Gîtes de Gaume
GDPR

Privacy Policy

This policy explains what data we collect, why and how long we retain it, in accordance with the General Data Protection Regulation (EU 2016/679, known as GDPR).

Data Controller

The operator of Gîtes de Gaume (Tintigny, Belgium), assisted technically by LuxGap Sàrl (Kahler, Luxembourg). For any GDPR questions, write to zythogite@gites-gaume.be.

What data we collect

Across the entire site

  • Strictly necessary cookies: session (Better-Auth, Stripe). Only serve to make the site function, do not require consent.
  • Server logs (IP, user-agent, page visited): technical security only, retained for 30 days.

When you chat with our assistant (chat or phone)

  • The content of the conversation — used to respond to you and transmitted to the team if human intervention is needed.
  • Retention: 12 months from the last exchange, unless a booking resulted from the conversation (in which case duration of the stay + 5 years for billing).

When you book

  • Name, first name, email, phone, address, number of travelers, group composition.
  • Payment details (Stripe) — we never store the card number; only a tokenized Stripe identifier.
  • Retention: duration of stay + 10 years (Belgian accounting obligation).

Who we share your data with

  • Stripe (payments) — headquarters Ireland, GDPR compliant.
  • OVHcloud (hosting) — headquarters France, GDPR compliant.
  • Anthropic (Claude API) and Google (Gemini API) — for chat and ambiance visual generation. Messages you send to the chat are sent to Anthropic for processing, without model training (Zero Data Retention).
  • Octorate (channel manager) — Italy, GDPR compliant. Used to synchronize availability with Airbnb and Booking.
  • Vapi.ai + ElevenLabs + Deepgram + Twilio (phone assistant) — United States, transfers under Standard Contractual Clauses (article 46 GDPR).
  • We never sell your data to third parties for marketing purposes.

Your rights

You have the right to:

  • Access your data and request a copy.
  • Correct it if it is inaccurate.
  • Request its deletion (except legal obligations — billing, for example).
  • Object to processing, under certain conditions.
  • Request portability (export in a readable format).
  • Withdraw your consent at any time, if applicable.

To exercise these rights, write to zythogite@gites-gaume.be. Response within 30 days maximum.

Complaint

If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

Cookies

The site uses no advertising tracking cookies. The only cookies placed are:

  • Session cookies (admin login) — Better-Auth, duration 30 days.
  • Stripe Checkout cookies during payment — duration of the payment session.

These cookies are strictly necessary for the site to function and do not require explicit consent. No cookie banner is therefore displayed.

Privacy Policy — Gîtes de Gaume