Privacy Policy
Last Updated: April 25, 2024
1. Introduction
This Privacy Policy explains how LodgePilot BV (“LodgePilot”, “we”, “us”, or “our”) uses and protects any information you provide via www.lodgepilot.com (the “Website”). We ensure your privacy is protected in compliance with the GDPR (EU) 2016/679.
2. Name and Address of the Controller
LodgePilot BV Brusselseheerweg 24 9400 Ninove, Belgium VAT BE1017745081 Email: [email protected]
3. Data Collection via lodgepilot.com
We may collect and process the following data:
- Information you provide: when registering or via forms (name, email, address, phone, property details).
- Technical data: IP address, browser type/version, time zone, plugins, operating system, platform.
- Usage data: URL clickstream, load times, error messages, visit duration, page interactions, exit methods.
- Payment data: we use third parties (e.g., Stripe) and do not store full card details ourselves.
- Third-party data: information obtained from partners (analytics, ads, integrations).
4. Purposes of Processing
We process personal data to:
- Provide and manage our services.
- Secure accounts (MFA).
- Support users.
- Personalize and improve services.
- Notify users of changes or updates.
- Send requested information.
- Analyze and optimize advertising effectiveness.
5. Data Retention
- Active customers: data retained while the agreement is in effect and until the statute of limitations expires.
- Inactive customers: data deleted 90 days after inactivity, unless longer retention is legally required.
6. Legal Basis for Processing
- Performance of contract: necessary for service delivery.
- Legitimate interest: MFA and security measures.
- Consent: for marketing communications.
- Legal obligation: tax and accounting requirements.
7. Data Disclosure
We share personal data with:
- Service providers: channel managers, payment processors, analytics, MFA providers.
- Legal requirements: to comply with laws or protect rights.
Transfers outside the EEA are subject to appropriate safeguards.
8. Rights of the Data Subject
Each user has the following rights regarding their personal data:
a) Right of confirmation: request whether we process your data by contacting our Data Protection Officer or another employee.
b) Right of access: receive information and a copy of your processed data free of charge.
c) Right to rectification: correct inaccurate data without undue delay.
d) Right to erasure (right to be forgotten): delete your data without undue delay when one of these applies: * Data is no longer needed for processing. * You withdraw consent and no other legal basis applies. * You object under Article 21(1) GDPR and no overriding grounds exist. * Data has been unlawfully processed. * We are legally required to delete the data. * Data was collected in relation to services for children (Article 8(1) GDPR).
e) Right to restrict processing: request restriction when: * You contest accuracy while we verify it. * Processing is unlawful and you refuse deletion but request restriction. * We no longer need data, but you need it for legal claims. * You object under Article 21(1) GDPR and verification is pending.
f) Right to data portability: receive your data in a structured, machine-readable format and transfer to another controller.
g) Right to object: object at any time to processing under our legitimate interest or for direct marketing.
i) Right to withdraw consent: withdraw consent at any time without affecting prior processing.
To exercise any right, contact [email protected] or use our contact form. You may also lodge a complaint with the Data Protection Authority.
9. Security
We implement appropriate technical and organizational measures, such as SSL encryption and database encryption, to protect your data. However, no method of transmission or storage is completely secure.
10. Links
Our Website may contain links to external sites. We are not responsible for their privacy practices.
11. Cookies
What are cookies?
Cookies are small text files stored on your device when you visit our Website. They help us provide you with a better experience by remembering your preferences and analyzing how you use our site.
Types of cookies we use
Essential Cookies (Always Active)
- Purpose: Required for the Website to function properly
- Examples: Session management, security, form submissions
- Legal basis: Legitimate interest (necessary for website operation)
Analytics Cookies (Optional)
- Purpose: Help us understand how visitors use our Website
- Services: Google Analytics, Google Tag Manager, Umami Analytics
- Data collected: Page views, session duration, user interactions (anonymized)
- Legal basis: Your consent
Managing cookies
You can control cookie settings through:
- Our cookie banner: Choose "Essential Only" or "Accept All"
- Browser settings: Most browsers allow you to block or delete cookies
- Opt-out tools: You can opt out of Google Analytics here
Third-party cookies
We use the following third-party services that may set cookies:
- Google Analytics: Web analytics service
- Google Tag Manager: Tag management system
- Umami: Privacy-focused analytics
These services have their own privacy policies governing their use of cookies.
Cookie retention
- Essential cookies: Deleted when you close your browser
- Analytics cookies: Typically retained for 24 months
- Consent cookies: Retained for 12 months to remember your preferences
12. Validity and Amendments
We may update this Privacy Policy at any time. Changes will be published on the Website. Continued use constitutes acceptance of the updated Policy.