SC Victoria — Appartement Paris 17e
Data Controller: SC Victoria – Benjamin
Property Address: Place Saint-Ferdinand, 75017 Paris, France (the exact address is communicated only to confirmed guests)
SIRET: 83397877800029 – RCS Paris 833 978 778
Contact Email: scvictoriabs@gmail.com
Effective Date: 17 May 2026
Version: 1.0
Legal Framework: Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés, Law No. 78-17 as amended)
1. Who Are We?
SC Victoria is a company operating a furnished apartment for short-term rental in the 17th arrondissement of Paris. Benjamin is the representative of SC Victoria.
For any questions regarding your personal data, please contact:
Email: scvictoriabs@gmail.com
2. Data Collected
We collect the following information solely through the booking request and contact forms available on our website.
| Data Category | Data Collected | Source |
|---|---|---|
| Identity | First Name, Last Name | Booking Request Form / Contact Form |
| Contact Details | Email Address, WhatsApp Phone Number, Country of Residence | Booking Request Form |
| Email Only | Email Address | Contact Form |
| Stay Information | Arrival Date, Departure Date, Check-in Time, Check-out Time, Number of Guests, Number of Beds | Booking Request Form |
| Guest Profile | Trip Type (Business, Personal or Mixed), Previous Stay Information, Referral Source, Invoice Requirement (Yes/No) | Booking Request Form |
| Identity Verification | Document Type and Document Number only. No scan or photograph is collected. | Provided by the guest after booking acceptance |
| Communication | Free message entered into the booking or contact form | Booking Request Form / Contact Form |
| Consent Records | Date, time and content of both consent checkboxes (data retention and communications), together with the IP address | Automatically recorded when the form is submitted |
| Technical Information | IP Address (used for anti-spam and security purposes) | Automatically collected |
We do not collect:
Copies or scans of identity documents
Bank account details
Health information
Sensitive personal data as defined under Article 9 of the GDPR
3. Purposes of Processing & Legal Basis
| Purpose | Legal Basis | Retention Period |
| Processing booking requests and communicating with prospective guests | Performance of a contract (Article 6(1)(b) GDPR) | 3 years after the end of the stay |
| Guest identity verification (document type and document number) for insurance purposes | Legal obligation and legitimate interest (Articles 6(1)(c) and 6(1)(f) GDPR) | 3 years after the end of the stay |
| Determining the appropriate payment method based on the guest profile (internal bank routing) | Performance of a contract (Article 6(1)(b) GDPR) | Not stored – processed only when required |
| Sending automated emails relating to the stay (confirmation, reminders, instructions) | Performance of a contract (Article 6(1)(b) GDPR) | Until the end of the stay plus 30 days |
| Issuing invoices upon request | Legal obligation (Article 6(1)(c) GDPR) | 10 years (accounting obligations) |
| Processing general contact enquiries | Legitimate interest (Article 6(1)(f) GDPR) | 1 year from receipt |
| Sending occasional information about the apartment (availability, news and offers) | Explicit consent (Article 6(1)(a) GDPR) | Until consent is withdrawn |
| Anti-spam protection and abuse prevention | Legitimate interest (Article 6(1)(f) GDPR) | 30 days |
| Accounting and tax obligations | Legal obligation (Article 6(1)(c) GDPR) | 10 years (accounting records only) |
4. Consent
Two separate consent checkboxes are presented on each form. These consents are independent of one another.
Checkbox 1 – Data Retention (Mandatory)
I authorise SC Victoria to retain my personal data (name, email, phone number and stay details) for the duration of my stay and for up to three (3) years thereafter, solely for the management of my booking and any related follow-up.
This checkbox is mandatory in order to submit the booking or contact form.
Without this consent, we are unable to process your request.
Checkbox 2 – Occasional Communications (Mandatory)
I agree to receive occasional information from SC Victoria regarding the apartment (availability, news and occasional offers). I may withdraw my consent at any time using the unsubscribe link included in every email.
This checkbox is also mandatory to submit the form and is not pre-selected.
Withdrawal of this consent at any time does not affect the consent provided under Checkbox 1 regarding the processing of your booking or enquiry.
Technical Requirement
At the time a form is submitted, the following information is automatically recorded in our database:
- Date of consent
- Time of consent
- Exact wording of each consent provided
- IP Address
These records constitute legal proof of consent under the General Data Protection Regulation (GDPR) and are retained for the duration of the customer relationship plus an additional three (3) years.
5. Data Recipients
Your personal information is never sold, rented or shared for commercial purposes.
Your information is disclosed only to technical service providers that are strictly necessary for operating this website and delivering our services.
| Recipient | Purpose | Safeguards |
|---|---|---|
| Transactional Email Provider (e.g. Resend, Brevo or SendGrid) | Sending automated booking and contact emails | GDPR-compliant data processing agreement with data hosted within the European Union or protected by appropriate safeguards |
| Website Hosting Provider (e.g. Vercel or Netlify) | Website hosting and secure storage of form submissions | GDPR-compliant processing agreement and, where applicable, EU–US Data Privacy Framework certification |
| Google LLC (Google Calendar) | Reading public iCal calendar feeds to verify apartment availability. No personal guest information is transmitted. | Subject to Google’s Privacy Policy. Calendar information is read-only. |
| SC Victoria / Benjamin | Processing booking requests, guest communication and reservation management | Data Controller under this Privacy Policy |
No transfer of personal data outside the European Union is carried out unless the selected hosting or technical provider is located outside the EU.
Where such transfers are necessary, appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent legal protection mechanisms, will be implemented in accordance with the GDPR.
6. Your Rights
Under Articles 15 to 22 of the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights regarding your personal information.
| Right | How to Exercise It |
| Right of Access (Article 15) | Request a copy of the personal information we hold about you by emailing scvictoriabs@gmail.com. We will respond within one month. |
| Right to Rectification (Article 16) | You may request correction of inaccurate or incomplete personal information at any time. |
| Right to Erasure (Article 17) | You may request deletion of your personal information, subject to any legal obligations requiring us to retain certain records. |
| Right to Restriction of Processing (Article 18) | You may request that we temporarily restrict processing of your information in specific circumstances, such as while resolving a dispute regarding its accuracy. |
| Right to Data Portability (Article 20) | You may request a copy of the personal information you provided to us where processing is based on your consent or the performance of a contract. |
| Right to Object (Article 21) | You may object to processing carried out on the basis of our legitimate interests. This right applies immediately to marketing or promotional communications. |
| Right to Withdraw Consent (Article 7(3)) | You may withdraw your consent at any time, free of charge, by using the unsubscribe link contained in our emails or by contacting us directly. |
| Right to Lodge a Complaint | If you believe your personal information has been processed unlawfully, you may lodge a complaint with the French Data Protection Authority (CNIL) or your local supervisory authority. |
For any request relating to your personal information, please contact:
SC Victoria
Email: scvictoriabs@gmail.com
We will respond within the time limits required under the GDPR.
7. Security
SC Victoria and its technical service providers implement appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, disclosure, alteration or accidental destruction.
Our security measures include:
- HTTPS (SSL/TLS) encryption across the entire website.
- Access to personal data restricted exclusively to the Data Controller.
- Secure storage of third-party service credentials using password management tools.
- No banking or payment card information is collected or stored on this website.
- The exact address of the apartment is communicated only to confirmed guests through secure communication channels.
While we take reasonable measures to safeguard your information, no method of transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
8. Cookies
This website may use technically necessary cookies required for its proper operation, including session management and anti-spam protection.
If analytics cookies (such as Google Analytics or an equivalent service) are enabled, a cookie consent banner will be displayed before any non-essential cookies are placed on your device.
| Cookie Type | Purpose | Retention Period |
|---|---|---|
| Technical / Session Cookies | Website functionality, booking and contact forms, session management, security and anti-spam protection | Session or up to 1 year |
| Analytics Cookies (Optional) | Website traffic analysis and visitor statistics. These cookies are only placed after obtaining your consent. | Up to 13 months |
You may manage or withdraw your cookie preferences at any time using the Cookie Settings available on this website.
For additional information, please refer to our Cookie Policy.
9. Updates to This Policy
This Data Protection & Privacy Policy may be updated from time to time to reflect changes in legal requirements, our services, or our data processing practices.
The latest revision date is displayed at the beginning of this document.
Where a significant change affects the processing of your personal information, individuals who have consented to receive communications will be notified by email.
10. Publication & Entry into Force
This document constitutes the official Data Protection & Privacy Policy of SC Victoria.
It is published on the Paris 17th Apartment booking website and is referenced from both the Booking Request Form and the Contact Form.
This policy becomes effective on the date the website is published.
It may be amended at any time to reflect legal, technical or operational changes. The latest version will always be available on this page.
Where legally required, users who have consented to receive communications will be informed of any significant changes by email.
SC Victoria
Paris 17th Apartment
Data Protection & Privacy Policy
Version 1.0
Contact: scvictoriabs@gmail.com
