This page is a courtesy translation of the French Privacy Policy (Politique de confidentialité). In case of discrepancy between the French version and this English translation, the French version shall prevail.
Last updated: 12 October 2026
Le Fief des Époisses places the utmost importance on the protection of your personal data and the respect of your privacy.
This privacy policy describes how Le Fief des Époisses collects, uses and protects the personal data you provide when using the website https://www.fiefdesepoisses.com/en, in accordance with the General Data Protection Regulation (GDPR) no. 2016/679 of 27 April 2016 and the French Data Protection Act of 6 January 1978.
Data Controller
The controller of personal data collected on the website Le Fief des Époisses is:
SARL DOMAINE DU FIEF DES ÉPOISSES
Ferme de Bailly, 77720 Saint-Méry, France
GDPR contact: our contact form
For any questions regarding the processing of your personal data or to exercise your rights, please contact us using the details above.
Data protection officer
Le Fief des Époisses has not appointed a data protection officer.
Your requests concerning the protection of your data are handled directly by the controller, at the contact details given above.
Data Collected and Processing Activities
The table below sets out the main personal data processing operations carried out by the controller on the website Le Fief des Époisses.
Contact form
| Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| First and last name, company (optional), email address, phone number (optional), subject, message | Responding to your enquiries and managing the relationship | Legitimate interest (Art. 6.1.f GDPR) | 3 years after the last exchange |
Bookings
| Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, first name, email, telephone, dates and details of the booking, special requests | Managing, confirming and following up your bookings and related communication | Performance of contract (Art. 6.1.b GDPR) | duration of the stay, then 3 years for customer relationship purposes; 10 years for accounting records |
Bookings are handled through Mews. That provider’s role under the GDPR depends on the contract entered into with it; it is listed in the table of recipients below.
Individual police record (foreign guests)
| Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Surname and first names, date and place of birth, nationality, usual address, telephone number, email address, arrival and departure dates | Drawing up and keeping the individual police record, and providing it to the police and gendarmerie on request | Legal obligation (Art. 6.1.c GDPR) | 6 months |
This obligation arises from Articles R814-1 to R814-3 of the French Code on entry and residence of foreign nationals. At the end of the six months, Le Fief des Époisses destroys the records permanently and securely. Children under fifteen may be listed on the record of an accompanying adult.
Audience measurement (cookieless)
| Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Truncated IP address, pages visited, visit duration, browser and device type | Measuring website traffic and improving user experience | Legitimate interest (Art. 6.1.f GDPR) in measuring site traffic – no cookie is placed on your device | 25 months |
The analytics tool used is Matomo, configured so as not to place any cookie on your device. You can object to this audience measurement at any time on the opt-out page.
Recipients and Processors
Personal data collected on Le Fief des Époisses is intended for SARL DOMAINE DU FIEF DES ÉPOISSES. It is shared with the providers and processors needed for the purposes described above, identified in the table below, and with authorised authorities where the law so requires.
Certain technical service providers have access to your data solely within the scope of their services:
| Provider | Role | Country |
|---|---|---|
| ROCKET LAUNCH (Scaleway SAS infrastructure) | Website hosting | France |
| Matomo | Audience measurement | France |
| Mews | Online booking system | European Union |
| Google Ireland Ltd / Google LLC (Google Fonts) | Display of typefaces | Ireland / United States |
| Google Ireland Ltd / Google LLC (Google Maps) | Access map, loaded after your consent | Ireland / United States |
International Data Transfers
Some data is transferred outside the European Economic Area, to the following countries: the United States. The recipients concerned are identified, with their country, in the table above. These transfers rely on the following mechanism, provided for in Chapter V of the GDPR: European Commission adequacy decision (Data Privacy Framework), Google LLC being certified.
You may obtain a copy of the applicable safeguards by contacting us: our contact form
Your Rights Over Your Personal Data
| Right | Article | Description |
|---|---|---|
| Right of access | Art. 15 GDPR | Obtain confirmation that data about you is being processed and receive a copy. |
| Right to rectification | Art. 16 GDPR | Have inaccurate or incomplete data corrected. |
| Right to erasure | Art. 17 GDPR | Request deletion of your data in the cases provided for by law. |
| Right to restriction | Art. 18 GDPR | Request temporary suspension of a processing activity. |
| Right to portability | Art. 20 GDPR | Receive, in a structured, machine-readable format, the data you have provided to us, where the processing is automated and based on your consent or on a contract. |
| Right to object | Art. 21 GDPR | Object to processing based on legitimate interest or for direct marketing purposes. |
| Right to withdraw consent | – | At any time, without affecting the lawfulness of prior processing. |
| Post-mortem directives | Art. 85 French DPA | Define directives regarding the fate of your personal data after your death (French law specificity). |
To exercise your rights, please send a request specifying your name, first name and the subject:
Via our contact form, or by post to the address of the controller given above.
We respond within one month (Art. 12 GDPR). That period may be extended by two months, taking into account the complexity and number of requests: we then inform you of the extension and of the reasons for it within one month of receiving your request.
Right to Lodge a Complaint
If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the French data protection authority (CNIL):
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
Whether providing data is required or optional
Under Article 13.2.e GDPR, where certain data is necessary for a purpose, providing it is mandatory. Whether the information requested is mandatory or optional, and the consequences of not providing it, are stated at the point of collection: depending on the case, the request cannot be handled.
Automated decision-making and profiling
No decision producing legal effects concerning you, or similarly significantly affecting you, is taken solely on the basis of automated processing, including profiling (Article 22 GDPR).
Data Security
Le Fief des Époisses implements technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR. The measures in place are: HTTPS encryption, restriction of data access to authorised personnel only, regular system updates.
In the event of a data breach likely to result in a risk to your rights and freedoms, we notify the CNIL without undue delay and, where feasible, no later than 72 hours after becoming aware of it (Art. 33 GDPR). Where the breach is likely to result in a high risk to your rights and freedoms, we also inform you without undue delay (Art. 34 GDPR).
Cookies and Trackers
The website Le Fief des Époisses sets out in a dedicated document whether or not it uses cookies and other trackers. To find out more, please consult our cookie policy.
Changes to This Policy
Le Fief des Époisses reserves the right to modify this privacy policy at any time, in particular to comply with any legislative, regulatory or technical developments. The last updated date shown at the top of this document will be updated accordingly.
Governing Law
This privacy policy is governed by French law and European law (GDPR). In the event of a dispute relating to its interpretation or application, the French courts have jurisdiction. You may also bring proceedings before the courts of the Member State of your habitual residence (Article 79 GDPR).