Privacy Charter

Last updated: 26/06/2026

At KazaKlub, we pay particular attention to protecting privacy, keeping personal data confidential, and being transparent about the processing carried out in connection with the use of our site and platform.

This Privacy Charter is intended to clearly explain the data we may collect, the reasons why we use it, the conditions under which it may be shared, the measures implemented to protect it, and the rights users have.

This Charter supplements the Legal Notice, the Terms of Use, the Cookie Policy, and, where applicable, the Terms of Sale or Subscription Terms applicable to paid offers.

Use of the site and platform implies awareness of this Privacy Charter.

1. Identity of the data controller

The controller responsible for processing personal data collected in connection with the site and the platform is:

KazaKlub SAS
Simplified joint-stock company with share capital of €1,000.00
Registered office: 1 Rue René Cassin, 14280 Saint-Contest, France
SIREN: 933 186 678
Head office SIRET: 933 186 678 00019
RCS: 933 186 678 R.C.S. Caen
Intra-community VAT number: FR75933186678
APE / NAF code: 63.12Z — Web portals
Contact: contact@kazaklub.com

Unless a data protection officer is appointed at a later date, any request relating to personal data may be sent to the following address: contact@kazaklub.com.

2. Purpose of the KazaKlub platform

KazaKlub is a digital platform designed to structure the sharing, lending, organization, and access to homes or real estate within private circles and trusted communities called "Klubs".

The platform notably allows users to create an account, join or create Klubs, present homes or spaces called "Kazas", invite members, exchange information, manage certain availability, and facilitate the organization of stays or lending arrangements in a private setting.

In this context, certain personal data is necessary for the platform to function, for account management, service security, exchanges between members, organization of Klubs, and presentation of Kazas.

KazaKlub acts as a provider of a digital solution for organization and community matchmaking. Each user remains responsible for the information they provide, share, or make accessible to other members.

3. Principles applied by KazaKlub

KazaKlub strives to process personal data fairly, lawfully, transparently, and proportionately. To that end, KazaKlub ensures that it:

• collects only the data necessary for the service to function;
• limits processing to the stated purposes;
• does not request data that is manifestly excessive with regard to the use of the platform;
• informs users about the use of their data;
• implements reasonable security measures;
• limits access to data to authorized persons and providers;
• retains data for a proportionate period;
• enables users to exercise their rights;
• does not sell users' personal data to third parties.

KazaKlub nevertheless points out that no computer system, online service, or electronic transmission method can guarantee absolute security. Data protection also relies on users' vigilance, the confidentiality of their credentials, and caution regarding the information they choose to share.

4. Personal data that may be collected

Depending on how the site and platform are used, KazaKlub may collect various categories of data.

4.1 Identification data: last name; first name; email address; phone number, when provided; profile photograph, where applicable; login credentials; account information; role or status on the platform (member, Klub creator, Kaza holder, guest, administrator, or other functional role).

4.2 Profile data: personal description; city or geographic area; usage preferences; interests; membership in certain Klubs; history of invitations or participation in Klubs; information voluntarily provided by the user. Users are invited to only communicate the information they agree to share.

4.3 Klub-related data: Klub name; description; list of members; roles of members; invitations sent or received; internal rules; access requests; content shared in the Klub; activity history related to the Klub.

4.4 Kaza-related data: name or title of the Kaza; description of the property or space; photographs; location or address depending on the settings chosen; amenities; access rules; availability; restrictions or specific conditions; practical information; documents that may be shared; Klubs or members authorized to view the Kaza. Users remain solely responsible for the information published and must avoid communicating third parties' personal data without valid authorization.

4.5 Communication data: messages sent or received; requests sent to support; reports; complaints; notifications; exchanges related to a Klub, a Kaza, or an invitation; information voluntarily transmitted. KazaKlub does not intend to systematically monitor communications between users, but certain data may be processed when necessary for the service to function, to handle a report, for security, to prevent abuse, to comply with a legal obligation, or to defend its rights.

4.6 Subscription, payment, and billing data: subscribed offer; subscription status; subscription date; renewal or cancellation date; amount paid; payment history; invoices; information necessary for commercial, accounting, and tax management. Complete banking data is not intended to be stored directly by KazaKlub; it may be processed by a secure payment provider.

4.7 Technical and browsing data: IP address; session identifier; connection logs; device type; browser used; operating system; pages viewed; date and time of connection; actions taken; technical errors; security data; information relating to cookies and trackers. This data notably enables the site to function, secures access, prevents abuse, improves user journeys, enables usage analysis, and supports maintenance.

5. Data provided by users concerning third parties

The platform may allow a user to invite other people to join KazaKlub or a Klub. In this context, the user may provide the email address, name, or certain contact details of a third party.

The user who communicates a third party's data guarantees that they have the necessary authorization to do so. They agree not to use the platform to send abusive, fraudulent, repeated, unsolicited invitations or invitations contrary to the interests of the person concerned.

KazaKlub uses this data only to enable the invitation to be sent, manage the access request, ensure the security of the platform, and, where applicable, provide proof of the invitation.

Any invited person may contact KazaKlub to request the erasure of their data or object to any further invitation.

6. Purposes for using data

KazaKlub may use personal data for the following purposes: creation and management of the user account; access to the site and platform; profile management; creation, administration, and operation of Klubs; presentation, consultation, and management of Kazas; management of invitations; communication between members; notifications relating to the operation of the service; user support; handling of requests, reports, and complaints; platform security; prevention of fraud, abuse, and unauthorized use; moderation of content or behavior when necessary; management of paid offers, subscriptions, payments, and billing; compliance with legal, accounting, tax, or regulatory obligations; improvement of the service, onboarding, and user experience; audience measurement and statistical analysis; communication relating to KazaKlub's news, features, or offers; prospecting or newsletter when the legal conditions are met; management of partners, third-party services, or matchmaking requested by the user; defense of KazaKlub's rights and interests.

KazaKlub only processes personal data when a legal basis allows it, in particular performance of the Terms of Use or a contract, KazaKlub's legitimate interest, the user's consent, compliance with a legal obligation, or the defense of rights.

7. Legal bases for processing

Where processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of processing carried out before this withdrawal.

8. Visibility of data within the platform

KazaKlub relies on private circles and trusted communities. Certain data provided by the user may be visible to other members depending on the platform's settings, the Klubs joined, accepted invitations, and defined access levels.

The following may notably be visible, depending on the case: last or first name; profile photograph; profile information; membership in a Klub; content shared in a Klub; information relating to a Kaza; availability of a Kaza; internal rules of a Klub; messages or documents shared.

Users acknowledge that they are responsible for the information they make accessible to other members. KazaKlub cannot guarantee that a member authorized to view content will not make a copy, take a screenshot, distribute, or reuse it without authorization outside the platform. Any misuse may nevertheless be reported.

9. Sensitive data

KazaKlub does not intend to collect so-called sensitive data within the meaning of the regulations, such as data relating to health, political opinions, religious beliefs, trade union membership, sexual orientation, biometric, or genetic data.

Users agree not to publish sensitive data on the platform, except for strictly personal necessity and under their sole responsibility.

KazaKlub reserves the right to delete, hide, or restrict access to any content containing manifestly excessive, sensitive, inappropriate data, or data contrary to the purpose of the platform.

10. Data sharing

KazaKlub does not sell users' personal data. However, data may be accessible or transmitted to certain recipients when necessary for the platform to function, to comply with an obligation, or to provide a service. Recipients may notably include: authorized persons within KazaKlub; technical service providers; the host; maintenance providers; emailing or notification providers; payment providers; audience measurement tools; security providers; support providers; legal, accounting, financial, or technical advisors; partners (only when necessary, authorized, or requested by the user); administrative or judicial authorities when required by law.

KazaKlub ensures that providers acting on its behalf only access data to the extent necessary to carry out their mission. When certain providers or partners act on their own behalf, their own terms and privacy policies may also apply.

11. Partners and third-party services

KazaKlub may offer or present partners, recommended services, sponsored content, associated offers, or third-party services linked to its ecosystem (insurance, home maintenance, concierge services, owner services, mobility, local tourism, amenities, experiences, or other services useful to members).

Highlighting a partner does not mean that users' personal data is automatically transmitted to that partner.

Any transmission of data to a partner for commercial purposes, direct matchmaking, or use of a third-party service may only occur if it is based on an appropriate legal basis and, where necessary, on the user's consent.

Users remain free to contract or not with a third-party partner. The relationship between the user and a partner is governed by that partner's own terms.

12. Data retention

KazaKlub retains personal data for a limited period, proportionate to the purposes for which it was collected. The periods below are indicative and may be adapted according to applicable legal, contractual, operational, or litigation-related obligations.

Certain data may be kept longer when necessary to comply with a legal obligation, establish proof of a right, prevent fraud, ensure the security of the service, or defend KazaKlub's interests.

13. Account deletion

Users may request the deletion of their account by contacting KazaKlub at the following address: contact@kazaklub.com.

Deleting the account may result in the deletion or anonymization of associated data, subject to data whose retention remains necessary to: comply with a legal obligation; ensure the security of the platform; prevent fraud; handle a dispute; establish proof of a right; comply with accounting or tax obligations; retain certain information necessary for the integrity of Klubs, messages, or content already shared.

Deleting an account may result in the loss of access to Klubs, Kazas, messages, documents, paid offers, and associated features.

14. Data security

KazaKlub implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction. These measures may notably include: access control; permission management; authentication; passwords; hosting security; backups; logging; monitoring of technical incidents; limiting access to authorized persons; internal security procedures; protective measures adapted to the sensitivity of the data processed.

KazaKlub does not guarantee absolute security and cannot be held liable for incidents resulting from careless user behavior, sharing of credentials, an insufficiently secure password, unauthorized access caused by a third party, or an event reasonably beyond its control.

Users are responsible for the confidentiality of their credentials and must inform KazaKlub without delay in the event of suspected unauthorized access, loss of password, hacking, or fraudulent use of their account.

15. Cookies and trackers

The site and platform may use cookies, trackers, or similar technologies. Some cookies are strictly necessary for the site to function, for logging into the account, for session security, or to provide a requested service, and may be used without prior consent.

Other cookies may be used to measure audience, improve user experience, analyze user journeys, measure the effectiveness of campaigns, offer tailored content, or display certain third-party services. Where required by regulations, these cookies are only placed after the user's consent.

Users may manage their preferences via the banner or cookie management module where available, or via their browser settings. For more information, they are invited to consult KazaKlub's Cookie Policy.

16. Communications and newsletters

KazaKlub may send users communications related to the operation of the platform: account creation emails; registration confirmations; invitations; notifications relating to Klubs; security alerts; information relating to a Kaza; support messages; communications necessary for the performance of the service.

KazaKlub may also offer to send commercial communications, newsletters, or information relating to its news, offers, features, or partners. Where required by regulations, these commercial communications are sent with the user's prior consent.

Users may unsubscribe from commercial communications at any time via the unsubscribe link in emails, via their account settings where this feature is available, or by contacting KazaKlub at: contact@kazaklub.com. Communications strictly necessary for account operation, security, invitations, subscriptions, or legal obligations may continue to be sent.

17. Transfers outside the European Union

Where possible, KazaKlub favors providers located within the European Union or offering appropriate guarantees. However, some technical tools, third-party services, or providers may involve a transfer of data outside the European Union.

In this case, KazaKlub strives to ensure that these transfers are governed in accordance with applicable regulations, in particular through an adequacy decision, standard contractual clauses, supplementary measures, or any other recognized mechanism. Users may obtain further information by contacting contact@kazaklub.com.

18. Users' rights

In accordance with applicable regulations, users may have the following rights: right of access to their data; right to rectification; right to erasure; right to object; right to restriction of processing; right to data portability where this right applies; right to withdraw their consent at any time for processing based on consent; right to define directives regarding the fate of their data after their death; right to lodge a complaint with the competent authority.

The exercise of these rights may be subject to certain conditions or limits provided for by regulations, in particular where data retention is necessary to comply with a legal obligation, perform a contract, ensure security, defend rights in court, or prevent fraud.

19. How to exercise these rights

Users may exercise their rights by contacting KazaKlub at the following address: contact@kazaklub.com. The request must specify the right being exercised and the information necessary to process it.

KazaKlub may request proof of identity when necessary to verify the identity of the person making the request, in particular in the event of reasonable doubt. KazaKlub will endeavor to respond within one month of receiving the complete request, a period that may be extended under the conditions provided for by regulations.

20. Complaint to the CNIL

If users believe that their rights are not being respected or that the processing of their personal data does not comply with regulations, they may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).

CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — France
Website: www.cnil.fr

KazaKlub nevertheless invites users to contact it beforehand in order to try to resolve any difficulty relating to their personal data.

21. Minors' data

The KazaKlub platform is intended for adults. KazaKlub does not knowingly collect personal data concerning minors when a user account is created.

If KazaKlub learns that an account has been created by a minor or that data relating to a minor has been collected without valid authorization, KazaKlub may delete the account or the data concerned. Users agree not to publish personal data concerning minors without having the necessary rights, authorizations, or responsibilities.

22. Limits related to voluntarily shared information

Users acknowledge that information they voluntarily publish on the platform may be visible to other members depending on access settings and the Klubs concerned.

KazaKlub cannot be held liable for the disclosure of information resulting from: a sharing choice made by the user; a user configuration error; a screenshot taken by another member; an unauthorized transfer by another user; a voluntary communication of information to a third party; abusive or unlawful behavior by a user.

Users are invited to never publish information they do not wish to make accessible to authorized members of their Klubs.

23. Updates to the Privacy Charter

KazaKlub may amend this Privacy Charter to take into account changes to the platform, services, features, data processing, regulations, or its internal organization.

The applicable version is the one published on the site at the time of consultation. In the event of a substantial change, KazaKlub may inform users by any appropriate means. Users are invited to regularly consult this Privacy Charter.

24. Contact

For any question relating to this Privacy Charter, personal data, cookies, users' rights, or the operation of the platform, users may contact KazaKlub at the following address: contact@kazaklub.com