Privacy policy

MyConciergeHotel takes the protection of personal data seriously. This policy describes the data processing carried out as part of the use of the site and the booking services. It complies with EU Regulation 2016/679 (GDPR) and French data protection law.

MyConciergeHotel SAS, located in Paris, France. Data Protection Officer (DPO): dpo@myconciergehotel.com.

• Booking management (contract performance): identity, contact, stay, payment.
• Loyalty tracking (legitimate interest): number of stays, Free/Premium tier.
• Transactional communications (contract performance): confirmations, reminders, post-stay.
• Commercial communications (consent): news and selections, opt-in.
• Security and fraud prevention (legitimate interest): logs, anti-bot, idempotency.
• Anonymised audience measurement (consent): Vercel Analytics, Web Vitals.

• Account data: throughout the life of the account, deleted within 30 days after closure.
• Booking data: 10 years (accounting and tax obligations).
• Connection and security logs: 12 months maximum.
• Consent cookies: 13 months maximum (CNIL guideline).

Your data is accessible to MyConciergeHotel operational teams and to our strictly necessary sub-processors: Supabase (database hosting), Vercel (application hosting), Amadeus (booking and payment), Brevo (email), Algolia (search), Upstash (cache). No data is sold or rented to third parties for commercial purposes.

Some sub-processors may process data from the United States. These transfers are governed by the Standard Contractual Clauses adopted by the European Commission and, where required, by additional safeguards.

Under the GDPR you have the right to access, rectify, erase, restrict, object, port and to define post-mortem instructions. To exercise your rights: dpo@myconciergehotel.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

Cookie usage is detailed in our Cookie policy. You can change your choices at any time via the "Manage cookies" link in the footer.