1. Data controller
The data controller is OENOSUITE (SIREN 939 774 592), 31 rue Diderot, 21000 Dijon. Contact: simon@oenosuite.fr.
2. Data collected
We collect the following personal data:
- Identification data: surname, first name, email, telephone
- Booking data: dates of stay, type of suite, special requests
- Payment data: processed directly by Stripe (we do not store any bank details)
- Browsing data: cookies, IP address, pages visited (see Cookie Policy)
3. Purposes of processing
- Manage your bookings and stays
- Process the purchase and use of gift cards
- Reply to your contact requests
- Improve our services and the website
- Comply with our legal obligations (accounting, taxation)
4. Legal basis
The processing is based on the performance of the contract (booking, gift card), consent (cookies, marketing) and our legal obligations.
5. Data retention
Booking data is retained for the duration of the contractual relationship plus the legal accounting retention period (10 years). Browsing data is retained for a maximum of 13 months.
6. Recipients
Your data is only intended for OENOSUITE and its technical service providers (Stripe for payments, Smoobu for booking management, Resend for emails, Lovable / Supabase for hosting). No data is sold to third parties.
7. Your rights
In accordance with the GDPR, you have the right to access, rectify, delete and port your data, as well as the right to object and limit processing. To exercise these rights, contact us at simon@oenosuite.fr.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
8. Security
OENOSUITE implements appropriate technical and organisational measures to ensure the security of your personal data (HTTPS encryption, secure access to databases, regular backups).