Privacy Policy

1. Who We Are

This privacy policy applies to the website www.rosesuites.be, operated by:

Inn Bruges BV is the data controller responsible for your personal data as described in this policy.

2. What Personal Data We Collect

We collect the following personal data when you use our website or make a booking:

a) Contact Form

• Your name
• Your email address
• Any message you choose to send us

b) Booking & Payment

• Your name and contact details
• Your payment information (processed securely via Stripe — we do not store your card details ourselves)
• Your booking dates and preferences

c) Website Analytics (Google Analytics)

• Your approximate location (country/city level)
• Pages you visit and how long you stay
• Device type and browser
• How you arrived at our website (e.g. Google search, direct link)

3. Why We Collect Your Data

• To respond to your enquiries submitted via our contact form
• To process and manage your booking and payment
• To communicate with you about your stay (confirmation, check-in information, follow-up)
• To improve our website and understand how visitors use it (via Google Analytics)
• To comply with our legal obligations under Belgian and EU law

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data on the following legal grounds:

• Contract: Processing your booking and payment is necessary to fulfil our contract with you.
• Legitimate interest: Responding to your enquiries and improving our website.
• Consent: For Google Analytics tracking. You can withdraw this consent at any time by adjusting your cookie preferences.

5. Payment Processing via Stripe

Payments on our website are processed by Stripe, Inc., a third-party payment provider. When you make a payment, your card details are entered directly into Stripe's secure environment. Inn Bruges BV does not store, see, or have access to your full card details.

Stripe processes your payment data in accordance with their own privacy policy: stripe.com/privacy

6. Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics places cookies on your device to collect anonymised data about your visit. This data is sent to Google's servers and processed to provide us with reports about website traffic and usage.

Google may transfer this data to countries outside the European Economic Area. For more information, see Google's privacy policy

7. Cookies

Our website uses cookies. A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

• Essential cookies: Required for the website to function correctly (e.g. remembering your preferences).
• Analytics cookies: Used by Google Analytics to collect anonymised usage data (see Section 6).
• Payment cookies: Used by Stripe to process payments securely.

You can manage or disable cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. How Long We Keep Your Data

• Booking and payment data: Kept for 7 years to comply with Belgian accounting and tax law.
• Contact form enquiries: Kept for up to 2 years, or until the matter is resolved.
• Google Analytics data: Retained for 26 months by default, then automatically deleted.

9. Your Rights Under GDPR

As a resident of the European Union, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data, subject to legal obligations.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at: hello@rosesuites.be

We will respond to your request within 30 days.

10. Right to Lodge a Complaint

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):

11. Sharing Your Data With Third Parties

We do not sell or rent your personal data to third parties. We only share your data with:

• Stripe: To process your payments (see Section 5).
• Google: For website analytics (see Section 6).
• Legal authorities: If required to do so by law or court order.

12. Data Security

We take the security of your personal data seriously. Our website uses HTTPS encryption to protect data in transit. Payments are handled entirely by Stripe's PCI-DSS compliant infrastructure. We limit access to your personal data to those who need it to provide our services.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us: