Privacy policy

This Privacy Policy governs the processing of the personal data of Users of the site https://ecotourismdestinations.net (hereinafter, the “Site”), managed by ENN CONSULTING, whose registered office is located at 12 Mail Saussure, 94000 Créteil, France, registered under RCS Créteil n° 952 703 189, with a share capital of 1 000 €, in its capacity as controller.

For any question relating to data protection, you may contact: [email protected] or by telephone on 07 56 81 90 99. A Data Protection Officer (DPO) can be reached at [email protected].

ENN CONSULTING collects personal data via:

• the online contact and request forms on the Site;
• cookies and trackers (see the Cookie Policy);
• any telephone or electronic exchanges you may have with us.

The data collected may include, among other things:

• surname, first name;
• email address;
• telephone number;
• postcode, département or town;
• information relating to the request (type of home, situation, eligibility);
• IP address and associated browsing data.

Unless otherwise indicated, the data requested in the forms is mandatory. Without it, it may not be possible to process your request.

Users’ personal data is processed for the following purposes:

• Qualification and processing of requests: collecting, analysing and qualifying requests for information relating to ecotourism.
• Introduction to our partners: passing on your contact details to the selected partners so that you can benefit from suitable offers and personalised support.
• Managing requests for quotes, call-backs or contact made via the Site.
• Complying with the applicable legal, administrative, tax or accounting obligations.
• Managing, maintaining and improving the operation, security and user experience of the Site.
• Preventing fraudulent or malicious activity.

• Article 6.1.a GDPR — Consent: for the sending of commercial communications and the passing on of data to the partners.
• Article 6.1.b GDPR — Pre-contractual performance: management of requests and provision of the services offered via the Site.
• Article 6.1.c GDPR — Legal obligations: tax, accounting and data protection regulations.
• Article 6.1.f GDPR — Legitimate interest: ensuring the security of the Site, preventing fraud, improving the quality of the services.

You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before that withdrawal.

Selected commercial partners in the ecotourism sector. These partners are selected for the quality of their offers, their regulatory compliance and their reliability. The precise list of partners is available on request from [email protected].

The data may also be disclosed to the following recipients:

• authorised internal staff of ENN CONSULTING (administration, customer relations, marketing, technical support);
• processors (hosting Scaleway SAS, CRM, emailing tools, processing service providers);
• competent public authorities and bodies where required by law.

Certain technical service providers used by the Site (in particular Google Analytics, Google Ads, Meta Pixel) may transfer data to countries outside the EU, in particular the United States. These transfers are governed by:

• the Standard Contractual Clauses (SCCs) of the European Commission;
• the Data Privacy Framework (DPF) for certified US companies;
• the appropriate safeguards provided for in Article 46 of the GDPR.

You may obtain a copy of these safeguards on request from [email protected].

• Data relating to the management of requests: the time needed for processing, then the statutory limitation period (up to 5 years).
• Data for commercial prospecting purposes: up to 3 years from the last contact initiated by the User.
• Cookies: a maximum of 13 months from the time they are placed.
• Technical logs: a maximum of 12 months.

ENN CONSULTING implements appropriate technical and organisational measures to protect your personal data against any unauthorised access, any disclosure, alteration or destruction, whether accidental or unlawful. In particular:

• encryption of sensitive data in the database (AES-256-GCM);
• TLS 1.3 encryption in transit;
• role-based access control (PostgreSQL RLS);
• hosting on ISO 27001-certified infrastructure in France;
• regular backups and a documented disaster recovery plan;
• strong password policy for administrator access and multi-factor authentication.

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• right of access to your personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to object to processing, in particular for commercial prospecting;
• right to data portability;
• right to withdraw your consent at any time;
• right to set instructions regarding what happens to your data after your death.

To exercise these rights, contact ENN CONSULTING by email: [email protected]. A reply will be sent to you within a maximum of 30 days.

You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) — https://www.cnil.fr/fr/plaintes.

Since 11 August 2026 (Law No. 2025-594 of 30 June 2025, Article 13, and Decree No. 2026-662 of 23 July 2026), no commercial call may be made to you without your prior and express consent. In the energy renovation, renewable energy and home adaptation sectors, telephone canvassing is prohibited: a professional may call you only if you have asked for it yourself.

On the Site, this request takes the form of a tick box, unticked by default, whose exact wording, the date and time, your IP address and your browser are recorded at the moment you tick it. The call-back is then made by a partner professional within 5 working days and relates solely to the subject of your request. Without this box, your request is handled by e-mail and your contact details are not passed on for a call.

You may withdraw your call-back request at any time, without giving a reason, by writing to [email protected] or to [email protected]. Proof of your consent is kept for three years and is provided to you, and to the supervisory authority, on request.

In accordance with Article 30 of the GDPR, ENN CONSULTING keeps a record of processing activities. A copy of this record may be requested from [email protected].

ENN CONSULTING may amend this Privacy Policy at any time to adapt it to legislative, technical or commercial developments. The updated version will always be available on the Site with the date of its last update.