RGPD

Privacy Policy

This policy explains what data we collect, why, and how long we retain it, in accordance with the General Data Protection Regulation (EU 2016/679, known as GDPR).

Data controller

The operator of Gîtes de Gaume (Tintigny, Belgium), technically assisted by LuxGap Sàrl (Kahler, Luxembourg). For any GDPR-related questions, write to zythogite@gites-gaume.be.

What data we collect

Across the entire site

Strictly necessary cookies: session (Better-Auth, Stripe). Used solely to make the site function; no consent required.
Server logs (IP, user-agent, page visited): technical security only, retained for 30 days.
Audience measurement (Matomo, operated by LuxGap Sàrl): pages viewed and booking and contact requests, without cookies or storage in your browser. The IP address is truncated and the page URL is reduced to its template (for example /shop/[reference]): no booking reference, no personal link, no search criterion. Your browser's "Do Not Track" setting is respected.
Source of your visit: on your first visit, a source label (for example "google", "booking" or "direct"), its type and date, stored for 90 days in a cookie (see "Cookies" below).

When you chat with our assistant (chat or phone)

The content of the conversation — used to respond to you, then forwarded to the team if human intervention is needed.
Retention: 12 months from the last exchange, unless a booking resulted from the conversation (in which case booking duration + 5 years for billing purposes).

When you make a booking

Last name, first name, email, phone number, address, number of travellers, group composition.
Payment details (Stripe) — we never store the card number; only a tokenised Stripe identifier.
The source of your first visit (source label, type and date), if the source cookie is present.
Retention: stay duration + 10 years (Belgian accounting obligation).

When you report a problem or an idea

The content of your message and the page from which you send it. This page is reduced to its template (for example /fr/gites/[slug]): it contains no booking ID, no phone number, no personal link.
Your email address only if you provide it, and solely to reply to you. The field is optional.
Retention: the time needed to process the request, then as a technical history.

Who we share your data with

Stripe (payments) — based in Ireland, GDPR-compliant.
OVHcloud (hosting) — based in France, GDPR-compliant.
LuxGap (artificial intelligence gateway ai.luxgap.com, hosted by the site's publisher) — for the chat and assistance in drafting our responses. The messages you send to the chat are processed there and are not used to train any model.
Google (Gemini API) — generation of ambience visuals.
Octorate (channel manager) — Italy, GDPR-compliant. Used to synchronise availability with Airbnb and Booking.
Vapi.ai + Anthropic + ElevenLabs + Deepgram + Twilio (phone assistant) — United States, transfers under Standard Contractual Clauses (Article 46 GDPR). The phone assistant is the only service that still uses Anthropic; the site chat no longer relies on it.
LuxGap Sàrl (technical monitoring, dev.luxgap.com) — Luxembourg, GDPR-compliant. Receives bug reports and improvement suggestions sent from the site: your message, the relevant page in template form, and your email address if you provided one.
We never sell your data to third parties for marketing purposes.

Your rights

You have the right to:

Access your data and request a copy.
Have it rectified if it is incorrect.
Request its erasure (except where legal obligations apply — billing, for example).
Object to processing, under certain conditions.
Request data portability (export in a readable format).
Withdraw your consent at any time, where applicable.

To exercise these rights, write to zythogite@gites-gaume.be. Response within 30 days maximum.

Complaint

If you believe your rights are not being respected, you may file a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

Cookies

The site uses no advertising tracking cookies, and audience measurement (Matomo) does not set any. The cookies set are:

Visit source (gg_origine, 90 days) — set on your first visit. It contains only a source label (for example "google", "booking" or "direct"), its type and the date of that visit: no identifier, no page address. If you make a booking, this information is recorded with your reservation, so we know which sites bring us customers.
Stay offer wording (gg_var, 180 days) — set when a page in the calendar, walks or blog displays a stay offer. A randomly generated value, which says nothing about you, always shows you the same wording for that offer; we count the views and clicks for each wording without this value.
Selected language (lang, 1 year) — only if you change language using the selector.
Session cookies (admin login) — Better-Auth, duration 30 days.
Login cookies for the staff time clock — duration 30 days, 180 days for the recognised device.
Stripe Checkout cookies during payment — duration of the payment session.

The chat also keeps the current conversation in your tab (browser session storage), cleared when the tab is closed.