Privacy policy.

Data controller

The controller of the personal data collected on this website is Villa Didon SA, with its registered office at 2, rue Ali Bach Hamba, 1000 Tunis, Tunisia — operator of the Villa Didon hotel, Rue Mendès France, Byrsa, Carthage 2016.

For any question about your data: finance@villadidoncarthage.com.

Data we collect

We collect only the data we need, and only when you provide it to us or browse the website:

Through our forms (Le Restô, Sur-mesure, Banquet)

• Identity: first name, last name, company or organisation;
• Contact details: email address, phone number;
• Details of your enquiry: type of event, date, number of guests, setup, free-text message.
• For table reservations (Le Restô): name, phone number, date and time of the reservation, number of guests, optional message — no email address is collected.

When you make a booking

Stays are booked through our service provider HotelRunner; the data you enter is processed on its platform, under its own privacy policy.

Automatically

Technical browsing data and cookies (see the Cookies section): IP address, device and browser type, pages visited.

Purposes & legal bases

• Responding to your event or information enquiries — legal basis: your consent and pre-contractual measures;
• Managing your bookings and your stay — legal basis: performance of the contract;
• Improving the website and measuring audience — legal basis: our legitimate interest, or your consent for non-essential cookies;
• Sending you information about our offers, only if you have opted in — legal basis: your consent.

Recipients of your data

Your data is intended for the Villa Didon teams and is never sold. It may be shared with our technical service providers, strictly as needed to deliver the service:

• The HotelRunner booking engine;
• Our hosting provider: Cloudflare, Inc. (Cloudflare Pages);
• Our analytics and form tools: Cloudflare Web Analytics (cookieless, identifier-free analytics), Google Search Console (search-engine-side measurement, which places nothing on this site), Web3Forms (form delivery) and Survey-flow (review collection, reached by outbound link).

Transfers outside Tunisia

Some service providers may host or process data outside Tunisia or the European Union. Where this is the case, such transfers are covered by appropriate safeguards: Web3Forms (processing and delivery of form enquiries), Cloudflare (site hosting and analytics), HotelRunner (booking engine, reached by outbound link) and Survey-flow (review collection, reached by outbound link). These transfers rely on the contractual commitments of those providers, in particular standard contractual clauses.

Retention periods

• Form enquiries: 3 years after last contact;
• Booking and stay data: 10 years, the statutory retention period for accounting records;
• Cookies: not applicable — this site places none.

Your rights

You may exercise the following rights over your data at any time:

• Right of access and rectification;
• Right to erasure and to restriction of processing;
• Right to object and right to data portability;
• Right to withdraw your consent at any time.

Cookies

This website uses cookies that are necessary for it to function and, subject to your consent, analytics cookies. You can configure your browser at any time to refuse or delete them.

Details of the cookies placed: none. This site places no cookies, uses no advertising trackers and loads no external resources. Analytics are collected without cookies or identifiers. No consent banner is therefore required.

Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

Complaints

If you believe your rights have not been respected, you may lodge a complaint with the Instance Nationale de Protection des Données Personnelles (INPDP) in Tunisia. Visitors from the European Union may also contact the supervisory authority in their own country (in France, the CNIL).