necessary for compliance with a legal obligation;
The processing is necessary to protect the vital interests of the data subject or another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHILE USING THE SITE

We use your data only with your consent, for contract performance, or based on legitimate interest.

Except as specified below, only MySunbed personnel have access to your data to perform booking services and respond to messages via email or the website's contact form.

Data is also processed in the following cases:

To send you our communications (MySunbed newsletters and promotional offers)
To allow you to leave reviews for venues where you booked services.

3. A. Your User Account and Orders on MySunbed

When you create an account or place a service order on MySunbed, the following data may be recorded based on the type of service to fulfill the order:

Title, first name, and last name
City and postal code
Date of birth
Nationality
Language
Phone number
Email address
Password chosen by the user
Optional consent to receive newsletters and promotional content
Payment method used (only when ordering)
Order date and time

The personal data collected and used for this purpose is retained as long as your MySunbed account exists – 3 months from account deletion or 5 years and 3 months after inactivity.

3. B. Our Exchanges via Contact Form or Email

Our website provides a contact form to communicate with us.

You provide your first and last name, email address, and subject of your request. Address, phone number, and other data in the message are optional.

We draw your attention to our privacy policy when you type your message.

You may also contact us via the provided email address. In this case, any personal data included in the email is stored.

This data is processed with your consent to respond to your questions.

This data is retained as long as your account exists – or 5 years and 3 months after inactivity or if no account exists.

3. C. Subscription to Our Communications

You can subscribe to our communications via homepage, account creation, or during booking.

Only messages about our services are sent. We may remind you of incomplete bookings, ask for survey feedback, or notify you after regular/inactive usage.

Homepage subscription

You fill in name and email, and agree to receive communications.

During account creation

You tick the box to accept communications.

During order validation

You tick the box to accept communications.

Processing is based on your consent and intended only to keep you informed.

To improve quality, we track email opens and clicks with tracking pixels.

Your consent is requested and linked to this policy.

You can unsubscribe anytime using the link in emails or by emailing [email protected].

Your consent is the legal basis (Art. 6(1)(a) GDPR).

Data is retained while your account is active – or 5 years and 3 months after inactivity or deletion.

3. D. Reviews of Venues

When you leave reviews, we collect the following data for public display:

1. Review content
2. Rating
3. Venue name
4. Date and time
5. Response to review

Your consent is the legal basis (Art. 6(1)(a) GDPR).

You can edit or delete reviews you have left at any time from your personal space or by contacting us by email at: [email protected]

Data is retained while your account is active – or 5 years and 3 months after inactivity or deletion.

3. E. Data Sharing with Third Parties

Data may be transmitted to the following third party(ies):

- Payment service provider

Stripe handles payments and stores data as required. Learn more at https://stripe.com/fr/privacy

- Partner venue performing the reserved service

The partner venue with which you made a reservation will receive the following information: