Privacy Policy
Last updated: 3 October 2026
This translation is provided for information only: the French version of this document is the only binding version.
This policy explains what personal data Sono Côte Basque collects, why, and what your rights are. It applies to the website https://sonocotebasque.fr and to the associated hire services.
1. Data controller
Sono Côte Basque — 14 rue Jean Bart, 64200 Biarritz (Pyrénées-Atlantiques).
Contact: contact@sonocotebasque.fr · +33 6 09 36 95 30.
2. Data we collect
- Bookings & quotes: first name, last name, email, phone, delivery address, requested dates and equipment, messages you send us.
- Payment & security deposit: processed by our payment provider Stripe. We never store your card number; we keep only the transaction references.
- Identity check (hires with a security deposit): carried out by Stripe Identity; your identity document is processed by Stripe, not stored on our servers.
- Audience measurement (PostHog, hosted in the EU): without your consent, only anonymous visit statistics are collected, with no cookie or storage on your device. The measurement cookie and the recording of your browsing (input fields masked) are enabled only after your consent via the cookie banner.
- Technical logs: connection data strictly necessary for the operation and security of the site.
3. Purposes and legal bases
- Managing your requests, quotes, bookings, deliveries and security deposits — performance of the contract.
- Issuing invoices and complying with our accounting obligations — legal obligation.
- Ensuring security and improving the site — legitimate interest.
- Audience measurement — consent (can be withdrawn at any time).
4. Recipients & processors
Your data is never sold. It may be processed by our service providers strictly for the purposes above: Stripe (payment, security deposit, identity check), Resend (sending emails), PostHog (audience measurement, data hosted in the EU), Google (calendar synchronisation for our internal team), and our host Hetzner (Germany, EU).
5. Retention period
Data relating to a hire is kept for the duration of the business relationship, then archived for the period required by legal obligations (in particular accounting obligations, up to 10 years). Data from simple enquiries that are not followed up is deleted within 3 years. Measurement cookies have a limited lifetime in line with the CNIL's recommendations.
6. Your rights
In accordance with the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability of your data. To exercise these rights, write to us at contact@sonocotebasque.fr. You may also lodge a complaint with the CNIL (cnil.fr).
7. Cookies
Non-essential cookies (audience measurement) are only set after acceptance via the banner shown on your first visit. You can change or withdraw your choice at any time by clearing this site's data in your browser (cookies and local storage): the banner will then be shown again.
8. Contact
For any question about your data: contact@sonocotebasque.fr.