Privacy policy

Last updated: 8 September 2026.

This policy explains what personal data Concierge B et B collects, why, how long we keep it and what rights you can exercise. It covers three situations: you entrust a property to us, you stay in a property we manage, or you simply visit our website.

1. Who is responsible for your data

CONCIERGE B ET B FRANCE, a simplified joint-stock company with a sole shareholder and a capital of 2,500 euros, registered with the Brest Trade and Companies Register under number 934 887 894, whose registered office is at 9 rue Saint-Saëns, 29200 Brest, France.

For any question about your data, or to exercise your rights: conso@conciergebb.fr, or by post to the address above, for the attention of the consumer department.

We have not appointed a data protection officer, as our activity does not require one.

2. The data we process

2.1. If you are an owner with a property under management

  • Identity and contact details: surname, first name, postal address, email address, telephone number.
  • Property data: address, floor area, number of rooms, equipment, photographs, availability periods, access codes and arrangements.
  • Contract data: signed mandate, pricing terms, booking and payout history.
  • Banking data: the account details to which we transfer your rental income.
  • Supporting documents required of us by law, in particular under the loi Hoguet governing property professionals and anti-money-laundering rules.
  • Correspondence: emails, messages and calls with our teams.

2.2. If you are a guest in a property we manage

  • Identity and contact details passed on by the booking platform: surname, first name, email address, telephone number.
  • Stay data: dates, property concerned, number of guests, specific requests.
  • Messages exchanged with our team before, during and after the stay.
  • Reviews you leave about the property or the stay.

We do not receive your payment details: they stay with the booking platform.

2.3. If you visit our website or contact us

  • Data you enter in our forms: name, email address, telephone, town, description of your project.
  • Browsing data: IP address, device and browser type, pages viewed, referrer, set by the cookies described in article 8.

2.4. If you apply to join us

  • Curriculum vitae, covering letter, contact details and anything else you send us on your own initiative.

3. Why we process it, and on what basis

  • Managing your property and performing the mandate: creating and publishing the listing, pricing, bookings, welcoming guests, cleaning, maintenance, collecting and paying out rental income. Legal basis: performance of our contract with you.
  • Organising guests' stays: communication before, during and after the stay, key handover, resolving incidents. Legal basis: performance of the rental contract and our legitimate interest in the stay going well.
  • Answering your enquiries received by form, email or telephone. Legal basis: your request, and our legitimate interest in answering it.
  • Invoicing and bookkeeping. Legal basis: our legal obligations.
  • Meeting our regulatory obligations, in particular those attached to our professional licence and to anti-money-laundering rules. Legal basis: our legal obligations.
  • Sending you commercial information about our services. Legal basis: your consent, or our legitimate interest where you are already a client. You can object at any time, through the unsubscribe link in each message or by writing to conso@conciergebb.fr.
  • Measuring website audience and improving our advertising. Legal basis: your consent, collected through the cookie banner.
  • Handling job applications. Legal basis: your approach to us and our legitimate interest in building our teams.
  • Establishing, exercising or defending a legal claim. Legal basis: our legitimate interest.

4. How long we keep it

  • Owner data: for the whole term of the mandate, then five years from its end, the commercial limitation period.
  • Mandates, invoices and accounting records: ten years from the close of the financial year, as required by the French commercial code.
  • Registers and supporting documents required by property regulations: for as long as those regulations require.
  • Guest data: for the duration of the stay, then three years from departure, so that a complaint or dispute can be handled.
  • Enquiries that did not lead anywhere: three years from the last exchange.
  • Marketing contacts: three years from your last contact with us.
  • Job applications: two years from the last exchange, unless you ask us to delete them sooner.
  • Browsing data and cookies: thirteen months at most for the trackers, twenty-five months for the statistics derived from them.

At the end of these periods the data is deleted or anonymised, except where ongoing proceedings require it to be kept until they conclude.

5. Who has access to your data

Your data is accessible to the members of our teams who need it for their work, and to the following providers, who act on our behalf and on our instructions:

  • Airbnb Ireland UC, Dublin, Ireland: publishing listings, bookings, messaging with guests, collecting rental income.
  • Shopify International Limited, Dublin, Ireland: hosting the conciergebb.fr website and its contact forms.
  • Google Ireland Limited, Dublin, Ireland: website audience measurement and advertising, through Google Tag Manager, Google Analytics and Google Ads.
  • Metricool: audience measurement for our publications and social media.
  • POWR: displaying the map of our service areas on our contact page.
  • Revenue management tools used to adjust nightly rates.
  • Cleaning, laundry and maintenance providers working in the properties.
  • Our usual advisers: accountant, lawyer, insurer, within the limits of their engagement.

An up-to-date list of our processors, with their full identity and location, is available on request at conso@conciergebb.fr.

We do not sell your data and we do not pass it to any third party for marketing purposes.

Your data may be disclosed to administrative or judicial authorities where the law requires it.

6. Joint controllership with the owner

The processing of guest data, in the context of bookings made through rental platforms, is under the joint controllership of Concierge B et B and the owner of the property, within the meaning of article 26 of the General Data Protection Regulation.

How the obligations are shared between us is set out in annex 1 to our terms and conditions. In essence:

  • Concierge B et B is your point of contact for exercising your rights, because we are the party in direct contact with you.
  • Each party implements appropriate security measures for the data it processes.
  • The owner passes on to us without delay any guest request they become aware of.

Whatever that division, you may exercise your rights with either party.

7. Where your data is kept

Your data is hosted and processed within the European Union.

Some of our providers may nevertheless process data from countries outside the European Union, in particular the United States, as part of their own operations. Such transfers are then framed by the safeguards provided for in the regulation: the European Commission's standard contractual clauses, or an adequacy decision where one exists, such as the EU-US Data Privacy Framework.

8. Cookies and trackers

Our website sets two categories of cookies.

Necessary cookies, which make the site work: they handle your session, the language shown and security. They do not require your consent, as the site would not function without them.

Audience measurement and advertising cookies, set by Google and Metricool: they tell us which pages are viewed, how visitors arrive, and let us measure how well our advertising performs. They are only set with your consent.

You give or refuse that consent on your first visit, and you can change your mind at any time through your browser settings or by writing to conso@conciergebb.fr. Refusing these cookies does not restrict your access to the site in any way.

Trackers have a lifetime of no more than thirteen months.

9. Security

We implement appropriate technical and organisational measures to protect your data: access restricted to the people who need it, named accounts, encrypted connections, regular backups and confidentiality commitments from our providers.

As no system is infallible, our obligation here is one of means. In the event of a data breach likely to result in a high risk to your rights, we will inform you as the regulation requires.

10. Your rights

You have the following rights over your data:

  • Access: to have it confirmed whether we process data about you, and to receive a copy of it.
  • Rectification: to have inaccurate or incomplete data corrected.
  • Erasure: to ask for your data to be deleted, within the limits of our legal retention obligations.
  • Restriction: to ask for processing to be frozen while a challenge is examined.
  • Objection: to object to processing based on our legitimate interest, and at any time to direct marketing, without having to give a reason.
  • Portability: to receive, in a machine-readable format, the data you have provided to us, so as to pass it to another organisation.
  • Withdrawal of consent: where processing rests on your consent, to withdraw it at any time, without affecting what was done beforehand.
  • Post-mortem directives: to set out what should happen to your data after your death.

How to exercise them: write to conso@conciergebb.fr, or by post to CONCIERGE B ET B FRANCE, service consommateur, 9 rue Saint-Saëns, 29200 Brest, France. We reply within one month of receiving your request, extended to three months if it is complex, in which case we will tell you. We may ask for proof of identity where there is reasonable doubt about who is making the request.

Complaints: if our answer does not satisfy you, you may contact the French data protection authority, the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or file a complaint online at www.cnil.fr.

11. Automated decision-making

We adjust nightly rates using revenue management tools that analyse the local market and seasonality. These tools work on properties, not on people: they produce no automated decision with legal effects for you or which significantly affects you.

12. Changes to this policy

We may update this policy, in particular to reflect a change in our practices or in the regulation. The version in force is the one published on this page, whose last updated date appears at the top of the document. Where a change is substantial, we will inform owners under mandate by email.