Privacy Policy

1. Introduction & Data Controller

Mediastash Navigator SAS ("Mediastashnavigator", "we", "our", or "us"), registered at 74 Quai des Échouages, 06600 Antibes, France (Company No. 894 120 541 00028), is committed to safeguarding your personal data and privacy. This Privacy Policy details the exact manners in which we collect, process, secure, and retain your data when you visit our website (mediastashnavigator.motorcycles) or utilize our Beach Hotel Matching engines.

2. Categories of Data Collected

We only collect information strictly necessary to provide superior European beach planning intelligence:

• Voluntarily Provided Data: When submitting inquiry forms, concierge requests, or subscribing to our seasonal water temperature alerts, you may provide your full name, email address, telephone contact, travel dates, and destination preferences.
• Algorithmic Preference Inputs: Travel style choices (couples, luxury, quiet, family), target sea temperatures, and water access parameters passed through our match calculators.
• Technical & Telemetry Data: Anonymized IP addresses, browser engine details, operating system, localized timezone, and clickstream interaction data gathered via privacy-compliant analytics.

3. Legal Bases for Processing (GDPR Article 6)

We process your personal data under the following legitimate grounds:

• Consent: Explicit approval granted when submitting forms or accepting functional cookies.
• Contractual Performance: Necessary processing to fulfill concierge inquiries, hotel matching, and custom itinerary blueprints.
• Legitimate Interests: Optimizing our recommendation algorithms, enhancing website security against DDoS attacks, and analyzing regional resort popularity.

4. Third-Party Data Processors & Integrations

We do not sell, rent, or monetize your personal information to third-party advertisers. Data may be shared strictly with vetted operational sub-processors who adhere to strict European data privacy standards, including cloud hosting providers situated in the EEA, secure email delivery APIs, and vetted hotel concierge partners only when you explicitly request a direct reservation referral.

5. International Data Transfers & Security Measures

All server infrastructure resides within high-security European data centers. We implement TLS 1.3 encryption for all data in transit, encrypted database volumes at rest, and strict role-based access controls for internal concierge personnel.

6. Data Retention Period

Inquiry and concierge request records are maintained for a maximum duration of 24 months to assist with subsequent coastal travel seasons, after which records are irreversibly anonymized or permanently deleted unless extended retention is mandated by French commercial law.

7. Your Statutory Rights Under GDPR

As a data subject, you hold comprehensive rights under EU Regulation 2016/679, including:

• The right to access and obtain a portable copy of your processed personal data.
• The right to rectify inaccurate or incomplete records.
• The right to erasure ("Right to be Forgotten").
• The right to withdraw consent at any time without retroactive penalty.

To exercise any of these statutory rights, please contact our Data Protection Officer at: [email protected].