Legal
Privacy Policy
Last updated: November 14, 2025
At VestaLodgr, we take the protection of your personal data very seriously. This policy explains how we collect, use and protect your information.
02
Data Collected
We collect the following data:
Identification Information
- —First and last name
- —Email address
- —Phone number
- —Date of birth
- —Profile photo
Payment Information
- —Credit card information (processed securely by our payment provider)
- —Transaction history
Browsing Data
- —IP address
- —Browser type
- —Pages visited
- —Visit duration
03
Processing Purposes
Your data is used to:
- —Create and manage your account
- —Facilitate bookings and payments
- —Improve our services
- —Send you important communications
- —Ensure platform security
- —Comply with our legal obligations
04
Legal Basis for Processing
The processing of your data is based on:
- —Contract performance (booking management)
- —Your consent (newsletter, non-essential cookies)
- —Our legitimate interest (service improvement, security)
- —Our legal obligations (billing data retention)
05
Data Sharing
Your data may be shared with:
- —Other users (name, photo, reviews) to facilitate bookings
- —Our service providers (hosting, payment)
- —Competent authorities if required by law
We never sell your personal data to third parties.
06
Data Retention Period
- —Account data: until account deletion + 1 year
- —Billing data: 10 years (legal obligation)
- —Browsing data: 13 months maximum
07
Your Rights
In accordance with the GDPR, you have the following rights:
- —Right of access : obtain a copy of your data
- —Right to rectification : correct your inaccurate data
- —Right to erasure : request the deletion of your data
- —Right to restriction : restrict the processing of your data
- —Right to portability : receive your data in a structured format
- —Right to object : object to the processing of your data
- —Right to withdraw your consent at any time
To exercise these rights, contact us at: privacy@vestalodgr.com
08
Security
We implement appropriate technical and organizational measures to protect your data:
- —SSL/TLS encryption
- —Secure authentication
- —Strict access controls
- —Continuous monitoring
10
International Transfers
Your data is hosted within the European Union. In case of transfer outside the EU, we ensure appropriate safeguards.
11
Modifications
We may modify this policy at any time. You will be informed of significant changes by email.
12
Contact and Complaints
For any questions: privacy@vestalodgr.com
You have the right to file a complaint with the CNIL:
National Commission on Informatics and Liberty
3 Place de Fontenoy - TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22