1. General Information

Webalterimmo (with its registered office at 42 rue des Jeûneurs, 75002 Paris, France) ("Roomlala", "we" and "our"), in its capacity as data controller, attaches great importance to the protection and respect of your privacy. This policy is intended to inform you of our practices regarding the collection, use, and sharing of information that you provide to us through our platform (the "Platform") accessible from the website.

This policy (along with our Terms of Service and our cookies policy and any document referred to therein) presents the manner in which we process the personal data we collect and that you provide to us. We invite you to read this document carefully to know and understand our practices regarding the processing of your personal data that we implement.

2. Information we collect

We may collect and process the following data:

2.1. Information you provide to us directly

By using our Platform, you may provide us with information, some of which may identify you ("Personal Data"). This is particularly the case when you fill out forms (such as the registration form), when you fill out the profile of your personal space, when you exchange messages on the Roomlala messaging system, when you participate in one of our games, contests, promotional offers, studies, or surveys, when you contact us – whether by phone, email, or any other means of communication – or when you report a problem to us.

This information includes, in particular, the following data:

2.1.1. The data necessary for registration for the service we provide on our Platform or for access to any other service provided by us. This data includes your first and last name, email address, and password. This information is mandatory. Without it, Roomlala will not be able to provide the services offered by our Platform and you will not be authorized to create an account on our Platform;
2.1.2. A photograph;
2.1.3. Your date of birth;
2.1.4. Your gender;
2.1.5. Your mobile phone number;
2.1.6. Your landline phone number;
2.1.7. A postal address;
2.1.8. An email address;
2.1.9. Your profession;
2.1.10. Your school;
2.1.11. Your time zone;
2.1.12. The languages you speak;
2.1.13. Information related to your rental or your home, such as your proof of residence used to verify your address;
2.1.14. Your mini-biography or profile description;
2.1.15. A copy of all exchanges between you and Roomlala;
2.1.16. A copy of all bookings or listings published on our Platform;
2.1.17. Details of financial or accounting transactions carried out on our Platform or by any other means, including in particular information relating to your payment card, your bank details, information relating to the properties booked or for which you have published a listing on our Platform;
2.1.18. Details of your visits to our Platform and the content you have accessed, as well as your listing searches;
2.1.19. If applicable, your responses to our surveys and questionnaires and the reviews you have left to evaluate a rental carried out with another member of our community, this information being particularly likely to be used in the context of research and user behavior analysis;
2.1.20. Data that we may ask you to provide when you report a problem related to our Platform or our services, such as the subject of your support request;
2.1.21. Location-related data when you have agreed that we collect and process this data;
2.1.22. Connection and device data;
2.1.23. A copy of your passport, driver’s license, national identity card, or any other similar document that you have agreed to provide us to attest to your identity.
2.1.24. Any information that you choose to provide.

2.2. Data we collect automatically

2.2.1. In the event that you connect to our services using the social network features made available to you, Roomlala will have access to some of the data (in particular, your first name, last name, photograph, email address, and number of Facebook friends) from your account on said social network in accordance with the terms of service of the concerned social network. We may also collect some of your Personal Data when you interact with features of these social networks, such as "Like" features.
2.2.2. During each of your visits, we may collect, in accordance with applicable legislation and with your consent where necessary, information regarding the devices on which you use our services or the networks from which you access our services, such as in particular your IP addresses, connection data, types and versions of internet browsers used, types and versions of your browser plugins, operating systems and platforms, data regarding your navigation path on our Platform, including your path through the various URL pages of our Platform, the content you access or view, the search terms used, download errors, the duration of page visits, the advertising identifier of your device, interactions with the page, as well as any phone number used to contact us. Among the technologies used to collect this information, we use cookies (to learn more about this, please refer to our cookies policy.
2.2.3. We also collect information about your use of our Platform (such as the number of listings published, your registration date, your average rating received, etc.) which may be displayed on your public profile.

2.3. Data retention period

2.3.1. We retain your personal information as long as necessary for the performance of the agreement between you and us and to comply with our legal obligations.
2.3.2. Bank account or credit card information is kept for the duration required by applicable tax and accounting laws.
2.3.3. Data collected in the context of subscription to insurance products is kept for the duration of the insurance contract subscribed and the duration necessary for managing your claims, if applicable.
2.3.4. Content created by you on our platform may remain public on the Roomlala platform even after the deletion of your Roomlala account. However, this information will no longer be attributed to you. It will be anonymized.
2.3.5. Because we maintain the Roomlala Platform to protect it from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time. Indeed, after your account is deleted, your data such as your name, first name, address, email, phone number, proof of identity, proof of residence, and information contained in your listings are saved for one year for legal reasons. Only photos are entirely erased from our systems as soon as the listing or account is deleted. After this period, all this data attributed to you is anonymized.

3. How do we use the data we collect?

We use the data we collect in order to:
3.1. perform the contracts concluded between you and us and provide you with the requested information and services;
3.2. send you information about our services (such as, for example, booking confirmations) by email, SMS, or any other means of communication;
3.3. collect your payments or transmit to you the sums collected on your behalf;
3.4. allow you to personalize your profile on our Platform;
3.5. allow you to communicate and interact with other members of our community, particularly concerning our services or the rental(s) already carried out or that you plan to carry out;
3.6. give you access to and allow you to communicate with our customer service;
3.7. ensure compliance with (i) applicable legislation, (ii) our terms of service, (iii) our privacy policy, and (iv) our code of ethics. In the event of breaches on your part, we may suspend your account on our Platform;
3.8. send you, in accordance with applicable legal provisions and with your consent where legislation requires it, marketing, advertising, and promotional messages and information related to the use of our services, booking procedures, or suggest and advise you on goods or services that may interest you. We may also use your data to send you advertising messages that may interest you on social media platforms or third-party sites. If you would like more information on this, we invite you to read the contractual documents of these platforms;
3.9. inform you of modifications made to our services;
3.10. verify the information contained in your passport, driver’s license, identity card, or any other identity document that we may have collected during your registration or use of our Platform;
3.11. manage our Platform and carry out internal technical operations in the context of troubleshooting, data analysis, testing, research, analysis, studies, and surveys;
3.12. improve and optimize our Platform, in particular to ensure that the display of our content is adapted to your device;
3.13. allow you to use the interactive features of our services if you wish;
3.14. help us maintain a healthy and secure environment on our Platform; and
3.15. evaluate the effectiveness of the advertising messages we send and adapt them to our members.

4. Do we use profiling and for what purpose?

We only use profiling in the following cases:

  • When you visit the Roomlala site, we ask you if you are looking for a place to stay or if you wish to offer one on Roomlala;
  • When you are looking for a place to stay, we ask you in which location, for what dates, for how many people, and possibly within what budget limit, in order to adapt our content to your needs;
  • When you offer a property for rent: we ask you, among other things, what type of accommodation it is, its location, and all conditions related to the property, in order to be able to meet your need.

5. Who are the recipients of the information we collect and why do we transmit this information to them?

5.1. As part of the use of our services, some of your information is transmitted to other members of our community, via your public profile or as part of the booking process (for example, we share your email address with the people you will host or with whom you will reside).
5.2. We also work in close collaboration with third-party companies that may have access to your Personal Data, and in particular with:
social media platforms that may offer you features allowing you to integrate information from your account on their own platform into your Roomlala profile;
our business partners who promote their services on our Platform and to which you may decide to subscribe. These services may notably consist of insurance services, banking services, etc. For example, we may provide some of your information to ADAR-RL to confirm your eligibility for the insurance program;
our business partners on whose website we may possibly advertise our services;
subcontractors we use for technical services, payment services, identity verification, or even analytical solution providers (Google Analytics) and collection agencies and credit institutions.
5.3. We only share your data with the third parties mentioned in 5.2. above in the following cases:
5.3.1. When we use a service provider as part of the performance of any contract concluded between you and us or to provide or improve our services (for example, in the context of payments made via our Platform);
5.3.2. As part of the booking process, we are led, in order to provide the requested services, to display on our Platform or to transmit to another member some of your Personal Data such as your first name, photograph, mobile phone number, or email address;
5.3.3. We publish the reviews you write as part of our review system on our Platform. These reviews, which contain your first name and possibly the first letter of your last name as well as your photograph, are visible to all visitors of our Platform;
5.3.4. When we use search engine and analytics solution providers to improve and optimize our Platform;
5.3.5. when you expressly request it (for example, when you use the authentication methods provided by social networks);
5.3.6. When we distribute, on the websites of our business partners, certain parts of our Platform (including the trips you have posted) via API or widgets. In this case, some information from your public profile may also be displayed on these sites;
5.3.7. When we have a legal obligation to do so or if we believe in good faith that this is necessary to (i) respond to any claim against Roomlala, (ii) comply with any judicial request, (iii) enforce any contract concluded with our members, such as the Terms of Service and this Privacy Policy (iv) in case of an emergency involving public health or the physical integrity of a person, (v) in the context of inquiries and investigations, or (vi) to guarantee the rights, property, and security of Roomlala, its members, and more generally any third party;
5.3.8. In the event that we sell or acquire a business or assets, in which case we reserve the possibility to share your Personal Data with the potential seller or buyer of this business or these assets.
5.3.9. If Roomlala or all or part of its assets are acquired by a third party, the data in our possession will, where applicable, be transferred to the new owner.
5.3.10. In accordance with applicable legislation and with your consent when required, we may aggregate data concerning you that we receive or send to our business partners, including all or part of your Personal Data and information collected through cookies. This aggregated information will only be used for the purposes described above.
5.3.11. We draw your attention to the fact that if you decide to let us access some of your information, including your Personal Data, through connection services provided by our business partners, their privacy policies are also opposable to you. We have no control over the collection or processing of your data implemented by our business partners on their own platform.

6. How do we use and moderate your messages?

6.1. We may review the messages you exchange with other members of our community via our Platform, notably for fraud prevention purposes, improvement of our services, user assistance, verification of our members' compliance with the contracts concluded with us, and in particular our Terms of Service. For example, in order to prevent a member from bypassing our online booking system, we authorize ourselves to browse and analyze the messages exchanged on our Platform to ensure that they do not contain any contact details or references to other websites.
6.2. We never review your communications with other members of our community for promotional or advertising targeting purposes. When possible, we use automated systems to moderate messages transmitted between members via our Platform.

7. Targeted advertising, emails, and SMS we send you

In accordance with applicable legislation and with your consent when required, we may use the data you provide to us on our Platform for commercial prospecting purposes (for example, to (i) send you our newsletters, (ii) send you invitations to our events or any other communication that may interest you, and (iii) display targeted advertisements on social media platforms or third-party sites).
Regarding promotional emails: You can withdraw your consent at any time by (i) unchecking the relevant box in your account, (ii) clicking on the unsubscribe link provided in each of our communications, or (iii) contacting us according to the procedures described below.
Regarding targeted advertising: On social media platforms (for example, Facebook, Twitter): you can object to this processing at any time by configuring the advertising settings of your account;
On third-party sites: you can refer to our Cookies policy to understand how to withdraw your consent.

8. Is your data transferred, how, and where?

We keep your Personal Data in the European Union. However, it is possible that the data we collect when you use our Platform or as part of our services may be transferred to other countries, some of which may have less protective personal data protection legislation than the one in force in the country where you reside.
This is notably the case concerning data transmitted to our subcontractors located outside the European Union, particularly in Madagascar or the United States. We may use their services to respond to your requests, moderate photographs published on our Platform, provide online payment tools, provide us with commercial and advertising services, or email and SMS services.
This is also the case concerning Roomlala affiliates located outside the European Union to whom we may transfer some of your data as part of the provision of our services in these countries.
In case of such a transfer, we ensure that the processing is carried out in accordance with this policy and that it is framed by the standard contractual clauses of the European Commission which allow for guaranteeing a sufficient level of protection of privacy and fundamental rights of individuals.
Upon simple request, we can provide you with the list of countries where we store your data and those where they occasionally transit.

We commit not to disclose to third parties the information and Personal Data you communicate to us. This information and Personal Data are exclusively used by our internal services and will under no circumstances be assigned or sold to third parties without your prior express consent.

9. What are your rights regarding your personal data?

9.1. For immediate access to a lot of information concerning you, you can consult your Roomlala personal space by clicking on "Login" at the top of the Roomlala.com home page, then by accessing, among other things, your profile, your listings, and your exchanged messages. If you need help, do not hesitate to consult our help center. Be aware that any change to your profile information, such as your name, first name, email, address, phone number, or even your proof of residence and proof of identity, cancels and replaces the previous data. Only the new data entered is then saved in our system.
When provided for by applicable legislation, you have the right to obtain a copy of the personal data concerning you that we hold.
Before responding to your request, we may (i) verify your identity and (ii) ask you to provide us with more information to respond to your request.
9.2. We will endeavor to respond to your request within a reasonable time and, in any event, within the time limits set by law. If you wish to exercise this right, contact us according to the procedures indicated in Article 15 below.
As a member of our Platform, you also have the possibility to access the Personal Data that we hold through your account to correct, modify, or delete any incorrect information. You commit to providing us with complete, accurate, valid, and up-to-date information. You can also close your account online at any time.
You can also modify or delete this information by contacting us directly (see Article 15 below).
Please note that we may retain certain information about you when the law requires us to do so or when we have a legitimate reason to do so. This is, for example, the case if we believe that you have committed fraud or violated our Terms of Service and we wish to prevent you from bypassing the rules applicable to our community.
9.3. You also have the right to define directives regarding the fate of your Personal Data after your death.

Roomlala refuses to collect data from minors. In case of a lie by a Member regarding their date of birth and more particularly in case of fraudulent attestation regarding their majority, the parents of the minor are invited to notify Roomlala by sending an email to the address mentioned at the top of this document. Roomlala commits to deleting all personal data concerning the minor as soon as possible.

10. Cookies and similar technologies

To learn more, consult our cookies policy.

11. Confidentiality of your password

You are responsible for the confidentiality of the password you have chosen to access your account on our Platform.

If you use a public computer (library, internet café, outside your home...), you commit to logging out when you have finished using Roomlala.com.
You commit not to share your password with anyone around you. Anyone who knows your password can access your Roomlala account. Avoid keeping your passwords in writing. When you create a password, use a minimum of 6 characters, ideally including a combination of numbers and letters. Do not use common words, your date of birth, your name or that of your partner, your email address, or any other personal information that could be obtained easily. Avoid using the same password if you have multiple accounts on different sites.

12. Our guarantees in terms of security and confidentiality

We implement all necessary security measures to protect your Personal Data against any unauthorized access, disclosure, modification, damage, or destruction of the data we hold.

12.1. A secure architecture

Relying on a sustainable and secure architecture developed around Symfony technologies, all technical means have been implemented to guarantee our clients the confidentiality and security of access to and processing of their data:

  • Control and filtering of data access: firewall, HTTPS encryption of information flows, authentication by username and encrypted password, management of profiles and access rights; each user only has access to the data that concerns them and that they are authorized to access according to their profile;
  • Security of transactions: All our transactions are safe and guaranteed through the use of the SSL (Secure Socket Layers) security standard, which is currently the most widespread and reliable on the Internet. All data concerning our clients (credit card number, name, first name, postal address, email address, phone, etc.) are encrypted before transmission and processing to ensure their confidentiality.
  • The 3D-secure protocol for booking payments: an international secure online payment protocol created by Visa (Verified By Visa) and Mastercard (Mastercard Secure Code) that serves to strengthen the security of online payments. It relies on the implementation of an additional check during a booking payment made on the Roomlala platform. In addition to the usual bank details, the tenant is invited to enter a personal piece of data allowing their bank to identify them and validate the transaction. At the time of payment, users are redirected to a banking payment platform, so Roomlala.com never has access to credit card numbers at any time.
  • Secure hosting of servers at a specialized service provider, with control of physical access to server rooms and a guarantee of availability in terms of bandwidth 24/7; redundant power supplies, air conditioning, fire safety, anti-intrusion security;
  • Daily backups of platform data.

At the legal level, a confidentiality clause is systematically integrated into all our contracts.

12.2. CNIL Declaration

In accordance with the Law, Roomlala has declared the processing of Members' personal data to the CNIL, under number 1519261. You have a right to access, modify, rectify, and delete data concerning you (Article 34 of the Data Protection Act of January 6, 1978). To exercise this right, please send us a letter to the postal address indicated at the top of this document.

13. Links to other websites and social networks

Our Platform may occasionally contain links to the websites of our partners or third-party companies. Please note that these websites have their own privacy policies and that we decline any responsibility for the use made by these sites of information collected when you click on these links. We invite you to read the privacy policies of these sites before transmitting your Personal Data to them.

14. Modification of our privacy policy

We may occasionally modify this privacy policy. When necessary, we will inform you and/or seek your agreement. We advise you to consult this page regularly to be aware of any modifications or updates made to our privacy policy.

15. Contact

For any question regarding this privacy policy or for any request regarding your personal data, you can contact our Data Protection Officer by email at the address dpo@roomlala.com or by sending us a letter to the address mentioned at the top of this document, addressed to the attention of the Roomlala DPO.