1. General Information

Webalterimmo (with its registered office located at 42 rue des Jeûneurs, 75002 Paris, France) (“Roomlala”, “we” and “our”), in its capacity as data controller, attaches great importance to the protection and respect of your privacy. This policy is intended to inform you of our practices regarding the collection, use, and sharing of information that you provide to us through our platform (the “Platform”) accessible from the website.

This policy (together with our General Terms and Conditions of Use and our cookie policy and any document referred to therein) sets out how we process the personal data we collect and that you provide to us. We invite you to read this document carefully to know and understand our practices regarding the processing of your personal data that we implement.

2. Information we collect

We may collect and process the following data:

2.1. Information you provide to us directly

By using our Platform, you are led to provide us with information, some of which may identify you (“Personal Data”). This is particularly the case when you fill out forms (such as the registration form), when you complete the profile of your personal space, when you communicate on the Roomlala messaging system, when you participate in one of our games, contests, promotional offers, studies or surveys, when you contact us – whether by phone, email or any other means of communication – or when you report a problem to us.

This information includes the following data:

2.1.1. The data necessary for registration for the service we provide on our Platform or access to any other service provided by us. This data includes your first and last name, email address, and password. This information is mandatory. Otherwise, Roomlala will not be able to provide you with the services offered by our Platform and you will not be authorized to create an account on our Platform;
2.1.2. A photograph;
2.1.3. Your date of birth;
2.1.4. Your gender;
2.1.5. Your mobile phone number;
2.1.6. Your landline phone number;
2.1.7. A postal address;
2.1.8. An email address;
2.1.9. Your profession;
2.1.10. Your school;
2.1.11. Your time zone;
2.1.12. The languages you speak;
2.1.13. Information related to your rental or accommodation, such as your proof of residence used to verify your address;
2.1.14. Your short biography or profile description;
2.1.15. A copy of all exchanges between you and Roomlala;
2.1.16. A copy of all bookings or listings published on our Platform;
2.1.17. The details of financial or accounting transactions carried out on our Platform or by any other means, including in particular information related to your payment card, your bank details, information related to accommodations booked or for which you have published a listing on our Platform;
2.1.18. The details of your visits to our Platform and the content you have accessed, as well as your listing searches;
2.1.19. Where applicable, your responses to our surveys and questionnaires and the reviews you have left to evaluate a rental carried out with another member of our community, this information being particularly likely to be used in the context of research and analysis of user behavior;
2.1.20. The data that we may ask you to provide when you report a problem related to our Platform or our services, such as the subject of your support request;
2.1.21. Data related to your location when you have agreed that we collect and process this data;
2.1.22. Connection and device data;
2.1.23. A copy of your passport, driver's license, ID card, or any other similar document that you have agreed to provide to us to verify your identity.
2.1.24. Any information you decide to transmit.

2.2. Data we collect automatically

2.2.1. In the event that you connect to our services using the social media features made available to you, Roomlala will have access to certain data (in particular, your first name, last name, photograph, email address, and number of Facebook friends) from your account on the said social network in accordance with the general terms of use of the social network concerned. We may also collect some of your Personal Data when you interact with features of these social networks, such as “Like” features.
2.2.2. During each of your visits, we may collect, in accordance with applicable law and with your consent where necessary, information related to the devices on which you use our services or the networks from which you access our services, such as your IP addresses, connection data, types and versions of internet browsers used, types and versions of your browser plugins, operating systems and platforms, data concerning your browsing path on our Platform, including your path through the different URL pages of our Platform, the content you access or view, the search terms used, download errors, the duration of consultation of certain pages, the advertising identifier of your device, interactions with the page as well as any phone number used to contact us. Among the technologies used to collect this information, we notably use cookies (to learn more about this, please refer to our cookie policy).
2.2.3. We also collect information about your use of our Platform (such as the number of listings published, your registration date, your average received ratings, etc.) that may be displayed on your public profile.

2.3. Retention period of your data

2.3.1. We keep your personal information for as long as necessary for the performance of the agreement between you and us and to comply with our legal obligations.
2.3.2. Bank account or credit card information is kept for the duration required by applicable tax and accounting laws.
2.3.3. Data collected in the context of subscription to insurance products are kept for the duration of the insurance contract subscribed and the duration necessary for the management of your claims if applicable.
2.3.4. Content created by you on our platform may continue to be public on the Roomlala platform, even after the deletion of your Roomlala Account. However, this information will no longer be attributed to you. It will be anonymized.
2.3.5. Because we maintain the Roomlala Platform to protect it from any accidental or malicious loss and from any destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time. Indeed, after deletion of your account, your data such as your name, first name, address, email, phone number, proof of identity, proof of residence, and the information contained in your listings are saved for one year for legal reasons. Only photos are completely erased from our systems as soon as the listing or account is deleted. After this period, all this data attributed to you is anonymized.

3. How do we use the data we collect?

We use the data we collect in order to:
3.1. perform contracts concluded between you and us and provide you with the requested information and services;
3.2. send you information about our services (such as, for example, booking confirmations) by email, SMS, or any other means of communication;
3.3. collect your payments or transfer to you the sums collected on your behalf;
3.4. allow you to personalize your profile on our Platform;
3.5. allow you to communicate and exchange with other members of our community, particularly regarding our services or the rental(s) already made or that you plan to make;
3.6. give you access and allow you to communicate with our customer service;
3.7. ensure compliance with (i) applicable legislation, (ii) our general terms of use, (iii) our privacy policy, and (iv) our ethical charter. In case of breach on your part, we may be led to suspend your account on our Platform;
3.8. send you, in accordance with applicable legal provisions and with your consent when the law requires it, marketing, advertising, and promotional messages and information related to the use of our services, booking conditions, or suggest and advise you on goods or services that may interest you. We may also use your data to send you advertising messages that may interest you on social media platforms or third-party sites. If you wish to have more information on this subject, we invite you to read the contractual documents of these platforms;
3.9. inform you of modifications made to our services;
3.10. verify the information contained in your passport, driver's license, ID card, or any other identity document that we may have collected during your registration or your use of our Platform;
3.11. manage our Platform and perform internal technical operations in the context of troubleshooting, data analysis, testing, research, analysis, studies, and surveys;
3.12. improve and optimize our Platform, in particular to ensure that the display of our content is adapted to your device;
3.13. allow you to use the interactive features of our services if you wish;
3.14. help us maintain a healthy and secure environment on our Platform; and
3.15. evaluate the effectiveness of the advertising messages we send and adapt them to our members.

4. Do we use profiling and for what purpose?

We only use profiling in the following cases:

  • When you visit the Roomlala site, we ask if you are looking for accommodation or if you wish to offer one on Roomlala;
  • When you are looking for accommodation, we ask in what locality, for what dates, for how many people, and possibly according to what budget limit, in order to adapt our content to your needs;
  • When you offer accommodation for rent: we ask you, among other things, what type of accommodation it is, its location, and all conditions related to the accommodation, in order to be able to meet your need.

5. Who are the recipients of the information we collect and why do we transmit this information to them?

5.1. In the context of the use of our services, some of your information is transmitted to other members of our community, through your public profile or in the context of the booking process (for example, we communicate your email address to the people you will host or with whom you will reside).
5.2. We also work closely with third-party companies that may have access to your Personal Data, and in particular with:
social media platforms that may offer you features allowing you to integrate into your Roomlala profile information from your account on their own platform;
our commercial partners who promote their services on our Platform and to which you may decide to subscribe. These services may notably consist of insurance services, banking services, etc. For example, we may provide some of your information to ADAR-RL to confirm your eligibility for the insurance program;
our commercial partners on whose website we may possibly advertise our services;
subcontractors we use regarding technical services, payment services, identity verification, or even providers of analytical solutions (Google Analytics) and collection agencies and credit institutions.
5.3. We only share your data with the third parties mentioned in 5.2. above in the following cases:
5.3.1. When we use a service provider in the context of the performance of any contract concluded between you and us or in order to provide or improve our services (for example, in the context of payments made via our Platform);
5.3.2. In the context of the booking process, we are led, in order to provide the requested services, to display on our Platform or to transmit to another member some of your Personal Data such as your first name, photograph, mobile phone number, or email address;
5.3.3. We publish the reviews you write in the context of our evaluation system on our Platform. These reviews, which contain your first name and possibly the first letter of your last name as well as your photograph, are visible to all visitors to our Platform;
5.3.4. When we use search engine and analytical solution providers to improve and optimize our Platform;
5.3.5. when you expressly request it (for example when you use authentication methods provided by social networks);
5.3.6. When we display, on the websites of our commercial partners, certain parts of our Platform (including the trips you have posted) via APIs or widgets. In this case, some information from your public profile may also be displayed on these sites;
5.3.7. When we have a legal obligation to do so or if we believe in good faith that it is necessary to (i) respond to any claim against Roomlala, (ii) comply with any judicial request, (iii) enforce any contract concluded with our members, such as the General Terms and Conditions of Use and this Privacy Policy, (iv) in case of emergency involving public health or the physical integrity of a person, (v) in the context of investigations, or (vi) in order to guarantee the rights, property, and safety of Roomlala, its members, and more generally any third party;
5.3.8. In the event that we sell or acquire a business or assets, in which case we reserve the possibility of sharing your Personal Data with the potential seller or buyer of this business or these assets.
5.3.9. If Roomlala or all or part of its assets are acquired by a third party, the data in our possession will, if applicable, be transferred to the new owner.
5.3.10. In accordance with applicable legislation and with your consent when required, we may aggregate data concerning you that we receive or send to our commercial partners, including all or part of your Personal Data and information collected through cookies. This aggregated information will only be used for the purposes described above.
5.3.11. We draw your attention to the fact that if you decide to let us access some of your information, including your Personal Data, through connection services provided by our commercial partners, their privacy policies are also enforceable against you. We have no control over the collection or processing of your data implemented by our commercial partners on their own platform.

6. How do we use and moderate your messages?

6.1. We may review the messages you exchange with other members of our community via our Platform, particularly for the purposes of fraud prevention, improvement of our services, user assistance, and verification of compliance by our members with the contracts concluded with us, including our General Terms and Conditions of Use. For example, in order to prevent a member from bypassing our online booking system, we authorize ourselves to browse and analyze the messages exchanged on our Platform to ensure that they do not contain any contact details or references to other websites.
6.2. We never review your communications with other members of our community for promotional or targeted advertising purposes. When possible, we use automated systems to carry out the moderation of messages transmitted between members via our Platform.

7. Targeted advertising, emails, and SMS we send you

In accordance with applicable legislation and with your consent when required, we may use the data you provide to us on our Platform for commercial prospecting purposes (for example, to (i) send you our newsletters, (ii) send you invitations to our events or any other communication that may interest you, and (iii) display targeted advertising on social media platforms or third-party sites).
Regarding promotional emails: You can at any time withdraw your consent by (i) unchecking the corresponding box in your account, (ii) clicking on the unsubscribe link provided in each of our communications, or (iii) by contacting us according to the methods described below.
Regarding targeted advertising: On social media platforms (e.g., Facebook, Twitter): you can object to this processing at any time by configuring the advertising settings of your account;
On third-party sites: you can refer to our Cookie policy to understand how to withdraw your consent.

8. Is your data transferred, how and where?

We keep your Personal Data in the European Union. However, it is possible that the data we collect when you use our Platform or in the context of our services may be transferred to other countries, some of which may have less protective legislation on personal data protection than that in force in the country where you reside.
This is particularly the case regarding data transmitted to our subcontractors located outside the European Union, notably in Madagascar or the United States. We may use their services to respond to your requests, moderate photos published on our Platform, provide online payment tools, provide us with commercial and advertising services, or email and SMS services.
This is also the case regarding Roomlala affiliates located outside the European Union to whom we may transfer some of your data in the context of providing our services in these countries.
In the event of such a transfer, we ensure that the processing is carried out in accordance with this policy and that it is governed by the European Commission's standard contractual clauses which allow for a sufficient level of protection of privacy and fundamental rights of individuals.
Upon simple request, we can provide you with the list of countries where we keep your data and those where they occasionally transit.

We undertake not to disclose to third parties the information and Personal Data that you provide to us. This information and Personal Data are used exclusively by our internal departments and will under no circumstances be transferred or sold to third parties without your prior express consent.

9. What are your rights regarding your personal data?

9.1. For immediate access to a lot of information about you, you can consult your personal Roomlala space by clicking on "Login" at the top of the Roomlala.com homepage, then by accessing, among other things, your profile, your listings, and your exchanged messages. If you need help, do not hesitate to consult our help center. Be aware that any change to information in your profile, such as your name, first name, email, address, phone number, or proof of residence and proof of identity, cancels and replaces the previous data. Only the new data entered is then saved in our system.
When provided by applicable law, you have the right to obtain a copy of the personal data concerning you that we hold.
Before responding to your request, we may (i) verify your identity and (ii) ask you to provide us with more information to respond to your request.
9.2. We will endeavor to follow up on your request within a reasonable time and, in any case, within the time limits set by law. If you wish to exercise this right, contact us according to the methods indicated in article 15 below.
As a member of our Platform, you also have the possibility to access the Personal Data that we hold through your account to correct, modify, or delete any incorrect information. You agree to provide us with complete, accurate, valid, and up-to-date information. You can also close your account online at any time.
You can also modify or delete this information by contacting us directly (see article 15 below).
Please note that we may retain some information about you when the law requires us to do so or when we have a legitimate reason to do so. This is the case, for example, if we believe that you have committed fraud or violated our General Terms and Conditions of Use and we wish to prevent you from bypassing the rules applicable to our community.
9.3. You also have the right to define directives regarding the fate of your Personal Data after your death.

Roomlala refuses to collect data from minors. In case of a Member lying about their date of birth and more particularly in case of a fraudulent statement regarding their majority, the parents of the minor child are invited to notify Roomlala by sending an email to the address mentioned at the beginning of this document. Roomlala undertakes to delete all personal data concerning the minor child as soon as possible.

10. Cookies and similar technologies

To learn more, consult our cookie policy.

11. Confidentiality of your password

You are responsible for the confidentiality of the password you have chosen to access your account on our Platform.

If you use a public computer (library, cybercafe, outside your home...), you agree to log out when you have finished using Roomlala.com.
You agree not to communicate your password to those around you. Anyone who knows your password can access your Roomlala account. Avoid keeping your passwords in writing. When you create a password, use a minimum of 6 characters, ideally including a combination of numbers and letters. Do not use common words, your date of birth, your name or that of your partner, your email address, or any other personal information that can be easily obtained. Avoid using the same password if you have multiple accounts on different sites.

12. Our guarantees in terms of security and confidentiality

We implement all necessary security measures to protect your Personal Data against any unauthorized access, disclosure, modification, damage, or destruction of the data we hold.

12.1. A secure architecture

Based on a sustainable and secure architecture developed around Symfony technologies, all technical means have been implemented to guarantee our clients the confidentiality and security of access to and processing of their data:

  • Control and filtering of access to data: firewall, HTTPS encryption of information flows, authentication by username and encrypted password, management of profiles and access rights; each user only has access to the data that concerns them and that is authorized according to their profile;
  • Security of transactions: All our transactions are safe and guaranteed thanks to the use of the SSL (Secure Socket Layers) security standard, the most widespread and reliable currently on the Internet. All data concerning our clients (bank card number, name, first name, postal address, email address, phone number...) is encrypted before transmission and processing in order to ensure its confidentiality.
  • The 3D-secure protocol on booking payments: international secure payment protocol on the Internet created by Visa (Verified By Visa) and Mastercard (Mastercard Secure Code) which is used to strengthen the security of online payments. It relies on the implementation of an additional check during a booking payment made on the Roomlala platform. In addition to the usual bank details, the tenant is prompted to enter a piece of personal data allowing their bank to identify them and validate the operation. At the time of payment, users are redirected to a bank payment platform, Roomlala.com therefore has no access to bank card numbers at any time.
  • Secure hosting of servers at a specialized provider, with control of physical access to server rooms and guarantee of availability in terms of bandwidth 24/7; redundant power supplies, air conditioning, fire safety, anti-intrusion security;
  • Daily backups of the platform's data.

At the legal level, a confidentiality clause is systematically integrated into all our contracts.

12.2. CNIL declaration

In accordance with the Law, Roomlala has declared the processing of members' personal data to the CNIL, under number 1519261. You have a right of access, modification, rectification, and deletion of data concerning you (article 34 of the Data Protection Act of January 6, 1978). To exercise this right, please send us a letter to the postal address indicated at the beginning of this document.

13. Links to other websites and social networks

Our Platform may occasionally contain links to the websites of our partners or third-party companies. Please note that these websites have their own privacy policies and that we decline any responsibility for the use made by these sites of the information collected when you click on these links. We invite you to read the privacy policies of these sites before transmitting your Personal Data to them.

14. Modification of our privacy policy

We may occasionally modify this privacy policy. When necessary, we will inform you and/or ask for your consent. We advise you to consult this page regularly to be aware of any modifications or updates made to our privacy policy.

15. Contact

For any question related to this privacy policy or for any request related to your personal data, you can contact our Data Protection Officer by email at dpo@roomlala.com or by sending us a letter to the address mentioned at the beginning of this document, addressed to the attention of the Roomlala DPO.