Privacy Policy

01Who We Are

Lutetia Group, registered under SIREN 351 493 713, whose registered office is at 30 Rue Volta, 75003 Paris, France, is the data controller for the processing described in this policy. Discretion is at the heart of our profession: we collect only the information needed to serve you and never sell your personal data.

For any question relating to your personal data, write to contact@lutetia-group.com.

02Data We Collect

Depending on how you interact with us, we may process:

• Identity and contact details: name, email address, telephone number, postal address, language;
• Stay and service details: destinations, dates, number and age range of guests, preferences and special requests you choose to share with us;
• Contractual and billing data: agreements, invoices, payment records (card data is processed by the bank or payment provider, not stored by us);
• Identification data: a copy of an identity document where required by law or by the owner for a booking;
• Owner data: for property owners, details of the property and the information needed to manage it;
• Correspondence: the content of your emails and WhatsApp messages;
• Technical data: IP address, browser type and pages visited, as described in our Cookie Policy.

We do not knowingly collect sensitive data. Please only share health-related information (for example an allergy or a mobility requirement) if you wish us to take it into account, in which case it is processed with your explicit consent and solely for that purpose.

03Purposes and Legal Bases

04Who Receives Your Data

Your data is accessible only to authorised members of our team. It may be shared, strictly where necessary, with:

• the owner of the property you book, and the service providers involved in your stay (housekeeping, chefs, drivers, activity providers);
• our technical subcontractors (website hosting, email and messaging services, IT maintenance), bound by confidentiality and data-processing obligations;
• our banks, accountants and legal advisers;
• public authorities, when required by law.

We never sell or rent your personal data.

05International Transfers

Your data is primarily processed within the European Union. Some providers, such as messaging services, or stays you book outside the European Economic Area may involve a transfer outside the EEA. Such transfers rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies), on the European Commission’s standard contractual clauses, or, for a stay you book abroad, on the necessity of the transfer for the performance of your contract (Art. 49 GDPR).

06How Long We Keep It

07Your Rights

Under the GDPR and the French Data Protection Act of 6 January 1978, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, to withdraw your consent at any time, and to give instructions on what happens to your data after your death.

To exercise these rights, write to contact@lutetia-group.com or to Lutetia Group, 30 Rue Volta, 75003 Paris. We will respond within one month. We may ask for proof of identity if there is reasonable doubt about who is making the request.

If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

08Telephone Canvassing

In accordance with Article L.223-2 of the French Consumer Code, if you do not wish to receive commercial calls from companies with which you have no current contract, you may register free of charge on the national opposition list Bloctel.

09Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access: restricted access, encrypted connections (HTTPS), secure professional tools and confidentiality commitments from our staff and partners.

10Minors

Our services are intended for adults. We do not knowingly collect data from minors under 15 years of age without the consent of a parent or legal guardian. Information about minor guests is collected only from the adult making the booking, and only where necessary for the stay.

11Changes to this Policy

We may update this policy to reflect changes in our services or in the law. The date of the latest version appears at the top of this page. Where a change significantly affects you, we will inform you by appropriate means.