1. General information

Webalterimmo (with its registered office located at 42 rue des Jeûneurs, 75002 Paris, France) (“Roomlala”, “we” and “our”), in its capacity as data controller, attaches great importance to the protection and respect of your privacy. This policy aims to inform you about our practices regarding the collection, use, and sharing of information that you provide to us through our platform (the “Platform”) accessible via the website.

This policy (as well as our General Terms and Conditions of Use and our cookie policy and any document referred to therein) sets out how we process the personal data that we collect and that you provide to us. We invite you to read this document carefully to know and understand our practices regarding the processing of your personal data that we implement.

2. Information we collect

We may collect and process the following data:

2.1. Information you provide to us directly

By using our Platform, you may provide us with information, some of which may identify you (“Personal Data”). This is particularly the case when you fill out forms (such as the registration form), when you complete your personal profile, when you communicate via the Roomlala messaging system, when you participate in one of our games, competitions, promotional offers, studies, or surveys, when you contact us – whether by phone, email, or any other means of communication – or when you report a problem to us.

This information includes, in particular, the following data:

2.1.1. The data necessary for registration for the service we provide on our Platform or for access to any other service provided by us. This data includes your surname and first name, email address, and password. This information is mandatory. Otherwise, Roomlala will not be able to provide you with the services offered by our Platform and you will not be authorised to create an account on our Platform;
2.1.2. A photograph;
2.1.3. Your date of birth;
2.1.4. Your gender;
2.1.5. Your mobile phone number;
2.1.6. Your landline phone number;
2.1.7. A postal address;
2.1.8. An email address;
2.1.9. Your profession;
2.1.10. Your school;
2.1.11. Your time zone;
2.1.12. The languages you speak;
2.1.13. Information relating to your rental or your accommodation, such as proof of residence used to certify your address;
2.1.14. Your mini-biography or profile description;
2.1.15. A copy of all correspondence between you and Roomlala;
2.1.16. A copy of all bookings or listings published on our Platform;
2.1.17. The details of financial or accounting operations carried out on our Platform or by any other means, containing in particular information relating to your payment card, your bank details, information relating to the accommodation booked or for which you have published a listing on our Platform;
2.1.18. The details of your visits to our Platform and the content you have accessed, as well as your listing searches;
2.1.19. Where applicable, your responses to our surveys and questionnaires and the reviews you have left to rate a rental carried out with another member of our community, as this information is likely to be used in the context of research and user behaviour analysis;
2.1.20. Data that we may ask you to provide when you report a problem with our Platform or our services, such as the subject of your support request;
2.1.21. Data linked to your location when you have agreed that we collect and process this data;
2.1.22. Connection and device data;
2.1.23. A copy of your passport, driver’s licence, identity card, or any other similar document that you have agreed to provide to us to prove your identity.
2.1.24. Any information that you decide to transmit.

2.2. Data we collect automatically

2.2.1. In the event that you connect to our services using the social media features made available to you, Roomlala will have access to certain data (in particular, your first name, surname, photograph, email address, and number of Facebook friends) from your account on the said social network in accordance with the general terms of use of the social network concerned. We may also collect some of your Personal Data when you interact with features of these social networks, such as “Like” features.
2.2.2. During each of your visits, we may collect, in accordance with applicable legislation and with your consent where applicable, information relating to the devices on which you use our services or the networks from which you access our services, such as your IP addresses, connection data, types and versions of internet browsers used, types and versions of your browser plugins, operating systems and platforms, data concerning your navigation path on our Platform, including your path on the various URL pages of our Platform, the content you access or view, the search terms used, download errors, the duration of consultation of certain pages, your device’s advertising identifier, interactions with the page, and any phone number used to contact us. Among the technologies used to collect this information, we use cookies (to learn more about this, please refer to our cookie policy).
2.2.3. We also collect information about your use of our Platform (such as the number of listings published, your registration date, your average rating received, etc.) which may be displayed on your public profile.

2.3. Data retention period

2.3.1. We retain your personal information for as long as necessary for the performance of the agreement between you and us and to comply with our legal obligations.
2.3.2. Bank account or credit card information is retained for the duration required by applicable tax and accounting laws.
2.3.3. Data collected in the context of subscribing to insurance products is retained for the duration of the insurance contract subscribed to and the time required for managing your claims, where applicable.
2.3.4. Content created by you on our platform may remain public on the Roomlala platform even after the deletion of your Roomlala Account. However, this information will no longer be attributed to you. It will be anonymised.
2.3.5. Because we maintain the Roomlala Platform to protect it from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time. Indeed, after your account is deleted, your data such as your name, first name, address, email, phone number, proof of identity, proof of residence, and information contained in your listings are saved for one year for legal reasons. Only photos are entirely erased from our systems as soon as the listing or account is deleted. After this period, all data attributed to you is anonymised.

3. How do we use the data we collect?

We use the data we collect in order to:
3.1. perform the contracts concluded between you and us and provide you with the information and services requested;
3.2. send you information about our services (such as booking confirmations) by email, SMS, or any other means of communication;
3.3. collect your payments or transmit the sums collected on your behalf;
3.4. allow you to personalise your profile on our Platform;
3.5. allow you to communicate and interact with other members of our community, particularly regarding our services or the rental(s) already carried out or that you plan to carry out;
3.6. give you access and allow you to communicate with our customer service;
3.7. ensure compliance with (i) applicable legislation, (ii) our general terms and conditions of use, (iii) our privacy policy, and (iv) our code of ethics. In the event of any breach on your part, we may suspend your account on our Platform;
3.8. send you, in accordance with applicable legal provisions and with your consent where legislation requires, marketing, advertising, and promotional messages and information relating to the use of our services, booking procedures, or suggest and advise you on goods or services that may be of interest to you. We may also use your data to send you advertising messages that may be of interest to you on social media platforms or third-party sites. If you would like more information on this, we invite you to read the contractual documents of these platforms;
3.9. inform you of changes to our services;
3.10. verify the information contained in your passport, driver’s licence, identity card, or any other identity document that we have collected during your registration or your use of our Platform;
3.11. manage our Platform and carry out internal technical operations in the context of troubleshooting, data analysis, testing, research, analysis, studies, and surveys;
3.12. improve and optimise our Platform, in particular to ensure that the display of our content is adapted to your device;
3.13. allow you to use the interactive features of our services if you wish;
3.14. help us maintain a healthy and secure environment on our Platform; and
3.15. evaluate the effectiveness of the advertising messages we send and adapt them to our members.

4. Do we use profiling and for what purpose?

We only use profiling in the following cases:

  • When you visit the Roomlala site, we ask you if you are looking for accommodation or if you wish to offer one on Roomlala;
  • When you are looking for accommodation, we ask you in which locality, for what dates, for how many people, and possibly according to what budget limit, in order to adapt our content to your needs;
  • When you offer accommodation for rent: we ask you, among other things, the type of accommodation it is, its location, and all terms and conditions related to the accommodation, in order to be able to meet your needs.

5. Who are the recipients of the information we collect and why do we transmit this information to them?

5.1. Within the framework of the use of our services, some of your information is transmitted to other members of our community, through your public profile or as part of the booking process (for example, we communicate your email address to the people you will host or with whom you will reside).
5.2. We also work closely with third-party companies that may have access to your Personal Data, and in particular with:
social media platforms that may offer you features allowing you to integrate information from your account on their own platform into your Roomlala profile;
our commercial partners who promote their services on our Platform and to which you may decide to subscribe. These services may notably consist of insurance services, banking services, etc. For example, we may provide some of your information to ADAR-RL to confirm your eligibility for the insurance programme;
our commercial partners on whose websites we may possibly advertise our services;
subcontractors we use for technical services, payment services, identity verification, or analytical solution providers (Google Analytics) and debt collection agencies and credit institutions.
5.3. We only share your data with the third parties mentioned in 5.2. above in the following cases:
5.3.1. When we use a service provider as part of the performance of any contract concluded between you and us or to provide or improve our services (for example, as part of payments made via our Platform);
5.3.2. As part of the booking process, we are required, in order to provide the requested services, to display on our Platform or transmit to another member certain of your Personal Data such as your first name, photograph, mobile phone number, or email address;
5.3.3. We publish the reviews you write as part of our rating system on our Platform. These reviews, which contain your first name and possibly the first letter of your surname as well as your photograph, are visible to all visitors to our Platform;
5.3.4. When we use search engine and analytical solution providers to improve and optimise our Platform;
5.3.5. when you expressly request it (for example, when you use the authentication methods provided by social networks);
5.3.6. When we broadcast, on the websites of our commercial partners, certain parts of our Platform (including the trips you have posted) via APIs or widgets. In this case, certain information from your public profile may also be displayed on these sites;
5.3.7. When we have a legal obligation to do so or if we believe in good faith that it is necessary to (i) respond to any claim against Roomlala, (ii) comply with any judicial request, (iii) enforce any contract concluded with our members, such as the General Terms and Conditions of Use and this Privacy Policy, (iv) in the event of an emergency involving public health or the physical integrity of a person, (v) in the context of surveys and investigations, or (vi) in order to guarantee the rights, property, and safety of Roomlala, its members, and more generally any third party;
5.3.8. In the event that we sell or acquire a business or assets, in which case we reserve the possibility of sharing your Personal Data with the potential seller or buyer of this business or assets.
5.3.9. If Roomlala or all or part of its assets are acquired by a third party, the data in our possession will, where applicable, be transferred to the new owner.
5.3.10. In accordance with applicable legislation and with your consent when required, we may aggregate data concerning you that we receive or send to our commercial partners, including all or part of your Personal Data and information collected via cookies. This aggregated information will only be used for the purposes described above.
5.3.11. We draw your attention to the fact that if you decide to let us access some of your information, in particular your Personal Data, through login services provided by our commercial partners, their privacy policies are also enforceable against you. We have no control over the collection or processing of your data implemented by our commercial partners on their own platform.

6. How do we use and moderate your messages?

6.1. We may read the messages you exchange with other members of our community via our Platform, particularly for fraud prevention purposes, improvement of our services, user support, and verification of compliance by our members with the contracts concluded with us, including our General Terms and Conditions of Use. For example, in order to prevent a member from bypassing our online booking system, we allow ourselves to browse and analyse the messages exchanged on our Platform to ensure that they do not contain any contact details or references to other websites.
6.2. We never read your communications with other members of our community for promotional or advertising targeting purposes. Where possible, we use automated systems to moderate messages sent between members via our Platform.

7. Targeted advertising, emails, and SMS we send you

In accordance with applicable legislation and with your consent when required, we may use the data you provide to us on our Platform for commercial prospecting purposes (for example, to (i) send you our newsletters, (ii) send you invitations to our events or any other communication that may be of interest to you, and (iii) display targeted advertisements on social media platforms or third-party sites).
Regarding promotional emails: You may withdraw your consent at any time by (i) unticking the relevant box in your account, (ii) clicking on the unsubscribe link provided in each of our communications, or (iii) by contacting us according to the procedures described below.
Regarding targeted advertising: On social media platforms (e.g., Facebook, Twitter): you may object to this processing at any time by configuring the advertising settings of your account;
On third-party sites: you can refer to our Cookie policy to understand how to withdraw your consent.

8. Is your data transferred, how and where?

We store your Personal Data in the European Union. However, it is possible that the data we collect when you use our Platform or as part of our services may be transferred to other countries, some of which may have less protective legislation on personal data protection than that in force in the country where you reside.
This is particularly the case regarding data transmitted to our subcontractors located outside the European Union, notably in Madagascar or the United States. We may use their services to respond to your requests, moderate photos published on our Platform, provide online payment tools, provide us with commercial and advertising services, or email and SMS services.
This is also the case for Roomlala affiliates located outside the European Union to whom we may transfer some of your data as part of the provision of our services in these countries.
In the event of such a transfer, we ensure that the processing is carried out in accordance with this policy and that it is governed by the standard contractual clauses of the European Commission which guarantee a sufficient level of protection for privacy and the fundamental rights of individuals.
Upon simple request, we can provide you with the list of countries where we store your data and those where it occasionally transits.

We undertake not to disclose to third parties the information and Personal Data that you provide to us. This information and Personal Data are exclusively used by our internal departments and will in no case be transferred or sold to third parties without your prior express consent.

9. What are your rights regarding your personal data?

9.1. For immediate access to a great deal of information about you, you can consult your personal Roomlala space by clicking on “Log in” at the top of the Roomlala.com homepage, then by accessing, among other things, your profile, your listings, and your exchanged messages. If you need help, do not hesitate to consult our help centre. Please be aware that any modification of your profile information such as your name, first name, email, address, phone number, or your proof of residence and proof of identity cancels and replaces the previous data. Only the new data entered is then saved in our system.
When provided for by applicable legislation, you have the right to obtain a copy of the personal data concerning you that we hold.
Before responding to your request, we may (i) verify your identity and (ii) ask you to provide us with more information to respond to your request.
9.2. We will endeavour to respond to your request within a reasonable time and, in any event, within the time limits set by law. If you wish to exercise this right, contact us according to the procedures indicated in Article 15 below.
As a member of our Platform, you also have the possibility to access the Personal Data that we hold through your account to correct, modify, or delete any incorrect information. You undertake to provide us with complete, accurate, valid, and up-to-date information. You can also close your account online at any time.
You can also modify or delete this information by contacting us directly (see Article 15 below).
Please note that we may retain certain information about you when the law requires us to do so or when we have a legitimate reason to do so. This is the case, for example, if we believe that you have committed fraud or breached our General Terms and Conditions of Use and we wish to prevent you from bypassing the rules applicable to our community.
9.3. You also have the right to define guidelines regarding the fate of your Personal Data after your death.

Roomlala refuses to collect data from minors. In the event of a member lying about their date of birth, and more particularly in the event of a fraudulent attestation regarding their majority, the minor’s parents are invited to notify Roomlala by sending an email to the address mentioned at the top of this document. Roomlala undertakes to delete all personal data concerning the minor as soon as possible.

10. Cookies and similar technologies

To learn more, consult our cookie policy.

11. Confidentiality of your password

You are responsible for the confidentiality of the password you have chosen to access your account on our Platform.

If you use a public computer (library, cybercafe, outside your home...), you undertake to log out when you have finished using Roomlala.com.
You undertake not to communicate your password to those around you. Anyone who knows your password can access your Roomlala account. Avoid keeping your passwords in writing. When you create a password, use a minimum of 6 characters, ideally including a combination of numbers and letters. Do not use common words, your date of birth, your name or that of your partner, your email address, or any other personal information that could be easily obtained. Avoid using the same password if you have multiple accounts on different sites.

12. Our guarantees in terms of security and confidentiality

We implement all the security measures necessary to protect your Personal Data against any unauthorised access, disclosure, modification, damage, or destruction of the data we hold.

12.1. A secure architecture

Based on a sustainable and secure architecture developed around Symfony technologies, all technical means have been implemented to guarantee our clients the confidentiality and security of access and processing of their data:

  • Control and filtering of access to data: firewall, HTTPS encryption of information flows, authentication by username and encrypted password, management of profiles and access rights; each user only has access to data that concerns them and that they are authorised to access according to their profile;
  • Security of transactions: All our transactions are safe and guaranteed thanks to the use of the SSL (Secure Socket Layers) security standard, which is currently the most widespread and reliable on the Internet. All data concerning our clients (bank card number, name, first name, postal address, email address, phone number...) are encrypted before transmission and processing to ensure their confidentiality.
  • The 3D-secure protocol on payment for bookings: international secure payment protocol on the Internet created by Visa (Verified By Visa) and Mastercard (Mastercard Secure Code) which is used to strengthen the security of online payments. It is based on the implementation of an additional check during a booking payment made on the Roomlala platform. In addition to the usual bank details, the tenant is invited to enter personal data allowing their bank to identify them and validate the operation. At the time of payment, users are redirected to a banking payment platform, so Roomlala.com does not at any time have access to bank card numbers.
  • Secure hosting of servers at a specialised service provider, with control of physical access to server rooms and a guarantee of availability in terms of bandwidth 24/7; redundant power supplies, air conditioning, fire protection, anti-intrusion security;
  • Daily backups of the platform’s data.

At the legal level, a confidentiality clause is systematically integrated into all our contracts.

12.2. CNIL declaration

In accordance with the Law, Roomlala has declared the processing of members' personal data to the CNIL, under number 1519261. You have a right of access, modification, rectification, and deletion of data concerning you (Article 34 of the Data Protection Act of 6 January 1978). To exercise this right, please send us a letter to the postal address indicated at the top of this document.

13. Links to other websites and social networks

Our Platform may occasionally contain links to the websites of our partners or third-party companies. Please note that these websites have their own privacy policies and that we decline all responsibility regarding the use made by these sites of information collected when you click on these links. We invite you to read the privacy policies of these sites before transmitting your Personal Data to them.

14. Modification of our privacy policy

We may occasionally modify this privacy policy. When necessary, we will inform you and/or seek your consent. We advise you to consult this page regularly to be aware of any modifications or updates made to our privacy policy.

15. Contact

For any questions regarding this privacy policy or for any request regarding your personal data, you can contact our Data Protection Officer by email at the address dpo@roomlala.com or by sending us a letter to the address mentioned at the top of this document, addressed to the attention of the Roomlala DPO.