Privacy policy

Data controller

MattBnB57, 18, route de Lorry, 57050 Metz, France. Contact: matthieu@mattbnb57.com, +33 6 51 27 21 22.

The data we collect and why

• Contact form: first name, email address, phone number (optional) and message. They are used only to reply to your enquiry. Legal basis: our legitimate interest in replying to the enquiries we receive. To limit abusive sending, your IP address, or a fingerprint of it computed by our server, is kept for at most 24 hours, then deleted.
• Booking: the information entered in the booking module (identity, contact details, stay, payment) is processed by our service provider Amenitiz, which manages bookings and payments on our behalf. Legal basis: the performance of your booking.
• Audience measurement: we measure traffic and website speed with Vercel Web Analytics and Speed Insights, without cookies. These tools count page views, where visitors come from, the type of device and browser, the country and loading times, as statistics that do not identify you. Legal basis: our legitimate interest in improving the website.
• MATT AI assistant: the questions you ask it, its answers, the page you open it from, and two fingerprints derived from a random identifier of your device and from your IP address, used to limit the number of messages per day. Phone numbers, email addresses and bank account numbers written in a question are masked before anything is sent. This data is used to answer you, to prevent abuse and to improve the assistant. Legal basis: our legitimate interest in answering questions asked on the website and preventing abuse. Your browser also keeps the conversation, as you wrote it, for as long as the tab is open; you can delete it from the cookie information page.
• Running the website: like any website, the servers that display the pages, the photos and the map receive your device’s IP address, for as long as it takes to send them to you and to keep them secure. The Google reviews shown are copied onto our website: no photo or data is loaded from Google to display them. Links to Google, WhatsApp or social networks only open those services after you click.

Recipients

Your data is never sold or rented. Only our service providers have access to it, for their own part:

• Resend: delivery of contact form messages to our mailbox.
• Vercel: website hosting and cookie-free audience measurement.
• Amenitiz: booking module, payment and stay management.
• Cloudinary: hosting and display of the photos of our homes.
• Anthropic: writing the MATT AI assistant’s answers, based on the website content and your question.
• Supabase: storage of MATT AI conversations and their statistics, on servers located in Frankfurt (Germany).
• OpenFreeMap: background of the map of our homes, loaded when the map is displayed.

Transfers outside the European Union

Some of these providers are based in the United States or process data there (notably Vercel, Resend, Cloudinary and Anthropic). These transfers are covered by the safeguards provided for by the GDPR: the EU–US Data Privacy Framework for companies that have signed up to it, or the European Commission’s standard contractual clauses.

Retention period

• Contact form messages: as long as needed to handle your enquiry.
• Bookings: the period required by our legal obligations, particularly accounting obligations.
• Conversations with the MATT AI assistant: 12 months after the last message, then deleted. Only statistics remain (number of messages, cost), with no text and no data that identifies you.
• Audience measurement: statistics only, with no data that identifies you.

Your rights

You have the right to access, rectify and erase your data, to object to and restrict its processing, and to data portability. To exercise these rights, write to matthieu@mattbnb57.com. If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Cookies

This website does not set any analytics or advertising cookies. The MATT AI assistant uses a technical cookie when you open it. Details are on the Cookie information page.