Privacy Policy

The data controller is the publisher of GetHotelProof, a French micro-enterprise (SIRET: 999 224 744 00014). Contact: [email protected].

We collect the following data, strictly necessary for providing the service:

• Email address (PDF delivery, communication)
• Full names of travelers (appearing on the document)
• Destination city, stay dates
• IP address (security, fraud prevention)
• Payment data (processed exclusively by Stripe, never stored by us)

The processing of your data relies on the following legal bases:

• Contract performance: processing your order and delivering the PDF
• Legal obligation: invoice retention for 13 months (French tax law)
• Legitimate interest: service security, fraud prevention

Your data may be shared with the following sub-processors, strictly for service provision:

• Stripe: Secure payments (PCI DSS Level 1). Headquarters: United States. Transfer covered by SCCs.
• Resend: Transactional emails. Headquarters: United States. Transfer covered by SCCs.
• Cloudflare: CDN, security and DDoS protection. Headquarters: United States. Transfer covered by SCCs.
• LiteAPI: Hotel availability search. Transfer covered by SCCs.
• PostgreSQL: Database hosted in France (Hostinger VPS, French datacenter). No transfer outside the EU.

The database containing your information is hosted on a VPS server located in France (Hostinger International Ltd, French datacenter). Your data does not leave the European Union for primary storage.

Your data is retained for the following periods:

• Order data (email, names, PDF): 13 months from order date (accounting obligation)
• Technical logs (IP, user-agent): 12 months maximum

In accordance with the General Data Protection Regulation, you have the following rights:

• Right of access: obtain a copy of your data
• Right of rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data

You can request complete deletion of your data at any time by contacting [email protected]. Deletion is effective within 72 business hours and includes all orders, PDFs, and data associated with your email.

GetHotelProof uses only strictly necessary cookies for service operation (session, language preference). No advertising or tracking cookies are used. No consent is required for strictly necessary cookies.

If you believe that the processing of your data does not comply with GDPR, you may file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.