Back to home

Privacy statement

This privacy statement describes how the Bed & Breakfast "Habitat" (hereinafter: “B&B”) handles the personal data of its guests, in accordance with Belgian privacy legislation and the General Data Protection Regulation (GDPR).

1. Data Controller

The B&B is responsible for the processing of personal data it receives in the context of bookings, communication and invoicing.

2. Which personal data is processed?

The B&B processes only the data that is necessary for managing bookings and fulfilling legal obligations. This includes:

First name and last name

Address details

Phone number

Email address

Payment and invoicing details

No sensitive data is processed and no data that is not strictly necessary is collected.

3. Purposes of the processing

Personal data is used solely for:

Booking management, including communication regarding the reservation

Invoicing and administration, in accordance with legal obligations

Contact in case of necessary information about the stay

The data is not used for marketing, promotions or other purposes beyond those above.

4. Legal basis for the processing

The processing is based on:

Contractual necessity (execution of the reservation agreement)

Legal obligation (invoicing and accounting obligations)

Legitimate interest (essential communication about the stay)

5. Retention periods

Personal data is retained as long as necessary for:

handling the reservation,

the duration of the legal accounting obligations (maximum 7 years for invoicing data).

6. Sharing of data

The B&B does not share personal data with third parties, unless this:

is legally required (e.g., tax authorities),

necessary for the execution of the reservation (e.g., payment processor).

Data is never sold or transferred for commercial purposes.

7. Security

The B&B takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access or disclosure.

8. Guest rights

The guest has at all times the right to:

request access to their personal data,

request correction of incorrect data,

request deletion of non-legal mandatory data,

object to processing based on legitimate interest,

file a complaint with the Data Protection Authority (DPA) in Belgium.

Requests can be submitted via the contact details listed in the booking confirmation.

9. Contact

For questions about this privacy statement or about the processing of personal data, the guest can contact the B&B via the email address or phone number listed in the booking confirmation.