Legal notice
In accordance with the provisions of Law No. 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN), users of the site are informed of the identity of the various parties involved in its creation and operation.
1. Site publisher
Site name | Chez Béranger Le Mans |
|---|---|
URL | https://chezberanger-lemans.fr |
Domain names | chezberanger-lemans.fr and chezberanger-lemans.com |
Publication director | Guillaume TEILLET |
Legal form | SCI (French civil real-estate company) |
Company name | GSLIBERTY |
Share capital | €500 |
Registered office address | 5 Rue Jacques Tati |
Le Mans establishment | 86 rue Béranger, 72000 LE MANS |
Email address | contact@chezberanger-lemans.fr |
Phone | +33 7 81 32 76 45 |
SIRET number | 982 232 100 00015 |
Trade register | 982 232 100 RCS Nantes |
VAT | Not applicable — GSLIBERTY is not subject to VAT |
2. Hosting
Host | AMAZON WEB SERVICES EMEA SARL (AWS) |
|---|---|
Address | Tour Carpe Diem, 31 Place des Corolles, 92400 Courbevoie, France |
Phone | +33 1 46 17 10 00 |
Website |
3. Intellectual property
The entire site (structure, text, images, graphics, logo, icons, sounds, software, etc.) is protected by French and international intellectual property law.
Any reproduction, representation, modification, publication or adaptation, in whole or in part, of any element of the site, by any means or process whatsoever, is prohibited without the prior written authorisation of the publisher.
4. Liability
The publisher strives to provide information on the site that is as accurate as possible, but cannot be held liable for omissions, inaccuracies or gaps in updating that information.
Users acknowledge using the information and tools available on the site at their own sole responsibility.
5. Personal data
The controller for the processing activities described below is GSLIBERTY (SCI), 5 Rue Jacques Tati, 44340 Bouguenais, France — contact@chezberanger-lemans.fr.
5.1 Contact form
Personal information collected via the contact form (first name, last name, email address, message) is used solely to respond to your request, on the basis of GSLIBERTY's legitimate interest in responding to your request (GDPR art. 6.1.f). It is kept for a maximum of 3 years from the last contact, then deleted. The message is forwarded by email to GSLIBERTY; it is not stored on the site. GSLIBERTY's mailbox, which receives this message as well as travellers' replies and requests to exercise rights, is hosted by Google (Google Workspace), which therefore processes your name, email address and the content of the messages.
5.2 Booking and rental agreement
When you make a booking, GSLIBERTY collects your identity, contact details (email, phone, postal address), stay information (dates, number of guests) and, for a business guest, the company name. This processing is based on the performance of the rental contract (GDPR art. 6.1.b) and, for the tourist tax and accounting records, on compliance with legal obligations (art. 6.1.c). Data is kept for the duration of the contractual relationship, then for the applicable commercial and tax limitation periods. The signed contract and its evidence (signature log, including the signatory's IP address and browser identifier, and timestamp) are kept for 10 years (art. L. 213-1 of the French Consumer Code). The data of a cancelled or unsigned request is deleted within 7 days of its cancellation. Where the request was already signed by you but not accepted by GSLIBERTY (cancelled request), your data is deleted 12 months after cancellation, except for the evidence of your signature (signature log including the IP address, timestamp and document fingerprint, as well as the evidence PDF, which contains your first name, last name, email address and the dates of stay), which is kept for 10 years, solely as proof of the signature, the contract not having been concluded. Technical backup copies (previous versions of files, not publicly accessible) of this deleted data are automatically erased no later than 365 days after deletion. Your booking is a request: it commits you to pay only if GSLIBERTY accepts it, and your acceptance of the Terms and Conditions of Sale, ticked before submission, is recorded (date, language, version of the Terms) to keep proof of it. The data is shared with the providers necessary for the booking: payment provider (Stripe), IT hosting (Amazon Web Services), property-management software (Beds24), email-sending service (Amazon SES), GSLIBERTY's email system (Google Workspace), service for sending verification SMS messages (OVH SAS, France) and timestamping service (FreeTSA, which receives only the document's fingerprint).
5.3 Photo ID
A photo ID (front and back) is requested from every adult occupant before check-in, including guests of French nationality, based on GSLIBERTY's legitimate interest (art. 6.1.f GDPR): knowing who has access to the accommodation (security of the premises and property) and being able to identify the signatory in the event of a dispute. For foreign guests, the ID is also used to complete the individual police record, in performance of a legal obligation (see 5.5). Providing the ID is mandatory to enter into the rental contract: if you refuse, the booking cannot be completed. The document number may be extracted automatically from the submitted photo by an AI service (Claude model, via Amazon Bedrock, in European Union regions); the guest reviews and confirms this value before it is used, and this automated processing produces no automated decision. ID images are deleted 30 days after the departure date, or immediately if the booking is cancelled or abandoned. The document number is kept in the file for 5 years after departure, a period matching the limitation period for contractual liability claims (art. 2224 of the French Civil Code), so that it can serve as evidence in the event of a dispute, then removed, with the file's earlier versions then deleted; it also appears in the signed contract, kept for 10 years as proof of the contract. This document is requested from every adult occupying the accommodation (the booker and each co-occupant). Co-occupants are informed of this collection by the booker and by the page of the form intended for them.
5.4 Electronic check-in/check-out report
An electronic check-in and check-out report (inventory, photographs, signature) is produced on the basis of the performance of the rental contract, to jointly record the condition of the property and, where applicable, justify a deduction from the security deposit. This data is kept for 10 years, the period necessary as evidence, consistent with the limitation periods applicable to rental disputes.
5.5 Individual police record (foreign guests)
In accordance with articles R. 814-1 to R. 814-3 of the French Code on the Entry and Residence of Foreign Nationals (CESEDA), an individual record (name, first names, date and place of birth, nationality, usual residence, telephone number, email address, stay dates and signature) is created for every foreign guest, including every minor (a minor's record is completed and signed by their legal representative, whose surname and first name are then added), in performance of a legal obligation, so it can be made available to the competent authorities on request. This data is kept for 6 months from the date of arrival, then deleted.
5.6 SMS verification
When the contract is signed, a one-time verification code may be sent by SMS (via OVH SAS, France) to the guest to confirm the signatory's identity, based on the performance of the contract and GSLIBERTY's legitimate interest. This code is kept only as an irreversible hash and can no longer be used after 15 minutes.
5.7 Proof of your cookie choice
Each choice made in the banner is logged anonymously (random identifier, choice, banner version, date), without any IP address or data allowing you to be identified, for 13 months, in order to be able to demonstrate that consent was obtained (art. 7.1 of the GDPR).
5.8 Your rights
In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the amended French Data Protection Act of 6 January 1978, you have the following rights for all the processing activities above:
Right of access (GDPR art. 15)
Right to rectification (GDPR art. 16)
Right to erasure (GDPR art. 17)
Right to restriction of processing (GDPR art. 18)
Right to object (GDPR art. 21)
Right to data portability (GDPR art. 20)
Right to withdraw your consent at any time (GDPR art. 7.3)
You may also give instructions on what is to happen to your data after your death (art. 85 of the French Data Protection Act) by writing to the contact address.
You also have the right to lodge a complaint with the CNIL — www.cnil.fr.
These rights may be exercised, for all the processing activities described above, at the following address: contact@chezberanger-lemans.fr. GSLIBERTY replies within the one-month period provided for by the GDPR. Some data cannot be deleted before a legal retention obligation expires (see 5.2 to 5.5 above); it is then kept solely for that purpose. If there is reasonable doubt about your identity, proof of identity may be requested (art. 12.6 GDPR).
To exercise your rights or for any question about your personal data, you may contact GSLIBERTY, represented by its manager, using the details below.
Name
GSLIBERTY — Guillaume TEILLET, manager
Address
5 Rue Jacques Tati, 44340 Bouguenais, France
contact@chezberanger-lemans.fr
You also have the right to lodge a complaint with the French data protection authority (CNIL) — www.cnil.fr — if you believe the processing of your personal data does not comply with applicable regulations.
Data transfers outside the EU
Some technical providers used by this site are established outside the European Union and may process your data in the United States: Google LLC (Google Analytics, audience measurement), Google (Google Workspace, GSLIBERTY's email system) and Cloudflare, Inc. (Turnstile anti-spam protection). These transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses (SCCs) approved by the European Commission (articles 45 and 46 of the GDPR). Stripe (Stripe Payments Europe, Limited, Ireland, and its US parent company Stripe, LLC) processes payments, on the same terms for data transmitted to the United States. Amazon Web Services (hosting, email sending and machine translation, Paris region; AI extraction of the ID number via Amazon Bedrock, in European Union regions) and Beds24 GmbH (Germany) process data within the European Union. OVH SAS (France), which sends the verification SMS messages, relies on telecommunications operators and on companies of its group, some of which are located outside the European Union; these transfers are governed by Standard Contractual Clauses. The FreeTSA timestamping service, whose operator is not identified, receives only a document's fingerprint (hash), with no directly readable personal data.
5.9 Published reviews
The site displays a selection of reviews received on Airbnb and Booking.com, reproduced unedited by GSLIBERTY (the author's first name or name, country of origin, text, rating, platform, review date and, where applicable, seniority on the platform and type of stay); their text is automatically translated into the site's other languages. They are published on the basis of GSLIBERTY's legitimate interest in informing its visitors, kept for as long as they are published and removed on simple request by their author at the address given in 5.8.
5.10 Technical and security logs
To keep the site secure, detect abuse and incidents and retain evidence, GSLIBERTY keeps technical logs on the basis of its legitimate interest (art. 6.1.f GDPR). These logs contain the IP address, the date and time and the technical request made; they do not contain the content of forms. They are: the site API access logs (90 days), the server function operation logs (30 days), the file storage access logs (90 days), the audit log of administration operations on the hosting account (400 days), and anti-abuse counters per IP address, which keep only a non-reversible fingerprint of the address and are deleted automatically after a limited period. This data is processed by the host, Amazon Web Services, in the European Union (Paris region) and is not transferred outside the European Union. You may object to this processing as described in 5.8.
6. Cookies and trackers
This site uses cookies and trackers. In accordance with CNIL recommendations, your consent is collected before any cookie is set for analytics purposes.
The cookies used are as follows:
Cookie | Purpose | Provider | Duration | Legal basis |
|---|---|---|---|---|
Google Analytics (_ga, _ga_*) | Audience measurement (visits, page views, session length) by Google Analytics 4; sets identifiers (_ga cookies…) and is only activated with your consent | Google LLC (United States) — privacy policy: policies.google.com/privacy | 13 months for the cookies (period set by this site); measurement data kept by Google according to the Google Analytics account configuration | Consent (GDPR art. 6.1.a) |
Cloudflare Turnstile | Anti-bot check on the contact form. No cookie or local storage is set by this site. The Cloudflare Turnstile service (the contact form's anti-bot check) receives the IP address and technical information from the browser in order to verify that the visitor is not a robot (security purpose, with no reuse for other purposes); it is loaded only when you start filling in the form. | Cloudflare, Inc. (United States) — privacy policy: cloudflare.com/privacypolicy | — | Legitimate interest (art. 6.1.f GDPR) — contact form security; tracker strictly necessary for security, exempt from consent |
Google Maps (embedded map, Contact page) | Display of an interactive location map | Google LLC (United States) — privacy policy: policies.google.com/privacy | Set by Google | Consent (GDPR art. 6.1.a) — map is not loaded before acceptance |
Stripe (payment and anti-fraud cookies) | Secure payment processing, fraud prevention | Stripe — privacy policy: stripe.com/privacy | __stripe_mid: 1 year; __stripe_sid: 30 minutes (durations announced by Stripe) | Performance of the contract — necessary for payment, not subject to consent |
Browser local storage (cb_consent) | Remember your cookie choices | This site (no third party) | 6 months | Necessary for the banner to work — not subject to consent |
Browser local storage (cb_fp_…) | Resume your place on a police record form after a reload | This site (no third party) | Until the form is completed or you clear it | Necessary for the requested function — not subject to consent |
You can withdraw or change your consent at any time by clicking the 🍪 button shown at the bottom of every page, via the "Manage cookies" link in the footer, or by configuring your browser to refuse cookies. If you withdraw your consent to audience measurement, the page reloads and Google Analytics is disabled. Your choice is kept for 6 months, after which the banner is shown again.
7. Applicable law
These legal notices are governed by French law. In the event of a dispute, and failing an amicable resolution, the French courts shall have sole jurisdiction, subject to the mandatory rules on jurisdiction applicable to consumers.
8. Licensed photos
The photos used in the page heroes are under a Creative Commons licence, except for the "Le Mans & Activities" page. Use and distribution of these photos is free of charge provided their source is credited: https://www.all-free-photos.com/show/showgal.php?idgal=le-mans&lang=fr
The hero photo of the "Le Mans & Activities" page is by Javi on Unsplash