Privacy policy
Last updated: 7 September 2026
Data controller
The controller of the data collected on www.vip-arena.com is Curious Factory, a SASU with a share capital of €50,000, whose registered office is at 460 avenue de la Quiera, 06370 Mouans-Sartoux, France, registered with the Cannes Trade and Companies Register under number 817 587 900.
Contact: contact@curiousfactory.fr
This policy describes which data we collect when you browse the VIP Arena website or use our contact form, why we collect it and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended (Data Protection Act).
Data collected, purposes and retention periods
- Contact and documentation request form (operator area and offer pages): full name, company, email, phone, number of rooms considered, comment. Only the name and email are required; without them the request cannot be processed. Legal basis: legitimate interest in responding to a professional enquiry and pre-contractual measures. Retention: 3 years from the last contact.
- Customer relationship management: identification and billing data of operators under contract. Legal basis: performance of the contract and legal obligation. Retention: duration of the contract, then the applicable statutory periods, up to 10 years for accounting records.
- Website operation and security: connection logs recorded by the hosting provider (IP address, browser type, pages viewed, date and time). Legal basis: legitimate interest. Retention: 12 months maximum.
- Display preferences: language choice and dismissal of the language banner, stored in your browser (see the Cookies section).
We do not collect any sensitive data and the website is not intended for children under 15.
Recipients
Data is intended for the authorised internal departments of Curious Factory and for its technical processors acting on instruction: website hosting, contact form relay service, email, customer relationship management and billing. No data is sold or transferred to third parties for commercial purposes.
Some processors, in particular the contact form relay service, may be established outside the European Union. Transfers are then governed by appropriate safeguards: standard contractual clauses of the European Commission or an adequacy decision.
Cookies and trackers
The VIP Arena website sets no advertising, social sharing or analytics cookies.
Only two items are stored in your browser's local storage: your language choice when you use the FR / EN switch, and the dismissal of the banner offering the other language. These are strictly necessary for the requested service and are exempt from consent under Article 82 of the French Data Protection Act. You can delete them at any time through your browser settings.
The presentation video is embedded through the YouTube player in "privacy-enhanced" mode (youtube-nocookie.com): no tracker is set until you start playback. By playing the video, you accept that YouTube (Google) may set its own cookies, governed by Google's privacy policy (policies.google.com/privacy).
Should analytics tools be added to the website, this policy would be updated and your consent obtained beforehand.
Your rights
In accordance with Articles 15 to 22 of the GDPR, every individual has the right to access, rectify and erase their data, to restrict or object to its processing, and to data portability, as well as the right to set instructions regarding their data after their death.
These rights may be exercised by email at contact@curiousfactory.fr or by post at the registered office address, together with any document proving the identity of the applicant. A reply is provided within one month at most.
If the reply is deemed unsatisfactory, a complaint may be lodged with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
Security
The website is served over HTTPS and form data is transmitted encrypted. Curious Factory implements appropriate technical and organisational measures to preserve the security, integrity and confidentiality of the data processed and to prevent it from being altered, damaged or disclosed to unauthorised third parties.
Changes
This policy may be updated to reflect changes to the website or to regulations. The applicable version is the one published online on the date of consultation; the date of the last update is shown at the top of this page.
