1. Who we are
Saint-Tropez Insider is an independent editorial magazine dedicated to the village of Saint-Tropez. The data controller is the Saint-Tropez Insider editorial team, reachable at contact@saint-tropez-insider.com.
2. Data we collect
This site requires no registration and collects no personal information to access editorial content. The only data that may be processed is listed below.
We use Vercel Analytics to measure site traffic. This tool sets no third-party cookies and collects no personally identifiable information: only aggregated, anonymised metrics are recorded (visit count, country of origin, device type).
This site is partly funded by advertising. Google and its partners may set cookies and read identifiers to serve ads, measure their performance and, if you consent, personalise them based on your browsing. These operations are enabled only after you agree through the consent banner. If you decline, non-personalised ads are still shown. Details of the data Google uses are available on this page.
Google Analytics 4 provides detailed audience measurement, and the GetYourGuide affiliate script attributes activity bookings made from the site. Both trackers require the same prior consent: until you accept, they stay disabled (Google Consent Mode v2).
A technical cookie ("NEXT_LOCALE") is set to remember your language preference (French or English). This cookie is strictly necessary for the site to work, contains no personal data, and is retained for one year.
Like any web server, our hosting provider Vercel Inc. retains technical access logs (anonymised IP address, browser, URL visited) for a limited period for security and debugging purposes. These logs are not used for profiling.
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Vercel Analytics | Anonymous audience measurement | Legitimate interest (Art. 6.1.f GDPR) |
| Google AdSense | Ad serving and measurement | Consent (Art. 6.1.a GDPR) |
| Google Analytics 4 | Detailed audience measurement | Consent (Art. 6.1.a GDPR) |
| GetYourGuide | Booking attribution (affiliate) | Consent (Art. 6.1.a GDPR) |
| Language cookie | Site functionality | Contractual necessity (Art. 6.1.b GDPR) |
| Server logs | Security and debugging | Legitimate interest (Art. 6.1.f GDPR) |
4. Data sharing
We do not sell, rent or transfer any personal data to third parties for commercial purposes. The only recipients are:
- Vercel Inc. — site host (USA, Standard Contractual Clauses). Access log data is subject to their privacy policy.
- OpenWeatherMap — weather data provider (no personal data transmitted).
- Google Places API — restaurant data enrichment (no personal data transmitted).
- Google Ireland Ltd. / Google LLC — advertising network (AdSense) and audience measurement (Analytics). Transfers outside the EU are covered by the Data Privacy Framework and Standard Contractual Clauses. See their privacy policy.
- GetYourGuide Deutschland GmbH — affiliate platform for activity bookings.
5. Retention periods
- Language cookie: one year.
- Advertising and measurement cookies (Google): 13 months maximum.
- Consent choice: kept for 6 months, after which the banner reappears.
- Vercel Analytics metrics: rolling 30 days (aggregated data).
- Vercel server logs: maximum 30 days.
6. Your rights (GDPR)
Under the General Data Protection Regulation (GDPR – EU 2016/679), you have the following rights:
- Right of access — obtain a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure — have your data deleted ("right to be forgotten").
- Right to restriction — limit certain processing.
- Right to object — object to processing based on legitimate interest.
- Right to portability — receive your data in a structured format.
To exercise these rights, write to us at contact@saint-tropez-insider.com. We respond within one month. If you remain unsatisfied, you may lodge a complaint with your national data protection authority (in France: CNIL).
8. Security
The site is served exclusively over HTTPS. The administration interface is protected by a password and secure sessions. We apply secure development best practices to protect the integrity of the site and the data it processes.
9. Changes to this policy
This policy may be updated to reflect changes to the site or applicable law. The last modification date is shown at the top of the page. In the event of a material change, a notice will be published on the site.