Gîtes-Gaume
General Data Protection Regulation (RGPD/GDPR)

Privacy Policy

This policy explains which data we collect, why and how long we retain it, in accordance with the General Data Protection Regulation (EU 2016/679, known as GDPR).

Data Controller

The operator of Gîtes de Gaume (Tintigny, Belgium), technically assisted by LuxGap Sàrl (Kahler, Luxembourg). For any GDPR-related questions, email zythogite@gites-gaume.be.

Which data we collect

Across the entire website

  • Strictly necessary cookies: session (Better-Auth, Stripe). Used solely to operate the site and do not require consent.
  • Server logs (IP, user-agent, page visited): for technical security only, retained for 30 days.

When you chat with our assistant (chat or phone)

  • The conversation content — used to respond to you and forwarded to the team if human intervention is needed.
  • Retention: 12 months from the last exchange, unless a booking results from the conversation (in which case the booking duration + 5 years for billing).

When you book

  • First name, last name, email, phone, address, number of travelers, group composition.
  • Payment details (Stripe) — we never store your card number; only a tokenized Stripe identifier.
  • Retention: length of stay + 10 years (Belgian accounting requirement).

To whom we disclose your data

  • Stripe (payments) — headquarters in Ireland, GDPR-compliant.
  • OVHcloud (hosting) — headquarters in France, GDPR-compliant.
  • Anthropic (Claude API) and Google (Gemini API) — for chat and generating ambiance visuals. Messages you send to the chat are sent to Anthropic for processing, with no model training (Zero Data Retention).
  • Octorate (channel manager) — Italy, GDPR-compliant. Used to sync availability with Airbnb and Booking.
  • Vapi.ai + ElevenLabs + Deepgram + Twilio (phone assistant) — United States, transfers under Standard Contractual Clauses (GDPR Article 46).
  • We never sell your data to third parties for marketing purposes.

Your rights

You have the right to:

  • Access your data and request a copy.
  • Rectify inaccurate data.
  • Request erasure (except where legally required — e.g., billing).
  • Object to processing, under certain conditions.
  • Request portability (export in a readable format).
  • Withdraw your consent at any time, where applicable.

To exercise these rights, email zythogite@gites-gaume.be. Response within 30 days maximum.

Complaint

If you believe your rights are not being respected, you may file a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be.

Cookies

The site uses no advertising tracking cookies. The only cookies set are:

  • Session cookies (admin login) — Better-Auth, duration 30 days.
  • Stripe Checkout cookies during payment — duration of the payment session.

These cookies are strictly necessary for the site to function and do not require explicit consent. Therefore, no cookie banner is displayed.