Zavio introduces adults to seasonal establishments across Europe, and arranges the travel. To do that, we process personal data. This page says which data, why, who has access to it and how long we keep it. It is written to be read to the end.
Who is responsible
Erlaë L'hostis, entrepreneur individuel (EI), operating under the French micro-entreprise regime, registration in progress.
For any question or request about your data: hello@zavioseason.com
What we collect
Before opening, on the waiting list. Your email address, the form it came from, and the date. Nothing else. We ask for neither your name nor your phone number.
When you create an account to work a season. Your email address, your name, your username, your photo if you add one, your introduction, your date of birth, your country and city of departure, your languages, your availability, the destinations you would like, your interests and your experience.
When you create an account to recruit. Your establishment's legal name, its type, its city, its country, its website, a contact phone number, your VAT number, a professional email address, and the documents you send us so that we can verify the establishment exists.
When a season is being prepared. The content of the employment contract, which carries the names, dates of birth and cities of both parties, the salary, the hours, the accommodation and the meals. The electronic signatures, which record the name typed, the date and time, the signatory's IP address and a fingerprint of the document. And the journeys booked, with the carrier, the numbers, the times and the tickets.
Along the way. Your exchanges with Zav, your messages with the other party, the reviews you write, the destinations you ask us to watch, your devices if you turn on notifications, and abuse counters that never keep your IP address in the clear, only as a hash.
We collect no passport number and no identity document.
Why, and on what legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Waiting list | To tell you when we open | Your consent |
| Account, listings, applications, messaging | To run the service | Performance of the contract |
| Date of birth | Zavio is for adults only | Legitimate interest |
| Contract and travel | To prepare and hold the season | Performance of the contract |
| Payment and invoice | To take payment and keep accounts | Contract and legal obligation |
| Zav | To answer your questions | Performance of the contract |
| Service emails | To keep you informed | Performance of the contract |
| Notifications on your device | To reach you at the right moment | Your consent |
| Reviews | To protect both sides | Legitimate interest |
| Verifying establishments | So that no fake hotel recruits | Legitimate interest |
| Abuse protection | To keep the service standing | Legitimate interest |
What we do
Waiting list
Why
To tell you when we open
Legal basis
Your consent
What we do
Account, listings, applications, messaging
Why
To run the service
Legal basis
Performance of the contract
What we do
Date of birth
Why
Zavio is for adults only
Legal basis
Legitimate interest
What we do
Contract and travel
Why
To prepare and hold the season
Legal basis
Performance of the contract
What we do
Payment and invoice
Why
To take payment and keep accounts
Legal basis
Contract and legal obligation
What we do
Zav
Why
To answer your questions
Legal basis
Performance of the contract
What we do
Service emails
Why
To keep you informed
Legal basis
Performance of the contract
What we do
Notifications on your device
Why
To reach you at the right moment
Legal basis
Your consent
What we do
Reviews
Why
To protect both sides
Legal basis
Legitimate interest
What we do
Verifying establishments
Why
So that no fake hotel recruits
Legal basis
Legitimate interest
What we do
Abuse protection
Why
To keep the service standing
Legal basis
Legitimate interest
Who sees your data
The other party. When you apply, the establishment receives your profile. Once the hire is confirmed, it also receives your email address, to prepare your arrival. When you publish a listing, candidates see your establishment. That is the point of the service, and nothing goes anywhere else.
Reviews are revealed at the same time, never before both have been written or the deadline has passed.
Our providers, listed below, each for the single task that is theirs.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Hosts the database and the files | Ireland |
| Vercel | Hosts the site and runs its pages | Runs in Paris, US company |
| Resend | Sends the service's emails | Ireland |
| Google Workspace | Receives mail sent to Zavio | |
| Google, Gemini model | Powers Zav | |
| Stripe | Takes payment from establishments | Irish entity |
Provider
Supabase
What it does
Hosts the database and the files
Where
Ireland
Provider
Vercel
What it does
Hosts the site and runs its pages
Where
Runs in Paris, US company
Provider
Resend
What it does
Sends the service's emails
Where
Ireland
Provider
Google Workspace
What it does
Receives mail sent to Zavio
Where
Provider
Google, Gemini model
What it does
Powers Zav
Where
Provider
Stripe
What it does
Takes payment from establishments
Where
Irish entity
Nobody else. We sell no data, we rent none, we trade none. There is no advertising on Zavio, and no audience measurement.
Where your data is
The database, the files and the outgoing emails are hosted in Ireland. The pages and functions of the site run in Paris.
Two processes leave the European Union: your conversations with Zav, handled by Google, and payments, handled by Stripe. These transfers are covered by the European Commission's standard contractual clauses.
One point about Zav, because it matters. Zavio uses the paid tier of the Gemini API. Google does not use your conversations to improve its products and does not have them reviewed by people. It keeps them only for as long as is needed to detect abuse.
How long we keep it
| Data | Kept for |
|---|---|
| Waiting list address | Until opening, then three months |
| Inactive account | Three years after the last sign-in |
| Signed contract | Five years after the end of the season |
| Invoices and payments | Ten years, accounting obligation |
| Conversations with Zav | Twelve months |
| Messages with the other party | As long as the account exists |
| Reviews | As long as the account exists |
| Abuse counters, hashed IP address | Thirty days |
Data
Waiting list address
Kept for
Until opening, then three months
Data
Inactive account
Kept for
Three years after the last sign-in
Data
Signed contract
Kept for
Five years after the end of the season
Data
Invoices and payments
Kept for
Ten years, accounting obligation
Data
Conversations with Zav
Kept for
Twelve months
Data
Messages with the other party
Kept for
As long as the account exists
Data
Reviews
Kept for
As long as the account exists
Data
Abuse counters, hashed IP address
Kept for
Thirty days
Zav is an artificial intelligence
Zav is an automated assistant. You are not talking to a person.
It answers your questions, searches listings, prepares documents and tells you what has moved. It decides nothing. It does not rank candidates, it rules nobody out, and no decision concerning you is taken automatically. Every decision that affects you is taken by a person.
You can use Zavio without ever speaking to it.
Your rights
You can ask to access your data, to correct it, to erase it, to restrict its use, to object to a processing operation, to receive it in a readable format, and to withdraw a consent you have given. You can also leave instructions about what happens to your data after your death.
One address for all of that: hello@zavioseason.com. We reply within a month.
If our answer does not satisfy you, you may refer the matter to the CNIL, the French data protection authority, at cnil.fr.
One limit, and we would rather say it here than on the day. You can delete your account at any time from your settings, as long as no hire has been paid for. Once an employment contract has been signed and paid for, we refuse deletion, because that contract has to be kept, by the employer and by us. We tell you so at the moment you ask, rather than erasing an account whose documents would outlive it.
Cookies
Zavio sets only the cookies needed for your session, and keeps the language you chose in your browser. There is no audience measurement, no advertising and no tracker of any kind, and therefore no banner to accept. The detail is in the cookie policy.
Security
Your data travels encrypted. The database separates every account, so that one account can only read what concerns it, and that rule is held by the database itself, not only by the site. IP addresses used to detect abuse are never kept in the clear. Access to data is restricted to the people who need it.
No service is perfectly secure and we will not pretend otherwise. Should a data breach concern you, you would be informed.
Age
Zavio is for adults only. We do not open an account for a minor and we do not knowingly collect their data. If you believe a minor has given us data, write to us and we will erase it.
Changes
If this policy changes, the date at the top of the page changes with it. If the change is significant, we tell you before it takes effect.
This is a translation. The French version is the binding one, and is available on request at hello@zavioseason.com.