Privacy policy.

Data controller

The controller of the personal data collected on this website is Villa Didon SA, with its registered office at 2, rue Ali Bach Hamba, 1000 Tunis, Tunisia, operator of the Villa Didon hotel, Rue Mendès France, Byrsa, Carthage 2016.

For any question about your data: finance@villadidoncarthage.com.

Data we collect

We collect only the data we need, and only when you provide it to us or browse the website:

Through our forms (Le RestÔ, Sur-mesure, Banquet)

• Identity: first name, last name, company or organisation;
• Contact details: email address, phone number;
• Details of your enquiry: type of event, date, number of guests, setup, free-text message.
• For table reservations (Le RestÔ): name, phone number, date and time of the reservation, number of guests, optional message; no email address is collected.

When you make a booking

When you book on this site, we collect: title, first name, last name, email, telephone, country of residence, dates and suite type, number of guests, estimated arrival time, language, special requests, and the follow-up of your payment (amount, reference, status).

Payment takes place on the secure ClicToPay page: you enter your card details there directly, and this site never receives or stores them. If you book through the HotelRunner engine, the data you enter is processed on its platform, under its own privacy policy.

Automatically

Technical browsing data and cookies (see the Cookies section): IP address, device and browser type, pages visited.

Purposes & legal bases

• Responding to your event or information enquiries, legal basis: your consent and pre-contractual measures;
• Managing your bookings and your stay, legal basis: performance of the contract;
• Improving the website and measuring audience, legal basis: our legitimate interest, or your consent for non-essential cookies;
• Sending you information about our offers, only if you have opted in, legal basis: your consent.

Recipients of your data

Your data is intended for the Villa Didon teams and is never sold. It may be shared with our technical service providers, strictly as needed to deliver the service:

• The ClicToPay payment service (Société Monétique Tunisie) and our bank, for payment and refunds;
• Our database: Supabase (servers in Paris);
• Our email delivery service: Resend (Ireland region);
• The HotelRunner booking engine;
• Our hosting provider: Vercel Inc.;
• Our analytics and form tools: Vercel Web Analytics and Cloudflare Web Analytics (cookieless analytics with no persistent identifier), Microsoft Clarity (browsing analysis, only with your consent: pages viewed, clicks, scrolling and anonymised session recording), Google Search Console and Bing Webmaster Tools (search-engine-side measurement, which places nothing on this site), Web3Forms (form delivery) and Survey-flow (review collection, reached by outbound link).

Transfers outside Tunisia

Some service providers may host or process data outside Tunisia or the European Union. Where this is the case, such transfers are covered by appropriate safeguards: Web3Forms (processing and delivery of form enquiries), Vercel (site hosting and analytics), Supabase (database), Resend (email delivery), Cloudflare (analytics), Microsoft (Clarity, only with your consent), HotelRunner (booking engine, reached by outbound link) and Survey-flow (review collection, reached by outbound link). These transfers rely on the contractual commitments of those providers, in particular standard contractual clauses.

Retention periods

• Form enquiries: 3 years after last contact;
• Booking and stay data: 10 years, the statutory retention period for accounting records;
• Proof of payment: 18 months;
• Cookies: 24 hours for the technical cookie of online booking; 90 days for the staff workstation cookie on the administration page.

Your rights

You may exercise the following rights over your data at any time:

• Right of access and rectification;
• Right to erasure and to restriction of processing;
• Right to object and right to data portability;
• Right to withdraw your consent at any time.

Cookies

This website uses cookies that are necessary for it to function and, subject to your consent, analytics cookies. You can configure your browser at any time to refuse or delete them.

Details of the cookies placed: information pages place none, unless you accept Microsoft Clarity's analytics cookies in the banner (notably _clck and _clsk). Only the online booking pages and the staff administration page place a strictly necessary technical cookie: a random identifier, with no personal data, used to limit abuse (one booking awaiting payment at a time per device) and, for staff, to keep the login session. This site uses no advertising trackers. Vercel and Cloudflare collect analytics without cookies or identifiers. Microsoft Clarity is never used on the booking, payment and administration pages. Your choice is kept for 6 months on your device, and you can change it at any time. Change my choice

Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

Complaints

If you believe your rights have not been respected, you may lodge a complaint with the Instance Nationale de Protection des Données Personnelles (INPDP) in Tunisia. Visitors from the European Union may also contact the supervisory authority in their own country (in France, the CNIL).