Gîtes-Gaume
RGPD

Privacy Policy

This policy explains what data we collect, why, and how long we retain it, in accordance with the General Data Protection Regulation (EU 2016/679, known as GDPR).

Data controller

The operator of Gîtes de Gaume (Tintigny, Belgium), technically assisted by LuxGap Sàrl (Kahler, Luxembourg). For any GDPR-related question, write to zythogite@gites-gaume.be.

What data we collect

Across the entire site

  • Strictly necessary cookies: session (Better-Auth, Stripe). Used solely to make the site function; no consent required.
  • Server logs (IP, user-agent, page visited): technical security only, retained for 30 days.

When you chat with our assistant (chat or phone)

  • The content of the conversation — used to respond to you, then forwarded to the team if human intervention is needed.
  • Retention: 12 months from the last exchange, unless a booking resulted from the conversation (in which case, duration of the stay + 5 years for billing purposes).

When you make a booking

  • Last name, first name, email, phone number, address, number of travellers, group composition.
  • Payment details (Stripe) — we never store the card number; only a tokenised Stripe identifier.
  • Retention: duration of the stay + 10 years (Belgian accounting obligation).

When you report a problem or share an idea

  • The content of your message and the page from which you send it. This page is reduced to its template (for example /fr/gites/[slug]): it contains no booking identifier, no phone number, and no personal link.
  • Your email address only if you provide it, and solely to reply to you. The field is optional.
  • Retention: the time needed to process the request, then kept as technical history.

Who we share your data with

  • Stripe (payments) — headquartered in Ireland, GDPR-compliant.
  • OVHcloud (hosting) — headquartered in France, GDPR-compliant.
  • LuxGap (artificial intelligence gateway ai.luxgap.com, hosted by the site's publisher) — for the chat and assistance in drafting our responses. Messages you send to the chat are processed there and are not used to train any model.
  • Google (Gemini API) — generation of ambience visuals.
  • Octorate (channel manager) — Italy, GDPR-compliant. Used to synchronise availability with Airbnb and Booking.
  • Vapi.ai + Anthropic + ElevenLabs + Deepgram + Twilio (phone assistant) — United States, transfers under Standard Contractual Clauses (Article 46 GDPR). The phone assistant is the only service that still relies on Anthropic; the site chat no longer uses it.
  • LuxGap Sàrl (technical monitoring, dev.luxgap.com) — Luxembourg, GDPR-compliant. Receives bug reports and improvement suggestions sent from the site: your message, the relevant page as a template, and your email address if you provided one.
  • We never sell your data to third parties for marketing purposes.

Your rights

You have the right to:

  • Access your data and request a copy.
  • Have it rectified if it is incorrect.
  • Request its erasure (except where legal obligations apply — billing, for example).
  • Object to processing, under certain conditions.
  • Request portability (export in a readable format).
  • Withdraw your consent at any time, where applicable.

To exercise these rights, write to zythogite@gites-gaume.be. Response within 30 days maximum.

Complaint

If you believe your rights are not being respected, you may file a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

Cookies

The site uses no advertising tracking cookies. The only cookies set are:

  • Session cookies (admin login) — Better-Auth, duration 30 days.
  • Stripe Checkout cookies during payment — duration of the payment session.

These cookies are strictly necessary for the site to function and do not require explicit consent. No cookie banner is therefore displayed.