Privacy Policy

This privacy policy applies to the website www.chocolatesuites.be, operated by:

Inn Bruges BV
Katelijnestraat 94
8000 Brugge, Belgium
Email: hello@chocolatesuites.be

Inn Bruges BV is the data controller responsible for your personal data as described in this policy.

We collect the following personal data when you use our website or make a booking:

a) Contact Form

• Your name
• Your email address
• Any message you choose to send us

b) Booking & Payment

• Your name and contact details
• Your payment information (processed securely via Stripe — we do not store your card details ourselves)
• Your booking dates and preferences

c) Website Analytics (Google Analytics)

• Your approximate location (country/city level)
• Pages you visit and how long you stay
• Device type and browser
• How you arrived at our website (e.g. Google search, direct link)

This data is anonymised and collected in aggregate. We cannot identify you personally through Google Analytics.

• To respond to your enquiries submitted via our contact form
• To process and manage your booking and payment
• To communicate with you about your stay (confirmation, check-in information, follow-up)
• To improve our website and understand how visitors use it (via Google Analytics)
• To comply with our legal obligations under Belgian and EU law

Under the General Data Protection Regulation (GDPR), we process your data on the following legal grounds:

• Contract: Processing your booking and payment is necessary to fulfil our contract with you.
• Legitimate interest: Responding to your enquiries and improving our website.
• Consent: For Google Analytics tracking. You can withdraw this consent at any time by adjusting your cookie preferences.

Payments on our website are processed by Stripe, Inc., a third-party payment provider. When you make a payment, your card details are entered directly into Stripe's secure environment. Inn Bruges BV does not store, see, or have access to your full card details.

Stripe processes your payment data in accordance with their own privacy policy, which you can view at: stripe.com/privacy

We use Google Analytics to understand how visitors use our website. Google Analytics places cookies on your device to collect anonymised data about your visit.

Google may transfer this data to countries outside the European Economic Area. For more information, see Google's privacy policy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Our website uses cookies. We use the following types:

• Essential cookies: Required for the website to function correctly (e.g. remembering your preferences).
• Analytics cookies: Used by Google Analytics to collect anonymised usage data (see Section 6).
• Payment cookies: Used by Stripe to process payments securely.

You can manage or disable cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

• Booking and payment data: Kept for 7 years to comply with Belgian accounting and tax law.
• Contact form enquiries: Kept for up to 2 years, or until the matter is resolved.
• Google Analytics data: Retained for 26 months by default, then automatically deleted.

As a resident of the European Union, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Ask us to delete your personal data, subject to legal obligations.
• Right to restrict processing: Ask us to limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at: hello@chocolatesuites.be

We will respond to your request within 30 days.

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA)
Rue de la Presse 35, 1000 Brussels, Belgium
Website: www.gegevensbeschermingsautoriteit.be
Email: contact@apd-gba.be

We do not sell or rent your personal data to third parties. We only share your data with:

• Stripe: To process your payments (see Section 5).
• Google: For website analytics (see Section 6).
• Legal authorities: If required to do so by law or court order.

We take the security of your personal data seriously. Our website uses HTTPS encryption to protect data in transit. Payments are handled entirely by Stripe's PCI-DSS compliant infrastructure. We limit access to your personal data to those who need it to provide our services.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the 'Last updated' date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Inn Bruges BV
Katelijnestraat 94, 8000 Brugge, Belgium
Email: hello@chocolatesuites.be
Website: www.chocolatesuites.be