Privacy Policy
1. Data controller and contact
This website (www.canelcaron.com) is operated by CAPITAL ON A MISSION SÀRL (acting under the Canel Caron brand), registered at 14 Rue Bernard Hall, L‑1711 Luxembourg, Luxembourg. If you have any questions about this Privacy Policy or the way we process your personal data, you can contact us at eh@capitalonamission.com.
2. Personal data we process
We collect and process only the personal data that is necessary to handle your enquiry and operate this website. When you submit an enquiry form, we process your name, email address, phone number, preferred dates for the stay, and any specific stay information you choose to share in the free‑text fields (for example: number of guests, preferences, special occasions, specific requests).When you visit the website, we may also collect technical data through cookies and similar technologies, such as IP address, browser and device type, pages visited and time spent on the site.
3. Purposes and legal bases
We process your personal data for the following purposes.First, we handle enquiries and pre‑contractual discussions to receive, review and respond to your requests regarding our luxury rentals and to prepare, negotiate or conclude a potential stay or charter; the legal basis is the performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
We also carry out client and prospect management using internal tools, including Copper CRM, to store and organise your contact details and communications so we can follow up on your enquiry and manage our relationships; the legal bases are performance of a contract or pre‑contractual steps (Article 6(1)(b) GDPR) and our legitimate interest in managing our business in an efficient and professional way (Article 6(1)(f) GDPR).
In addition, we perform website analytics to understand how our website is used and to improve its content and performance, using tools such as Google Analytics; the legal basis is your consent for non‑essential cookies and similar technologies (Article 6(1)(a) GDPR).
We also conduct advertising and measurement to assess the effectiveness of our advertising campaigns and, where applicable, to build audiences for our ads on Meta platforms (Meta Pixel); the legal basis is your consent for advertising cookies and similar technologies (Article 6(1)(a) GDPR).
Finally, we process data for compliance and legal obligations in order to comply with applicable laws, including tax and accounting, and to establish, exercise or defend legal claims; the legal bases are compliance with a legal obligation (Article 6(1)(c) GDPR) and our legitimate interest in protecting our rights (Article 6(1)(f) GDPR).
4. Cookies and tracking technologies
When you first visit the website, a banner will inform you about the use of cookies and similar technologies and will allow you to accept or refuse non‑essential cookies. Cookies that are strictly necessary for the basic functioning of the website may be used without your consent.
Analytics and advertising cookies, including Google Analytics and Meta Pixel, are only activated if you give your consent, and you can withdraw this consent or change your preferences at any time via the cookie settings made available on the website. For more information, please refer to our Cookie Policy or the information provided in the cookie banner.
5. Recipients and international transfers
We may share your personal data with service providers that act on our behalf, such as website hosting and IT support providers, analytics providers, advertising and social media tools, and CRM providers such as Copper. We may also share data with professional advisers, including lawyers, accountants and auditors, where necessary, and with public authorities or courts if required by law.
Some of these recipients may be located outside the European Economic Area; where this leads to a transfer of personal data to a country without an adequacy decision, we will implement appropriate safeguards, such as Standard Contractual Clauses, in accordance with applicable data protection law.
6. Retention periods
We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required by law. As an indication, enquiry data and related communications are generally kept for up to three years after your last contact with us, unless a longer period is necessary in the context of a potential stay, an ongoing negotiation or a dispute; for confirmed guests, we might keep your data for up to ten years due to tax and accounting laws.
Data that must be kept for legal or regulatory reasons, such as accounting records, may be retained for the periods required by applicable law. Data collected through cookies and similar technologies is retained in accordance with the settings and limitations of the tools used and with applicable legal requirements.
7. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is restricted to those persons who need it for the purposes described above and who are bound by confidentiality obligations.
8. Your rights
Under applicable data protection law, and subject to the conditions and limits set out in that law, you may have the right to access your personal data, to obtain information about the data we hold, to request the correction of inaccurate or incomplete data, to request the deletion of your data in certain circumstances, to request restriction of our use of your data in certain cases, and to object to certain processing based on our legitimate interests.
You may also have the right to receive your data in a structured, commonly used, machine‑readable format and to transmit it to another controller where technically feasible and legally required, as well as the right to withdraw your consent where processing is based on consent, for example for analytics or advertising cookies, without affecting the lawfulness of processing before withdrawal.
You can exercise your rights by contacting us at eh@capitalonamission.com, and we may ask you for additional information to confirm your identity. You also have the right to lodge a complaint with a supervisory authority in the European Union, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement; in particular, you may contact the Commission nationale pour la protection des données (CNPD) in Luxembourg.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date, and we encourage you to review this page regularly.
