Privacy policy
Last updated: 07/08/2026
Applicable to www.naturalsurflodge.com and www.naturalsurfschool.com
1. Data Controller
Natural Surf School SARL, a French limited liability company (SARL) with share capital of €7,000, registered office at 8 avenue de la Marquèze, 40510 Seignosse, France, registered with the Dax Trade and Companies Register under number 497 521 872, SIRET 497 521 872 00026, trading as Natural Surf Lodge and Natural Surf School (hereinafter "Natural"), is the data controller for the personal data collected on the websites www.naturalsurflodge.com and www.naturalsurfschool.com.
Contact: info@naturalsurflodge.com — 8 avenue de la Marquèze, 40510 Seignosse, France — +33 (0)6 74 16 02 28
2. What Data We Collect, and Why
Data | When It's Collected | Purpose | Legal Basis |
Identity, contact details | Booking, contact form | Managing bookings and customer relations | Performance of a contract |
Payment information | Online booking | Invoicing, accounting and tax obligations | Legal obligation |
Health information voluntarily disclosed | Registration for a surf course or camp | Safety of surf practice | Explicit consent |
Booking, newsletter sign-up | Sending practical information related to the stay, and marketing offers subject to consent | Performance of a contract / consent | |
Photos and videos | Stays and lessons | Communication (website, social media) — see our Terms and Conditions, article 15 | Separate consent, collected at time of booking |
Browsing data | Website visits | Website operation, audience measurement | Legitimate interest / consent — see our Cookie Policy |
3. Cookies
The use of cookies and trackers on these websites (Google Analytics, Google reCAPTCHA, Google Fonts, consent management, etc.) is detailed in our Cookie Policy (EU), which forms an integral part of this policy.
4. Who Has Access to Your Data
Your data is disclosed only to Natural's authorized staff and to technical service providers acting on our behalf:
- Website hosting: OVH
- Online booking and payment solution: https://bookings.naturalsurflodge.com/fr/
- Tools listed in our Cookie Policy (including Google)
We do not sell or transfer your data to third parties for commercial purposes.
5. Data Retention Period
- Data related to a booking or business relationship: for the duration of the relationship, plus applicable legal limitation periods and accounting retention requirements
- Data used for marketing purposes: 3 years from the last contact
- Health data disclosed for a course: for the duration of the stay only, accessible solely to the relevant supervising staff members
- 6. Your Rights
In accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés), you have the right to access, rectify, erase, restrict, and object to the processing of your data, as well as the right to data portability and the right to define directives regarding the fate of your data after death.
You may exercise these rights by email to info@naturalsurflodge.com or by post to Natural Surf School SARL, 8 avenue de la Marquèze, 40510 Seignosse, France, accompanied by proof of identity where reasonable doubt exists.
You also have the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
7. Data Security
Natural implements appropriate technical and organizational measures to ensure a level of security adapted to the risks associated with the processing of your personal data, including:
- access to data is limited to authorized staff members, based on their respective needs;
- the exchange and storage of sensitive data (payment, health) relies on certified providers compliant with industry standards (encryption protocols, secure hosting);
- access to internal tools and systems is protected by passwords and, where possible, strong authentication;
- regular backups are carried out to limit the risk of data loss;
- our technical service providers (hosting, booking and payment solutions) are selected for their security guarantees and GDPR compliance.
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, Natural undertakes to notify the CNIL and, where applicable, the individuals concerned, in accordance with Articles 33 and 34 of the GDPR.
8. Contact
For any question relating to this privacy policy: info@naturalsurflodge.com or by post to the registered office at 8 avenue de la Marquèze, 40510 Seignosse, France.
