Privacy Policy
Last updated: 26/06/2026
This Privacy Policy is intended to inform users of the KazaKlub site and platform about the conditions under which their personal data is collected, used, retained, protected, and, where applicable, transmitted.
KazaKlub attaches particular importance to respecting privacy, protecting personal data, and being transparent about the processing carried out in connection with the use of the platform.
This Privacy Policy supplements the Legal Notice, the Terms of Use, the Cookie Policy, and, where applicable, the Terms of Sale or Subscription Terms applicable to paid offers.
1. Data controller
The controller responsible for processing personal data collected in connection with the site and the platform is:
KazaKlub SAS
Simplified joint-stock company with share capital of €1,000.00
Registered office: 1 Rue René Cassin, 14280 Saint-Contest, France
SIREN: 933 186 678 — Head office SIRET: 933 186 678 00019
RCS: 933 186 678 R.C.S. Caen
Intra-community VAT number: FR75933186678
APE / NAF code: 63.12Z — Web portals
Contact: contact@kazaklub.com
Unless stated otherwise at a later date, KazaKlub has not appointed a data protection officer. The contact above is the main point of contact for requests relating to personal data.
2. Definitions
- Personal data: any information relating to an identified or identifiable natural person.
- Processing: any operation performed on personal data (collection, recording, organization, storage, use, consultation, transmission, modification, erasure, or deletion).
- User: any person accessing the site or using the platform, whether a simple visitor, registered member, Klub creator, Kaza holder, guest, or user of a Kaza.
- Member: any user with an account on the platform.
- Klub: private circle, closed group, or restricted community created or joined by members to organize the sharing, lending, or access to Kazas.
- Kaza: home, house, apartment, second home, family home, space, or any other real estate presented on the platform.
- Partner: any provider, third-party service, economic, commercial, or institutional actor that may be presented, integrated, or recommended within the KazaKlub ecosystem.
3. General principles
KazaKlub is committed to processing personal data fairly, lawfully, transparently, and proportionately. In particular, KazaKlub ensures that it: collects only the data necessary for the purposes pursued; informs users clearly; limits access to data to authorized persons or providers; retains data for a proportionate period; implements reasonable security measures; enables users to exercise their rights; does not sell users' personal data to third parties.
KazaKlub provides a digital infrastructure for organization, community matchmaking, and access management between users. In this context, certain data is necessary to enable account creation, Klub management, presentation of Kazas, invitations, exchanges between members, and organization of lending arrangements.
4. Personal data collected
4.1 Identification data: last name; first name; email address; phone number when provided; profile photograph where applicable; login credentials; account information; status or role on the platform.
4.2 User profile data: personal description; city or geographic area; usage preferences; interests; membership in certain Klubs; information relating to invitations sent or received; history of participation in Klubs. Users are invited to provide only strictly necessary information and to avoid publishing sensitive or excessive data.
4.3 Klub-related data: Klub name; description; list of members; role of members; invitations sent; access requests; internal rules; messages or information shared; documents or content useful for organization; Klub activity history.
4.4 Kaza-related data: name or title; description of the home or space; photographs; approximate address or location; amenities; access rules; availability; specific conditions of use; documents or practical information; visibility preferences; Klubs authorized to view the Kaza. Users remain responsible for the information published and must avoid communicating third parties' personal data without authorization.
4.5 Communication data: messages between members; messages sent to KazaKlub; support requests; reports; complaints; exchanges related to a Klub or Kaza; notifications sent or received. KazaKlub does not systematically monitor communications, but may access certain information when necessary for the operation of the service, handling a report, preventing fraud, complying with a legal obligation, or protecting its rights.
4.6 Subscription, payment, and billing data: subscribed offer; subscription status; subscription date; payment history; amount paid; invoices; information necessary for commercial and accounting management; cancellation requests; data related to renewal or expiration. Complete banking data is not stored directly by KazaKlub; it may be processed by a secure payment provider.
4.7 Technical and browsing data: IP address; session identifier; connection logs; device type; browser; operating system; pages viewed; date and time of connection; actions taken; technical errors; security data; information relating to cookies and trackers.
4.8 Data from third parties: KazaKlub may receive certain data from third-party services (external login, payment service, analytics tool, invitation module, or sharing feature). Only the data necessary for the operation of the service concerned is processed, in accordance with the settings chosen by the user.
5. Third-party data and invitations
The platform may allow a user to invite other people to join a Klub or discover KazaKlub. The user may then provide the email address, name, or certain contact details of a third party.
The user who communicates a third party's data guarantees that they have the necessary authorization and agrees not to send abusive, unsolicited, fraudulent invitations or invitations contrary to the interests of the person concerned. KazaKlub uses this data only to enable the invitation to be sent, manage the access request, ensure the security of the platform, and, where applicable, provide proof of the invitation. Invited persons may contact KazaKlub to request the erasure of their data or object to any further invitation.
6. Purposes and legal bases of processing
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Account creation and management | Identification, profile, credentials | Performance of the contract / Terms of Use |
| Access to the site and platform | Account, technical data | Performance of the contract / legitimate interest |
| Creation and management of Klubs | Profile, members, invitations, content | Performance of the contract / legitimate interest |
| Presentation and management of Kazas | Kaza data, content, availability | Performance of the contract / legitimate interest |
| Management of invitations | Contact details of guests, history | Legitimate interest / performance of the contract |
| Communication between members | Messages, exchanges, notifications | Performance of the contract |
| User support and assistance | Messages, requests, account data | Performance of the contract / legitimate interest |
| Reporting, moderation, and security | Content, logs, messages, reports | Legitimate interest / legal obligation |
| Fraud and abuse prevention | Logs, IP, activity, reports | Legitimate interest |
| Subscription and payment management | Billing, subscription, payment | Performance of the contract / legal obligation |
| Accounting and administrative obligations | Invoices, commercial history | Legal obligation |
| Service improvement and internal statistics | Usage, browsing, activity | Legitimate interest / consent depending on the case |
| Sending information relating to the service | Email, notifications, account data | Performance of the contract / legitimate interest |
| Commercial prospecting or newsletter | Email, preferences, consent | Consent / legitimate interest depending on the case |
| Management of partners and third-party services | Contact, interaction with partners | Legitimate interest / consent if necessary |
| Non-necessary cookies | Browsing, tracker identifiers | Consent |
| Compliance with legal obligations | Data necessary according to the obligation | Legal obligation |
| Defense of KazaKlub's rights | Data relevant to the dispute | Legitimate interest |
Where processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of processing carried out before this withdrawal.
7. Details of the main uses of data
7.1 Account management — Account data allows users to sign up, log in, access features, manage their profile, participate in Klubs, and use the platform.
7.2 Management of Klubs and Kazas — This data enables the creation of private circles, consultation of authorized information, access management, organization of availability, and coordination between members.
7.3 Communication and notifications — KazaKlub may use the user's contact details to send confirmation emails, account-related notifications, invitations, security alerts, information relating to Klubs, messages relating to Kazas, reminders, or communications necessary for operation.
7.4 Security and abuse prevention — Certain technical and activity data may be processed to prevent unauthorized access, detect suspicious behavior, limit fraudulent use, protect members, ensure the security of the service, handle reports, and enforce the Terms of Use.
7.5 Service improvement — KazaKlub may analyze certain usage data to understand which features are used, fix errors, improve onboarding, optimize user journeys, and develop new features.
7.6 Subscriptions and paid offers — Data relating to paid offers enables the management of subscription, payment, renewal, cancellation, billing, support, and compliance with accounting obligations.
7.7 Partners and visibility — Personal data is not sold to partners. When a user voluntarily interacts with a partner, clicks on an offer, requests to be put in contact, or uses a third-party service, certain data may be processed to enable this interaction, subject to appropriate information and, where necessary, consent.
8. Visibility of data on the platform
KazaKlub relies on private circles and trusted communities. Certain data may be visible to other members depending on the platform's settings, the Klubs joined, accepted invitations, and defined access levels: last or first name; profile photograph; profile information; membership in a Klub; content shared in a Klub; information relating to a Kaza; availability of a Kaza; messages or documents shared; internal rules of a Klub.
Users are invited to exercise caution. KazaKlub cannot guarantee that a member authorized to view content will not take a screenshot, copy, distribute without authorization, or reuse it outside the platform; any misuse may be reported.
9. Sensitive data
KazaKlub does not intend to collect so-called sensitive data (health, political opinions, religious beliefs, trade union membership, sexual orientation, biometric or genetic data). Users agree not to publish such data, except for strictly personal necessity and under their sole responsibility. KazaKlub reserves the right to delete or hide any content containing manifestly excessive, sensitive, or inappropriate data.
10. Recipients of data
Personal data may be accessible, within the limits of their respective duties, to the following categories of recipients: KazaKlub's directors and authorized personnel; technical service providers; host; maintenance providers; payment providers; email or notification sending providers; audience analysis tools; user support tools; security providers; legal, accounting, or financial advisors; partners (only when necessary, authorized, or requested by the user); administrative or judicial authorities when required by law.
KazaKlub ensures that providers who process data on its behalf offer reasonable guarantees of security and confidentiality.
11. Subcontractors and third-party services
KazaKlub may use subcontractors and third-party services to ensure the operation of the platform: hosting; technical infrastructure; storage; maintenance; emailing; payment; analytics; audience measurement; customer support; security; cookie management; authentication services; communication tools.
These providers access data only to the extent necessary to perform their duties. When certain third-party services act on their own behalf (payment providers, external login tools, or partner platforms), their own privacy policies may also apply.
12. Transfers outside the European Union
Where possible, KazaKlub favors providers located within the European Union or offering appropriate guarantees. However, some technical services or providers may involve a transfer of data outside the European Union.
In this case, KazaKlub ensures that the transfer is governed by appropriate safeguards in accordance with applicable regulations (adequacy decision, standard contractual clauses, supplementary measures, or any other mechanism recognized by the GDPR). Further information: contact@kazaklub.com.
13. Retention periods
KazaKlub retains personal data for a limited period, proportionate to the purposes. The following periods are indicative and may be adapted according to applicable obligations.
| Data category | Indicative retention period |
|---|---|
| Active account data | For the lifetime of the account |
| Account data after deletion | Up to 3 years after deletion, unless required by law or a dispute |
| Profile data | For the duration of account use |
| Klub-related data | For the duration of the Klub's or account's activity, then limited archiving if necessary |
| Kaza-related data | For the duration of the Kaza's publication, then limited archiving if necessary |
| Messages and exchanges | For the duration of account or Klub use, then limited archiving as needed |
| Invitations sent | Up to 12 months, unless erasure is requested or proof is necessary |
| Support data | Up to 3 years after the request is closed |
| Billing data | 10 years from the end of the accounting period |
| Payment data | Duration necessary for payment, then limited retention according to obligations |
| Connection and security logs | Up to 12 months, unless an incident, fraud, or legal obligation applies |
| Prospecting data | Up to 3 years after the last active contact or until consent is withdrawn |
| Cookies and trackers | Depending on their nature, generally 6 to 13 months |
| Data necessary for a dispute | For the duration of the dispute and applicable limitation periods |
Certain data may be kept longer when necessary to comply with a legal obligation, establish proof of a right, prevent fraud, ensure the security of the service, or defend KazaKlub's interests.
14. Account deletion
Users may request the deletion of their account at contact@kazaklub.com. Deletion results in the deletion or anonymization of associated data, except where retention is necessary to: comply with a legal obligation; ensure the security of the platform; prevent fraud; handle a dispute; establish proof of a right; comply with accounting or tax obligations; retain certain information necessary for the integrity of shared Klubs, messages, or content.
Deleting an account may result in the loss of access to Klubs, Kazas, messages, documents, paid offers, and associated features.
15. Data security
KazaKlub implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction: access control; passwords; authentication; permission management; logging; backups; hosting security; encryption where relevant; limiting access to authorized persons; awareness training for people with access to data; monitoring of technical incidents; internal security procedures.
Users acknowledge that no computer system can guarantee absolute security. They are responsible for the confidentiality of their credentials and must inform KazaKlub without delay in the event of suspected unauthorized access, loss of password, hacking, or fraudulent use of their account.
16. Personal data breach
In the event of a personal data breach likely to result in a risk to the rights and freedoms of the persons concerned, KazaKlub will take appropriate measures in accordance with regulations. When necessary, KazaKlub will notify the breach to the competent authority and, if the risk warrants it, inform the persons concerned.
17. Users' rights
In accordance with applicable regulations, users have the following rights: right of access; right to rectification; right to erasure; right to object; right to restriction of processing; right to portability where this right applies; right to withdraw consent at any time; right to define directives regarding the fate of their data after their death; right to lodge a complaint with the competent authority.
The exercise of these rights may be subject to certain conditions or limits, in particular where data retention is necessary to comply with a legal obligation, perform a contract, defend rights in court, or prevent fraud.
18. How to exercise these rights
Users may exercise their rights at contact@kazaklub.com. The request must specify the right being exercised, the identity of the requester, and the information necessary to process it. KazaKlub may request proof of identity in the event of reasonable doubt and will endeavor to respond within one month of receiving the complete request, extendable under the conditions provided for by regulations.
19. Complaint to the CNIL
If users believe that their rights are not being respected, they may lodge a complaint with the CNIL (the French data protection authority).
CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — France — www.cnil.fr. KazaKlub nevertheless invites users to contact it beforehand.
20. Prospecting, newsletters, and commercial communications
KazaKlub may offer users the opportunity to receive information relating to the platform, its news, features, Klubs, Kazas, offers, or partners. Where required by regulations, these communications are only sent with the user's prior consent.
Users may unsubscribe at any time via the unsubscribe link in emails, via their account settings where this feature is available, or by contacting contact@kazaklub.com. Strictly necessary communications (operation, security, service, transaction, invitation, legal obligation) may continue to be sent.
21. Cookies and trackers
The site and platform may use cookies, trackers, or similar technologies. Some cookies are strictly necessary (login, session security, remembering technical choices, fraud prevention, load balancing) and may be used without prior consent.
Other cookies (non-exempt audience measurement, advertising, personalization, retargeting, third-party services, social networks, campaign measurement) are only placed after consent when required by regulations. Users may accept, refuse, or configure these cookies via the banner or management module. For more information, see the Cookie Policy.
22. Audience measurement and statistics
KazaKlub may use audience measurement tools to understand site usage, measure traffic, identify pages viewed, improve user journeys, and optimize services. Depending on the tool and its configuration, this processing may be based on legitimate interest or consent. Where a tool involves non-strictly-necessary tracking or cross-referencing of data for marketing purposes, prior consent is obtained where required by regulations.
23. Advertising, retargeting, and marketing partners
KazaKlub may, in the future, use certain advertising tools, pixels, tags, or campaign measurement solutions to promote the platform, measure the effectiveness of its marketing actions, or offer tailored content. These tools may involve placing cookies or trackers subject to prior consent.
Highlighting partners does not mean that personal data is automatically transmitted to partners. Any transmission for commercial purposes or direct matchmaking may only occur if it is based on an appropriate legal basis and, where necessary, on the user's consent.
24. Minors
The platform is intended for adults. KazaKlub does not knowingly collect data concerning minors. If KazaKlub learns that an account has been created by a minor or that data relating to a minor has been collected without valid authorization, KazaKlub may delete the account or the data concerned. Users agree not to publish personal data concerning minors without having the necessary rights, authorizations, or responsibilities.
25. Automated decision-making and profiling
KazaKlub does not intend to make decisions producing legal effects on users based solely on automated processing. However, KazaKlub may use certain automated processing for security, fraud prevention, functional recommendation, ranking, personalization, or service improvement purposes. Where such processing is implemented, it must not produce a significant legal effect without human intervention, except where specific information is provided and applicable rules are complied with.
26. Social networks and external links
KazaKlub may be present on social networks or include links to third-party platforms. Use of these networks is subject to the privacy policies specific to each platform. KazaKlub does not control the processing carried out by these platforms when a user interacts directly with them. Users are invited to consult their privacy policies.
27. Updates to the Privacy Policy
KazaKlub may amend this Privacy Policy to take into account changes to the platform, services, features, data processing, regulations, or its internal organization. The applicable version is the one published on the site at the time of consultation. In the event of a substantial change, KazaKlub may inform users by any appropriate means.
28. Contact
For any question relating to this Privacy Policy, personal data, cookies, users' rights, or account management, users may contact KazaKlub at the following address: contact@kazaklub.com