This policy explains which personal data [Company name] collects on this website, why, how long it keeps them and how to exercise your rights. [Complete or remove the passages in brackets before going live.]
[Company name], [legal form], [address], [contact e-mail]. [If any: data protection officer and their e-mail address.]
The data are meant for [Company name] and its technical processors: the host of the website ([name and address of the host]) and [if any, the e-mail delivery provider]. They are neither sold nor rented. [State any transfer outside the European Union and its safeguards.]
The cookies the website needs to work (session, security, memory of your choices) are always on. The others are only set with your consent, which you can change at any time with the “Cookies” button.
You may access your data, have them corrected or erased, restrict their processing, object to it, receive a copy in a common format and withdraw your consent at any time. Write to [contact e-mail]. You may also lodge a complaint with the data protection authority of your country.
To book a stay, you give the name, e-mail address and phone number of the person booking, the number of guests and the age of the children, and your requests. They are used to handle your booking and to write to you about it (confirmation, payment, stay): performance of the contract. They are shared with the hotel of the stay, and kept as long as accounting law requires.
With a customer account, your bookings are gathered in My account, where you can change your details or delete the account. The bookings are then kept, as the law requires, without link to an account.
Online payments are handled by Stripe, PayPal, who receive the card or account details directly: this site never sees them. Their own privacy policy applies to them.
The maps are only drawn when you open them. Your browser then fetches their images from tile.openstreetmap.org, who receives your IP address.
A video is only loaded when you play it, from YouTube (without cookie before playing) or Vimeo (with “do not track”), who then receive your IP address.
The calendars shared with booking platforms (Airbnb, Booking.com…) only hold the dates on which a room is taken, never the names or the details of the guests.