Privacy Policy – GDPR




The confidentiality of personal data is important to GESTETUD. This document therefore presents its policy on the protection of the privacy of Users of its services.

The User is understood as any person visiting the website.

This document describes the terms and conditions for the collection and use of personal data that the User may request in order to benefit from the services of the company GESTETUD.

In general, the User can consult the website without being obliged to identify himself or reveal any personal information.


1. Presentation of the company GESTETUD

GESTETUD is the manager of quality student residences for short or long stays.

The full presentation of the company is available at the following internet address:

The legal notice of the company GESTETUD can be consulted by the User at the following address:


2. Legal basis for the data collected

Personal data may only be collected and processed if they comply with at least one of the following legal bases:

Article 6.1.a of the GDPR: When the User has consented to the processing of his or her personal data. Their consent may be withdrawn at any time after informing the data controller.

Article 6.1.b of the GDPR: When the data collected is for the performance of a contract or pre-contractual measures.

Article 6.1.c of the GDPR: When the data collected must enable GESTETUD to comply with a legal obligation to which it is subject.

Article 6.1.f of the GDPR: When GESTETUD or a third party has a legitimate interest in the collection of the User's personal data, unless their interests or fundamental rights and freedoms are threatened.


3. Data collected

By using the services offered by GESTETUD, the User consents to the processing of his personal data necessary to meet specific purposes.

In particular, the following data may be collected:

· The User's identification data: surname, first name, postal addresses, email addresses, telephone numbers, passwords, age, gender, etc.

· The bank details provided when paying to rent a home from the company GESTETUD.

· Data relating to previous rentals, subscription to a para-hotel service or any other payments made to the company GESTETUD.

· Rental management data.

· Data relating to previous requests for contacts or information from the company GESTETUD.

· Data relating to the User's consents to receive offers from the company GESTETUD.

· Browsing data on the site

The User may choose not to communicate certain Personal Data, but this choice will prevent the use of certain services offered by GESTETUD.

When the User wishes to submit a rental file, GESTETUD ensures that he has again consented to the processing of his data by ticking a box declaring that he accepts the general terms and conditions of use and by validating his choice by clicking on it.


4. Purpose of data processing

The table below summarises the purposes for which GESTETUD processes the User's personal data:


Consult the table


5. Recipient of the processed data

has. In-house

Personal data is destined for each competent department depending on the nature of the processing.


b. Externally

No personal data will be transferred free of charge or for a fee to an external company.

The data collected and held may be shared with:

– The service provider in charge of hosting the website

– The data hosting company mandated by the company GESTETUD.

– Subcontractors, agents, service providers who have been mandated by GESTETUD in the context of the execution of a contract or pre-contractual measure with the User.

– Lawyers, notaries, auditors, auditors, performing services on behalf of the company GESTETUD.

– Financial authorities, judicial authorities or state agencies, public bodies upon request and within the limits of what is permitted by the regulations.


6. Transfer of data abroad

The storage of Users' personal data is carried out exclusively in data centers located in Member States of the European Union.

The User will be informed in advance if GESTETUD is forced to transfer his data, for the purposes of the processing purposes, to service providers located in countries outside the European Union.

GESTETUD will take all necessary measures and guarantees to secure such transfers.


8. Security

GESTETUD undertakes to implement the necessary measures to protect Users' personal data.

The website: is secured by an SSL data encryption system. Exchanges between the site and Users are therefore encrypted.


9. Cookies

The User can find the cookie policy of the company GESTETUD at the following address


10. Data Protection Officer

GESTETUD has appointed a Data Protection Officer (DPO).

The User may address any questions, complaints or disputes relating to the processing of personal data carried out by GESTETUD: By e-mail to the following address:

By phone during opening hours:

By post:



Data Protection Officer

7 rue Jean Gay / 200 avenue Berthelot, 69007 LYON


11. Users' rights

The User has several rights under the regulations relating to the protection of personal data:

· Right of access;

· Right to rectification;

· Right to erasure or right to be forgotten (under conditions specified below);

· Right to obtain the restriction of Processing;

· Right to portability of the Personal Data provided;

· Right to object;

· Right to set guidelines relating to the fate of your data after your death;

· The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him/her. The data subject has the right to obtain human intervention from the controller, to express his or her point of view and to contest the decision.


12. Exercising rights

The exercise of the User's rights must be carried out directly with the Data Protection Officer (DPO) designated by GESTETUD in Article 10. Data Protection Officer.


13. Complaint to the CNIL

In the event of a problem related to the processing of their personal data, the User is advised to contact GESTETUD as a matter of priority.

The User may lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL) concerning the processing of personal data by the company GESTETUD.

Additional information can be found on the website:


14. Modification

GESTETUD may modify this document. The User is therefore advised to consult it regularly.