Privacy and cookies

Who is responsible for your data

The controller responsible for your data is Société Villa Taouzert (SARL), the company that runs the Villa Taouzert guest house. Registered office: Eden Palm, Oasis de Tozeur, 2210 Tozeur, Tunisia.

For any questions about your data: sales@villataouzert.com or +216 58 085 059.

When you visit the website

The website is hosted by Cloudflare. Like any web host, Cloudflare records technical connection data: your IP address, the date and time, the page requested and information about your browser. This data is used to display the website and to protect it against attacks, which is our legitimate interest. Cloudflare keeps it for a limited period that it sets itself.

Our domain name is registered with GoDaddy. If you use the address without www (villataouzert.com), GoDaddy redirects you to www.villataouzert.com and, to do so, receives the same technical connection data, which it keeps for a period it sets itself.

We do not use any analytics, advertising or tracking tools.

When you book

The form on this website sends our booking page only your arrival date, the number of nights, the number of adults and children, the page language and, if you have one, your promo code, along with a note that you came from our website.

You complete your booking on the page of Beds24, our booking software (Beds24 GmbH, Berlin). There you enter, among other things, your name, your contact details, the details of a bank card that guarantees the booking and, if you wish, any special requests. Beds24 processes this data on our behalf, on servers located in Germany.

We use this data to record and prepare your stay, to write to you about it and to issue the invoice. It is necessary for the contract for your stay: without the required fields, we cannot confirm your booking.

When you write to us

If you contact us by WhatsApp, phone, e-mail or through the question form on the booking page, we receive your name, your number or e-mail address and your message. We use them to reply to you and prepare your stay: this is necessary to respond to your request, before or during your booking.

The WhatsApp, phone and e-mail links on this website send nothing until you click on them. If you write to us on WhatsApp, WhatsApp also applies its own privacy rules.

When you arrive

Tunisian Law No. 68-7 of 8 March 1968 requires us to declare our foreign guests to the police or the National Guard. To do so, we record the details of your passport or identity card when you arrive. This information is mandatory: without it, we cannot make this declaration.

We also keep invoices, as Tunisian law requires.

For people who are in the European Union, both of these uses are based on our legitimate interest in complying with the law of the country where we are established.

Who receives your data

We do not sell your data or use it for advertising. It is shared with the following recipients, each for its own role:

• Beds24 GmbH, Berlin, Germany: our booking software, acting on our behalf.
• Cloudflare, Inc., San Francisco, United States: website hosting, on our behalf.
• GoDaddy, Tempe, United States: our domain name registrar, which redirects the address without www to the website on our behalf.
• Microsoft: our e-mail service, on our behalf.
• WhatsApp (WhatsApp Ireland Limited for users in the European Region): only if you choose to write to us on WhatsApp.
• Google: the Google Maps map on the booking page, which receives your IP address when you open that page.
• The bank that runs our payment terminal, if you pay by card on site.
• The driver or guide who provides a transfer or excursion you ask us for, so that it can be organised.
• The Tunisian police or National Guard, for the declaration of foreign guests.
• The people who keep our accounts, for invoices.

In which countries

Your data is processed in the following countries:

• Tunisia: this is where we are established.
• Germany: Beds24, our booking software.
• United States and data centres around the world: Cloudflare, for website hosting.
• United States: GoDaddy, for redirecting the address without www.
• United States: Google, for the map on the booking page.
• European Union or United States: Microsoft, for our e-mails, depending on where its data centres are located.

Transfers outside the European Union

The United States is covered by an adequacy decision of the European Commission for companies certified under the EU-US Data Privacy Framework, which include Cloudflare, Google and Microsoft. GoDaddy states that it is also certified.

Tunisia, on the other hand, is not. When we view bookings hosted by Beds24 in Germany from Tozeur, this transfer is necessary for the performance of your accommodation contract (Article 49(1)(b) GDPR).

How long we keep your data

• Enquiries without a booking (e-mails, WhatsApp conversations): 2 years after our last exchange.
• Booking records, including the information recorded on arrival: 3 years after your stay.
• Invoices: 10 years, as Tunisian law requires.
• Card details used to guarantee the booking: deleted automatically by Beds24 a few days after you leave.
• Technical connection data: a limited period set by Cloudflare and, for redirecting the address without www, a period set by GoDaddy.

Security

The website uses an encrypted connection (HTTPS). Your card details never pass through this website: you enter them on the Beds24 page. Only the people at Villa Taouzert who need your data for your stay have access to it. Beds24, Cloudflare, GoDaddy and Microsoft process it on our behalf, under their contractual data protection commitments.

Your rights

You can ask to access, correct or erase your data, ask for its use to be restricted, receive it in a commonly used format and withdraw at any time any consent you have given. Some data must, however, be kept because the law requires it, such as invoices.

You can also object at any time to the use of your data, in particular when it is based on our legitimate interest.

Write to us at sales@villataouzert.com: we reply within one month.

If you feel your rights are not being respected, you can contact the National Authority for the Protection of Personal Data (INPDP) in Tunisia or, if you live in the European Union, the data protection authority in your country.

Cookies

This website does not set any cookies itself and does not store any information about you in your browser. Your browser only caches the website's files (images, videos, fonts) so that it displays faster. The fonts are hosted on the website itself: when you visit it, your browser connects only to our web host, Cloudflare (and, if you use the address without www, briefly to GoDaddy for the redirect), never to Google or any other service. That is why there is no cookie banner.

If some of Cloudflare's protections against bots are switched on, Cloudflare may set a security cookie (__cf_bm, which expires after 30 minutes of inactivity, or cf_clearance, set after a verification check) to tell visitors apart from bots. This cookie is strictly necessary for the website's security and is not used to track you.

The booking page, hosted by Beds24 on beds24.com, may use its own cookies. It also displays a Google Maps map: your browser then connects to Google's servers, and Google receives your IP address and may set its own cookies.

Automated decisions

We do not make any automated decisions about you and we do not carry out any profiling.

Changes

We may update this page. The date shown at the top is the date of the latest version.