Privacy policy

S.A.S. Casira – Saint-Mathieu-de-Tréviers, Hérault - Siret 10843853200013
Contact: [email protected]

Article 1 – Data Collection
By making an online reservation at casira.kross.travel, the client agrees to Casira collecting and processing the personal data necessary to process the reservation, including:
- Last name, first name
- Email, telephone number
- Postal address
- Payment data (processed by the secure payment provider; not stored by Casira)
- Stay dates, number of occupants, booked accommodation

Article 2 – Consent
Confirming an online reservation constitutes express acceptance of this privacy policy and the data processing described herein.

Article 3 – Purposes of Processing
The collected data is used to:
- Process and confirm the reservation
- Manage the welcome and follow-up of the stay (check-in/check-out, communication before/during/after the stay)
- Issue documents related to the stay (invoice, property condition report)
- Comply with legal obligations (tourist tax, police registration forms where applicable)
- Improve our services and communicate promotional offers, subject to the client's consent

Article 4 – Legal Basis
Processing is based on the performance of the reservation contract (Article 6(1)(b) of the GDPR) and, for promotional communications, on the client's consent (Article 6(1)(a) of the GDPR).

Article 5 – Data Recipients
Data is accessible to Casira and, where applicable, transmitted to:
- The booking engine's secure payment provider
- The owner of the booked accommodation, for the purpose of managing the stay
- Competent authorities, in the event of a legal obligation (tourist tax, judicial order)

Casira does not sell or rent client data to third parties. Article 6 – Retention Period
Data is retained for the time necessary to process the booking and the stay, and subsequently archived in compliance with legal obligations (accounting, tax), for a period not exceeding 3 years after the last contact, unless a longer statutory retention period applies.

Article 7 – Customer Rights
In accordance with the GDPR, the customer has the following rights regarding their personal data: access, rectification, erasure, restriction of processing, portability, and objection.

To exercise these rights—specifically to request the deletion of their data—the customer may write to [email protected] at any time.

Casira will process the request as soon as possible and no later than within one month.

Article 8 – Data Security
Casira implements appropriate technical and organizational measures to protect data against unauthorized access, loss, or disclosure.

Article 9 – Complaints
In the event of a dispute regarding the processing of their data, the customer may lodge a complaint with the CNIL (www.cnil.fr).

Article 10 – Amendments
Casira reserves the right to modify this privacy policy at any time. The applicable version is the one in effect on the date of the booking.