Effective date: 4 February 2026
This Privacy Policy explains how personal data is processed in connection with the use of this website, the booking of accommodation, and the stay at Vallée les Etoiles.
1. Who is responsible for processing your data?
Primary data controller (website, bookings, payments, customer service)
BUNGALOWNET HOLIDAYS FZCO (the “BungalowNet” brand; “BN”) operates this website and is the primary data controller for personal data processed in connection with:
• website use and enquiries;
• bookings and customer service;
• payments and refunds;
• complaints and dispute handling;
• marketing and analytics (where applicable).
BN’s full company details are provided in the Legal Notice available on this website.
On-site operator (your stay at the park)
Vallée les Etoiles is the holiday park where the accommodation is located. For the operation of your stay, the park processes certain personal data for on-site guest services and compliance purposes (such as check-in administration, house rules enforcement, safety, incident handling, and statutory obligations).
Depending on the purpose, the park may process personal data:
• as an independent data controller (for example, where local law requires guest registration or where the park must manage safety and incidents on site); and/or
• under BN’s instructions (for example, where information is needed to deliver the booked stay or to support customer service).
2. Contact for data protection matters
For questions or requests regarding the processing of personal data by BN, including exercising your data protection rights, you may contact:
Email: privacy@bungalow.net or dpo@bungalow.net
For matters relating exclusively to on-site processing by Vallée les Etoiles during your stay, you may also contact:
Email: legal@parclesetoiles.com
EU representative (if applicable): If BN is required to appoint an EU representative under Article 27 GDPR, the representative’s contact details will be stated in the Legal Notice and/or on request via the contact details above.
3. What personal data do we process?
Depending on how you interact with us, we may process the following categories of personal data:
a) Website and enquiry data
• name, email address, telephone number;
• enquiry or message content;
• technical data (e.g., IP address, browser type, device information, approximate location derived from IP);
• cookie and preference data (see Section 5).
b) Booking and payment data
• reservation details (dates, accommodation type, number of guests);
• contact details of the booker and (where relevant) other guests;
• payment status, payment method, refund information (where applicable);
• communications relating to the booking (emails, chat, call notes where applicable).
c) Stay-related data (on site)
• identification details required at check-in (where required or necessary for the stay);
• information required to comply with statutory or local obligations;
• incident, loss, damage, or house-rule reports and related communications.
d) Marketing and analytics data
• newsletter subscription status and preferences;
• interaction data (e.g., email opens/clicks where used and permitted);
• analytics and tracking data, subject to consent where required.
e) Special categories of personal data (limited cases)
In limited situations, you may provide information that can qualify as special category data under the GDPR (for example, health information in connection with a cancellation request or claim). We do not request this information unless necessary, and we ask you to limit what you share to what is relevant.
Bookings are intended for adults. Where a booking includes children, the booker provides the necessary information for the booking and stay.
4. Purposes and legal bases of processing
BN processes personal data for the following purposes and legal bases:
• Performance of a contract (Article 6(1)(b) GDPR):
to create and manage bookings, provide customer support, communicate service messages, manage check-in information where needed for the stay, and handle changes/cancellations.
• Legal obligations (Article 6(1)(c) GDPR):
to meet accounting and tax requirements, respond to lawful requests from authorities, and comply with statutory obligations applicable to the booking and/or stay.
• Legitimate interests (Article 6(1)(f) GDPR):
to secure the website, prevent fraud and misuse, maintain service quality, manage disputes/chargebacks, improve the website and booking experience, and keep records necessary to defend or exercise legal rights.
• Consent (Article 6(1)(a) GDPR):
where required, for newsletters/marketing communications and for non-essential cookies and similar technologies.
• Special category data (Article 9 GDPR):
where we process special category data (such as medical information you choose to provide), we do so only where permitted under applicable law and with appropriate safeguards (for example, with your explicit consent where required and/or where necessary to handle or defend legal claims).
5. Cookies and tracking technologies
This website uses cookies and similar technologies. Non-essential cookies (including analytics and marketing cookies) are used only with your prior consent where required. Details about cookies, their purposes, and retention periods are provided in the Cookie Policy available via the website.
6. With whom do we share personal data?
BN may share personal data, as necessary for the purposes described in this Privacy Policy, with:
• Vallée les Etoiles for the delivery and operation of your booked stay and on-site services;
• payment service providers and financial institutions supporting payment processing, refunds, and fraud prevention;
• IT, hosting, communications, customer support, and security providers supporting website and booking operations;
• analytics and marketing providers (only where applicable and subject to consent requirements);
• professional advisers (e.g., legal, audit) where necessary for compliance or dispute management;
• public authorities where required by law.
All recipients process personal data under appropriate contractual and security safeguards.
7. International transfers
Personal data may be accessed from, stored in, or otherwise processed in countries outside the EEA. Where this occurs, we apply appropriate safeguards in accordance with the GDPR, including (where applicable) Standard Contractual Clauses (SCCs) and supplementary technical and organisational measures. Further details are available on request via the contact details in Section 2.
8. Data retention
Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy, including:
• booking and contractual data: for the duration of the relationship and for applicable statutory retention periods;
• payment and accounting data: as required by tax and accounting rules;
• complaints and dispute records: as necessary to manage claims and defend legal rights;
• marketing data: until you withdraw consent or object (as applicable);
• cookie and analytics data: as stated in the Cookie Policy.
9. Your rights
Subject to applicable law, you have the right to:
• access your personal data;
• rectify inaccurate or incomplete data;
• request erasure of your data;
• restrict processing;
• object to processing (including direct marketing);
• withdraw consent at any time (where processing is based on consent);
• request data portability;
• lodge a complaint with a supervisory authority in an EU Member State.
You may lodge a complaint with the supervisory authority in your habitual residence, place of work, or the place of the alleged infringement.
10. Security measures
BN implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse, taking into account the nature of the data and associated risks.
11. Automated decision-making
BN does not use automated decision-making (including profiling) that produces legal effects or similarly significantly affects you, unless you are informed otherwise and such processing is permitted under applicable law.
12. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. The most recent version will always be available on this website and will apply from the effective date stated above.
This Privacy Policy is intended to comply with the GDPR and applicable European data protection laws.