Flower Campings Customer Personal Data Protection Charter
(Updated on September 30, 2026)
Purpose of this document
This Charter describes the principles applied by the Magora Group to collect, use, retain, secure and share the personal data of its customers, prospective customers and users of its services.
| Document | Magora - GDPR Charter v2.2 |
|---|---|
| Reference version | Magora - GDPR Charter v2.1 |
| Additions included | Tracking pixels |
| Owner | Magora Group DPO / CISO |
Introduction
Dear customers,
In providing its services, the MAGORA group (hereinafter “MAGORA” or “we”) processes its customers’ Personal Data (“you”) as the Data Controller.
This Charter (hereinafter the “Charter”) is intended to inform you about how we process your Data and about your rights.
MAGORA collects and processes your Personal Data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”), and French Law No. 78-17 of 6 January 1978 on data processing, files and individual liberties, as amended (hereinafter the “French Data Protection Act”), together the “Applicable Regulations”.
This Charter may be updated regularly, in particular to take account of any changes to the Applicable Regulations or to reflect new organisational arrangements within MAGORA.
The implementation of this regulation gives the Magora Group an opportunity to reaffirm, through this Charter, which forms part of its General Terms and Conditions of Sale, the principles that guide its use of your personal data.
Scope of this Charter
This Charter governs the processing of customers’ Personal Data by the companies of the MAGORA group, which includes the following entities:
- Holding Tourisme, located at 123, rue du Château - 92100 Boulogne-Billancourt, registered with the Nanterre Trade and Companies Register under number 434 940 656.
- Its subsidiaries and affiliated companies operating in real estate, hospitality, serviced residences and campsites.
- Vie Jeune, located at 123, rue du Château - 92100 Boulogne-Billancourt, registered with the Nanterre Trade and Companies Register under number 818 254 047.
- Its subsidiaries and affiliated companies operating in real estate and serviced residences.
These entities include the following establishments and brands: Odalys Vacances, Odalys City, Odalys Campus, Odalys Invest, SGIT, Flower Campings, Alpissimmo, Souffle du Monde, Happy Senior. This list is updated regularly and can be viewed on our Magora Group website.
1. Definition of Personal Data
Personal data means any information that makes it possible to identify a natural person, directly or indirectly.
- First and last name
- Postal address
- Email address
- Telephone number
- IP address
- Login ID
- Photograph
- Vehicle registration number
2. Processing of Personal Data
Processing of personal data includes any operation performed on personal data, including:
- Collection
- Recording
- Retention
- Consultation
- Use
- Transfer
- Archiving
- Deletion
3. Scope
This Charter applies to all processing carried out by Magora in connection with:
- Tourist residences
- Student residences
- Business residences
- Campsites
- Websites
- Digital applications and services
- All relationships with customers and prospective customers
4. Personal Data collected
Depending on the circumstances, we may collect the following categories of data:
| Category | Examples of data |
|---|---|
| Identification data | First name, last name, date of birth, nationality, postal contact details, email address, telephone number and vehicle registration number. |
| Data relating to accompanying persons | Names of accompanying persons and data relating to minors travelling with an adult. |
| Contract and stay data | Bookings, stay dates, customer preferences, specific requests and additional services purchased. |
| Payment data | Information required to process payments. |
| Technical data | IP address, browser used, language settings, browsing data and cookies. |
| Security data | Images from video surveillance systems at certain establishments, where they make it possible to identify a person. |
| Electronic tracking data | Data associated with tracking pixels embedded in certain electronic communications: campaign or recipient ID, message opens, timestamps, technical data strictly necessary for tracking, and audience, deliverability or interaction statistics where such processing is permitted. |
Video surveillance
Some Magora Group establishments are equipped with video surveillance systems to ensure the safety of people, property and facilities. Recorded images may constitute personal data when they make it possible to identify a person.
5. When is data collected?
- When making a booking
- During a stay
- When communicating with customer service
- When making a complaint or in the event of a dispute
- When taking part in a customer satisfaction survey
- When taking part in a competition
- When subscribing to a newsletter
- When browsing our websites
- When viewing our social media pages
- When partners or service providers are involved
- When using our digital services
- When images are recorded by video surveillance systems at certain establishments
- When opening or interacting with certain electronic communications, where tracking pixels or equivalent technologies are used in accordance with applicable regulations.
6. Purposes of processing
- Managing bookings and stays
- Managing customer relations
- Responding to requests
- Improving our services
- Personalising offers
- Conducting statistical analyses
- Preventing fraud
- Securing payments
- Complying with legal obligations
- Managing complaints
- Organising promotional activities
- Ensuring the safety of establishments and their occupants
- Measuring, under appropriate safeguards, the deliverability, audience or interaction of electronic communications, where such processing is permitted.
7. Legal bases for processing
| Legal basis | Relevant processing |
|---|---|
| Performance of a contract | Booking management, stay management and after-sales service. |
| Legal obligations | Accounting, taxation, retention of certain data and responding to competent authorities. |
| Legitimate interest | Information system security, fraud prevention, video surveillance and improving service quality. |
| Consent | Sending marketing communications where required, and placing certain cookies and trackers. |
| Consent or exemption under the regulations applicable to trackers | Tracking pixels used in emails or electronic communications: prior consent for individual audience measurement, personalisation or marketing; information and specific safeguards for exempt uses, particularly where the purpose is strictly limited to deliverability or security. |
8. Data recipients
Data may be disclosed to the following categories of recipients:
- Authorised Magora employees
- Establishments concerned by the booking
- Technical service providers
- IT hosting providers
- Payment service providers
- Marketing agencies
- Routing and electronic communications service providers
- Processors acting on our behalf
- Statutory auditors
- Legal advisers
- Administrative or judicial authorities where required by law
All processors are subject to contractual confidentiality and data protection obligations.
9. Retention periods
Data is retained for limited periods proportionate to the purposes for which it is processed.
| Data category | Retention period |
|---|---|
| Cookies | 13 months |
| Customer data | 5 years after the last transaction |
| Video surveillance images | 1 month, unless required for legal or judicial reasons |
| Telephone conversation with the call centre | 1 month, unless required for legal or judicial reasons. |
| Accounting data | As required by applicable legal obligations |
| GDPR requests | For as long as necessary to handle the request, followed by statutory archiving |
| Data from tracking pixels | For a period limited to the purpose pursued and the obligations to retain evidence of consent or objection; statistics may be aggregated or anonymised where possible. |
10. Magora’s data protection commitments
- Collect only information that is strictly necessary for our business activities, customer satisfaction and the improvement of our products and services.
- Do not collect any information considered “sensitive” unless required by law or with explicit consent. Sensitive data | CNIL
- Limit access to authorised individuals only.
- Implement appropriate security measures.
- Retain data for a limited period.
- Strictly regulate data transfers.
- Ensure that data subjects can exercise their rights.
- Select processors that comply with the GDPR.
- Obtain consent where required.
- Regularly raise employees’ awareness of data protection issues.
11. Your rights
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw your consent
- Right to lodge a complaint with the CNIL
12. Exercising your rights
If you have any questions about the protection of your personal data or wish to exercise your rights, you can contact the Data Protection Officer:
| dpo@magora.fr | |
| Postal address | Data Protection Officer Magora 655 rue René Descartes Parc de la Duranne - BP 412 13591 Aix-en-Provence Cedex 3 |
| Proof of identity | Proof of identity may be requested where necessary. |
Where provided for by law, the response time for a complete request is two months.
13. Confidentiality and security
Magora implements appropriate technical, physical and organisational measures to ensure the confidentiality, integrity, availability and traceability of personal data.
- Firewalls
- Access controls
- Authentication
- Encryption where appropriate
- Access logging
- Regular employee awareness training
14. Managing personal data breaches
In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, the Magora Group implements the measures required by the GDPR, including:
- Analysing the incident
- Limiting its impact
- Notifying the competent supervisory authority where required
- Informing the data subjects where required by regulations
- Implementing corrective measures to prevent similar incidents
15. Cookies
When you visit our website, we may, subject to your choices, place a text file known as a cookie on your computer through your browser. This file has a limited lifespan and will be deleted automatically once that period expires.
During its validity or storage period, it allows us to recognise your computer on subsequent visits. These cookies do not contain viruses. Magora uses cookies to improve your experience on our website.
Some cookies are essential for the website to function properly; others help us understand which content is most useful to our visitors, enabling us to offer better services and content and to promote the most relevant offers to our users through advertising or communication campaigns.
The Magora Group uses different types of cookies and trackers:
- Strictly necessary cookies
- Audience measurement cookies
- Functional cookies
- Advertising cookies
- Personalisation cookies
You can change your preferences at any time through your browser settings or the consent management tool available on our websites.
16. Tracking pixels in electronic communications
Magora may use tracking pixels or equivalent technologies in certain electronic communications, including information emails, newsletters, marketing communications or certain service messages.
A tracking pixel is generally a very small image, sometimes invisible to the recipient, whose loading makes it possible to measure whether a message has been opened or to record certain interactions with it.
These technologies may be used to measure message deliverability, compile audience statistics, improve the relevance of communications, personalise certain content or measure campaign effectiveness, in accordance with the choices expressed by the data subjects.
Where tracking pixels are used for individual audience measurement, personalisation, profiling or marketing, Magora obtains the prior consent of the data subjects where required.
Certain strictly limited uses, particularly those relating to the deliverability or security of communications, may be implemented without consent when they meet the exemption conditions set out in the regulations applicable to trackers. In such cases, the data collected is limited to what is strictly necessary and is not reused for another purpose.
Data subjects are informed about the use of these technologies and, where consent is required, may withdraw it at any time as easily as they gave it. They may also object to processing based on an exemption where the regulations provide for this.
Choices relating to tracking pixels can be managed using the mechanisms provided in electronic communications, including unsubscribe links, preference centres or consent management forms.
17. Telephone marketing
In accordance with the regulations in force, you can object to telephone marketing by registering on the Bloctel.
Version information
| Version | 2.2 |
|---|---|
| Effective date | September 30, 2026 |
| Owner du document | Magora Group DPO |