Privacy policy

Data controller

VHS VIVRA HOSPITALITY (trading as Vivra Hospitality), a French SASU, 2 avenue Debidour, 75019 Paris, France.
For questions about personal data: contact@vivra-hospitality.fr.

Data collected and source

The contact form sends enquiries directly from the website. It collects the visitor’s name, hotel, email address, requested service and any information provided voluntarily. This data is sent securely to a third-party form-processing provider, FormSubmit (formsubmit.co), which forwards it to Vivra Hospitality by email. The website itself does not store enquiries in its own database. Please do not include sensitive or confidential information in the free-text field.

Purposes and legal bases

This data is used to answer enquiries, discuss staffing requirements, prepare quotations and follow up on business communications. Depending on the request, processing is based on steps taken at the data subject's request prior to entering into a contract (GDPR Article 6(1)(b)), or the company's legitimate interest in responding to business enquiries (GDPR Article 6(1)(f)).

Recipients and providers

Enquiries pass through FormSubmit (formsubmit.co), a third-party form processing service, before delivery by email through OVHcloud (Zimbra). Received messages are accessible to authorized Vivra Hospitality staff. The website is hosted by Cloudflare Pages (Cloudflare, Inc.), which may process technical data for operation and security. Read the FormSubmit privacy policy.

Retention periods

According to the provider’s published documentation, FormSubmit may retain form submissions for up to 30 days. Once received by email, data relating to enquiries that do not result in a business relationship is retained for no longer than three years after the prospect’s most recent contact. Communications leading to a contractual relationship are retained for as long as necessary to manage that contract and comply with applicable legal requirements.

International transfers

Cloudflare, FormSubmit and some email providers may process or make data accessible outside the European Economic Area. FormSubmit does not clearly identify the hosting location or applicable international transfer safeguards in its public policy; Vivra Hospitality must verify these before enabling the form publicly. Any international data transfers must comply with GDPR requirements. Contact Vivra Hospitality for details.

Your rights

Under the GDPR, and subject to the conditions set out in applicable law, you may request access to, correction or deletion of your personal data, restriction of processing and, where applicable, object to processing or request data portability. Send requests to contact@vivra-hospitality.fr. You may also lodge a complaint with the French data protection authority, the CNIL.

Client reviews and recommendations

Following a service, Vivra Hospitality may send a personal feedback link by email, SMS or WhatsApp. Clients can provide a rating from 1 to 5 and a comment. Reviews are only made public if the client explicitly agrees to the publication of the rating, comment, displayed name and optional hotel name. This information is shown on our website and stored in a Cloudflare D1 database. Invitation links expire after 30 days and can be used once; only a technical hash of each link is stored. Email addresses, telephone numbers and private communications are not displayed. The legal basis for public reviews is the data subject's consent (GDPR Art. 6(1)(a)). Reviews are kept while publication consent remains in place, subject to any applicable legal retention requirements. Requests for removal or correction can be sent to contact@vivra-hospitality.fr. Replies sent directly via email, SMS or WhatsApp are not imported automatically: explicit consent is required before a review can be entered on the website. Cloudflare's processing and international transfer arrangements should be checked for GDPR compliance.

Cookies and technical data

This version of the website does not use advertising cookies or analytics software. The images, stylesheets and scripts are served locally, without externally hosted fonts. FormSubmit is contacted only when a visitor submits the enquiry form. Cloudflare Pages may process technical logs and connection data to provide and secure the hosting service.