Privacy policy

The controller of your data is AT GROUP SAS, reachable at venusa.contact@gmail.com.

We only collect the data you send us and what is needed for the site to work:

• Contact and request forms: name, email address and your message.
• News and availability updates: your email address and consent; only if you choose SMS alerts, your phone number and separate SMS consent.
• Emails you send us: your address and message are processed in Google Gmail so we can reply. An assistant may analyse up to 20 previously sent replies locally to learn our tone, then prepare a draft in the same thread. When external assistance is explicitly enabled, the message, up to eight recent messages and strictly useful booking context may be sent to OpenAI, directly or through Vercel AI Gateway, or to Anthropic as a fallback, using the provider's available no-storage controls. The outgoing draft text may be kept in our private database for up to 30 days to measure corrections; incoming message bodies are not stored there. Drafts are never sent automatically and remain under our team's control. A separate permission may let OpenAI personalise outgoing CRM drafts from the first name, language, suite and dates; AI-written text is never used for direct sending.
• Customer file: when you stay with us, booking identity, contact details, dates and amount are used to manage your welcome and customer relationship.
• Audience measurement: browsing data, only if you consent (see “Cookies” below).

Booking and payment for your stay are handled by Amenitiz, a separate data controller, on its own domain.

• Answering your requests and managing the relationship, legitimate interest.
• Preparing an AI-assisted reply draft, with no automated decision or sending, legitimate interest in providing timely and consistent service.
• Keeping our guest records (arrival, stay follow-up), performance of the contract and legitimate interest.
• If you have already stayed with us, sending you offers for a similar service — a night in one of our suites, and nothing else: our legitimate interest, within the framework of Article L34-5 of the French postal and electronic communications code. You may object free of charge, in one click, in every message and at any time on request. We neither sell nor lend your address, and we send you no partner offers.
• If you are not a guest, sending you news by email: your consent, revocable at any time.
• Sending occasional newly available date alerts by SMS, your separate SMS consent.
• Measuring site audience to improve it, your consent.

• Contact messages: 12 months.
• Stay requests: 24 months.
• Email news and SMS alerts: until you unsubscribe.
• Consent evidence: 5 years; technical draft log and hashes: 3 years; outgoing draft text: 30 days maximum.
• Suppression list: the minimum contact data is retained to prevent any new message until you explicitly opt in again.
• Audience measurement: 14 months maximum.

Your data is never sold. It may be processed by our processors, strictly for the purposes above:

• Vercel Inc., Hébergement du site (UE / États-Unis).
• Supabase, Hébergement des formulaires (contact, demandes, newsletter) et du fichier clients (réservations) (Union européenne).
• Google (Analytics 4), Mesure d'audience, sous réserve de votre consentement ; en cas de refus, seuls des signaux techniques anonymes, sans cookie ni identifiant, sont transmis à des fins de statistiques agrégées (Consent Mode) (États-Unis).
• Google Ads, Mesure et personnalisation publicitaires, sous réserve de votre consentement distinct ; en cas de refus, seuls des signaux techniques anonymes, sans cookie ni identifiant publicitaire, sont transmis (Consent Mode) (États-Unis).
• Google (Gmail), Traitement de vos e-mails (réception, réponse) et notifications internes (UE / États-Unis).
• Vercel AI Gateway, Acheminement sécurisé des demandes d'assistance à la rédaction (UE / États-Unis).
• OpenAI, Assistance à la rédaction de brouillons relus par l'équipe avant tout envoi (États-Unis).
• Anthropic, Fournisseur de secours optionnel pour l'assistance à la rédaction, lorsque cette fonction est activée (États-Unis).
• Amenitiz, Moteur de réservation, réservation & paiement du séjour (Union européenne).

When you use “Keep this search”, a separate optional consent allows us to link your search and booking to Google campaigns. Advertising cookie consent is also required. Associated advertising identifiers are retained for up to 30 days and cleared by the daily check. Withdraw through “Manage cookies” in the same browser or contact us. Refusing does not prevent you from receiving the requested link or booking.

When you book directly, we send Google Ads the booking amount together with your email address in hashed form — an irreversible fingerprint, never the address itself. This lets us know which ads produce real bookings rather than mere clicks, and stop paying for those that do not.

Nothing is sent for bookings made through Booking.com or Airbnb. Legal basis: our legitimate interest in measuring the effectiveness of our advertising spend. You may object at any time by writing to us: we then exclude your booking from these uploads.

If you have stayed with us, the same fingerprint of your email address and phone number may be used to show you our ads, or on the contrary to exclude you from them when you have just booked. Here too, only the irreversible fingerprint is sent, never your contact details. Google compares it with its own and destroys whatever matches no one. We send neither guests who came through Booking.com or Airbnb, nor people whose last stay is more than three years old. Legal basis: our legitimate interest in speaking to our own guests rather than to strangers. Write to us and we will remove you from these lists.

Some providers (Google, Vercel, OpenAI) are based in the United States. Transfers are framed by appropriate safeguards (the European Commission's standard contractual clauses). Your form data is hosted within the European Union.

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise them, write to us at venusa.contact@gmail.com. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr).

Before your choice, no measurement or advertising cookie is set: Google only receives anonymous signals, without cookies or advertising identifiers. “Accept” enables audience measurement and advertising. Audience measurement covers Google Analytics 4 and the storage, for 30 days, of acquisition parameters (UTM, gclid, gbraid, wbraid or fbclid). Advertising enables Google Ads and Meta, when configured, to measure campaigns and show you our suites and offers on other sites. “Customise” lets you choose each purpose separately. We also count, without cookies or identifiers, how often this banner is shown and which choices are made. Declining never affects booking. You can change your choice at any time through “Manage cookies” in the footer.