Privacy policy (GDPR)

Codetrail, publisher of the Vie de l’Hôtel service, attaches the utmost importance to the protection of personal data. This policy describes the processing carried out, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French "Informatique et Libertés" (Data Protection) Act.

1. Data controller

The controller of the data collected via the website and the subscription process is Codetrail, who can be contacted at jt@codetrail.eu.

With regard to the data of users (the property's staff) processed within the platform (tasks, call-outs, logs, etc.), the Customer (the employer) is the data controller and Codetrail acts as a processor within the meaning of Article 28 of the GDPR.

2. Data collected

• Subscriber: last name, first name, business email, phone, role.
• Property: company name, address, SIREN, EU VAT number.
• Payment: bank card data processed directly by Stripe (it does not pass through our servers).
• Users (within the platform): identity, tasks assigned and completed, call-outs reported, hygiene logs, activity logs.
• Technical: connection logs, strictly necessary browsing data.

3. Purposes and legal bases

• Management of the subscription and account — performance of the contract (Art. 6(1)(b) GDPR).
• Invoicing and payment — performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c)).
• Provision of the Vie de l'Hôtel service (room management, tasks, call-outs, traceability) — performance of the contract on behalf of the Customer (Art. 6(1)(b)).
• Security and regulatory traceability (activity logs, HACCP traceability) — legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f)).

4. Recipients and processors

Your data is never sold. It is accessible to authorised staff of Codetrail and to its technical processors, strictly within the limits of their tasks:

• Stripe — processing of bank card payments.
• Hosting provider — hosting in France.

5. Retention periods

• Account and subscription data: for the duration of the contract, then archived in accordance with legal obligations.
• Accounting and invoicing documents: ten (10) years (legal obligation).
• Activity and traceability data: period defined by the Customer, in compliance with regulations.

6. Transfers outside the European Union

Hosting is provided in France. Where certain processors may process data outside the European Union, such transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission).

7. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set guidelines regarding what happens to your data after your death. You can exercise these rights by writing to jt@codetrail.eu.

For user data processed within the platform, such requests must be addressed to the Customer (employer), as data controller; Codetrail assists it for this purpose.

8. Cookies

The website only uses cookies that are strictly necessary for it to function (session, security). No advertising or third-party tracking cookies are placed without your consent.

9. Security

Codetrail implements appropriate technical and organisational measures (encrypted communications, access control, logging) to guarantee the security and confidentiality of data.

10. Complaints

You may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr — if you consider that your rights are not being respected.

← Back to pricing