Privacy policy

The controller of your data is AT GROUP SAS, reachable at venusa.contact@gmail.com.

We only collect the data you send us and what is needed for the site to work:

• Contact and request forms: name, email address and your message.
• News and availability updates: your email address and consent; only if you choose SMS alerts, your phone number and separate SMS consent.
• Emails you send us: your address and message are processed in Google Gmail so we can reply. An assistant may analyse up to 100 previously sent replies locally to learn our tone, then prepare a draft in the same thread. The message, recent thread context, useful booking context and up to five scrubbed examples may be routed through Vercel AI Gateway to OpenAI. Drafts are never sent automatically and are reviewed by a member of our team.
• Customer file: when you stay with us, booking identity, contact details, dates and amount are used to manage your welcome and customer relationship.
• Audience measurement: browsing data, only if you consent (see “Cookies” below).

Booking and payment for your stay are handled by Amenitiz, a separate data controller, on its own domain.

• Answering your requests and managing the relationship, legitimate interest.
• Preparing an AI-assisted reply draft, with no automated decision or sending, legitimate interest in providing timely and consistent service.
• Sending news by email : your consent, revocable at any time.
• Sending occasional newly available date alerts by SMS, your separate SMS consent.
• Measuring site audience to improve it, your consent.

• Contact messages: 12 months.
• Stay requests: 24 months.
• Email news and SMS alerts: until you unsubscribe.
• Consent evidence: 5 years; customer draft log: 3 years.
• Suppression list: the minimum contact data is retained to prevent any new message until you explicitly opt in again.
• Audience measurement: 14 months maximum.

Your data is never sold. It may be processed by our processors, strictly for the purposes above:

• Vercel Inc., Hébergement du site (UE / États-Unis).
• Supabase, Hébergement des formulaires (contact, demandes, newsletter) et du fichier clients (réservations) (Union européenne).
• Google (Analytics 4), Mesure d'audience, sous réserve de votre consentement (États-Unis).
• Google Ads, Mesure et personnalisation publicitaires, sous réserve de votre consentement distinct (États-Unis).
• Google (Gmail), Traitement de vos e-mails (réception, réponse) et notifications internes (UE / États-Unis).
• Vercel AI Gateway, Acheminement sécurisé des demandes d'assistance à la rédaction (UE / États-Unis).
• OpenAI, Assistance à la rédaction de brouillons relus par l'équipe avant tout envoi (États-Unis).
• Amenitiz, Moteur de réservation, réservation & paiement du séjour (Union européenne).

Some providers (Google, Vercel, OpenAI) are based in the United States. Transfers are framed by appropriate safeguards (the European Commission's standard contractual clauses). Your form data is hosted within the European Union.

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise them, write to us at venusa.contact@gmail.com. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr).

No tracker is loaded before your choice. “Analytics only” enables Google Analytics 4 and consented storage of acquisition parameters (UTM, gclid or fbclid) for 30 days. “Accept all” also enables Google Ads and Meta, when configured, to measure campaigns. Declining never affects booking. You can change your choice at any time through “Manage cookies” in the footer.