Privacy & cookie policy
Last updated: 14/05/25
This Privacy Policy regulates the processing of your personal data by Hotel De Castillion, with company number XXXX.XXX.XXX, located at Heilige-Geeststraat 1, 8000 Bruges. The website castillion.be (https://castillion.be/) is part of Hotel De Castillion. (hereafter: castillion.be).
Castillion.be values your privacy and wishes to process your personal data in a legal, honest and transparent way. We treat your data entirely in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR). This privacy statement explains how castillion.be processes personal data about you.
Please read this Privacy Statement carefully. It contains essential information about how we process your personal data and what cookies we use. By sharing your personal data on our website, contacting us by e-mail/phone or submitting a question/complaint, you declare that you have read this Privacy Statement.
Article 1: What is personal data?
ersonal data is any piece of information about an identified or identifiable natural person.It can include a person’s name and contact information, a date of birth, a photograph and any other piece of data that is or can be linked to a natural person, including, for example, e-mail address, phone number (even the phone number from work) or login code.
A “processing” of your personal data means any collection, retention, use, change, communication, transfer, … of this data from its initial collection to its destruction.
Article 2: What data do we process about you?
Castillion.be processes the following personal data in the context of its business:
If you contact us via the contact form on our website or by email or phone
If you contact us through the contact form on our website, by e-mail, post or by phone, we will process your contact data and the content of your message or question for the only purpose of providing you with an answer to your message or question and, in this sense, to carry out our commitment to you. We will save your data no longer than 3 months and use it only for the purpose of answering your message.
When you become a customer at Hotel De Castillion
When you become a client, we process your personal data (such as your name, first name, e-mail, address, etc.), payment and billing data, file data (offers, contracts, correspondence,…) and any other data that you voluntarily submit to us. We use this data to provide our services and their payment and billing with the legal basis of executing a contract you requested or providing the services you requested. We retain this data for 10 years after final completion for the purpose of continuity of our services and for the purpose of the contractor’s 10-year liability. We retain your billing information for legal reasons for 10 years from the calendar year following the billing date.
Processing of supplier data and contractors/associates
If you are a supplier or contractor, we process your supplier and contractor data. This typically includes your company data, contact details of your involved staff members, financial and billing data. This data is provided to us by you as a supplier and processed within the framework of the performance of our contract. We keep this data in accordance with our accounting obligations for a period of 10 years.
Customer quotes and testimonials
If you give us permission, we will process your data to post “what do our customers think” quotes or testimonials on our website. For this we use your first name, name, position, quote and photo. This data may be posted on our website and on our social media channels such as Facebook, LinkedIn and Instagram. You can request us to remove this data from our website and channels at any time.
If you are applying for a job at Hotel De Castillion
If you apply for a job we offer, through our website, by mail, by phone, or through another job site, we process your personal and application data to manage the application process.
The data we process for this purpose are your contact details, resume, cover letter and other data you have communicated with us. When you provide sensitive data voluntarily, you thereby give explicit consent to its processing.
Your application data will not be kept longer than necessary for candidate search purposes.
If you contact our customer care
We may also process your personal data in the context of our customer care. This is the case, for example, if you send us complaints or compliments via our website, by e-mail, letter or telephone or even if we conduct customer satisfaction surveys.
In these cases, depending on the specific situation, we process your name, address, e-mail address, telephone number, the content of your complaint or compliment, your address data. The data we process in this context may vary depending on the situation, but we always ensure that we do not process more data than is strictly necessary in each specific situation.
Those personal data you share with us in this context, we obtained directly from you and we use them exclusively in the context of handling your complaint or compliment or in the context of our customer satisfaction, based on our legitimate interest to work on customer satisfaction and quality of service.
After handling your complaint or compliment or after processing your responses to our customer satisfaction surveys, we keep your data for 1 year.
Our social media and online marketing
Hotel de Castillion obviously uses social media accounts too. You’ll find us on Facebook, on Instagram, on Messenger, on LinkedIn, on Google, for example. If you visit our social media channels, it is first of all important to know that in doing so you are sharing personal data with the company that owns the social medium in question. This happens outside of our control and responsibility. If you want to know how social media handle your data, we recommend that you read the privacy statement of each social media carefully.
When you interact with us on our social media, you also share personal data with us. You do so on your own initiative and we have a legitimate interest to process this data in the context of our contact with you. What data we process exactly depends entirely on you. For example, you potentially share with us your profile name or username, your real name, photo, policy number, address data, and any content question you ask us or comment you leave.
While visiting our website
When you visit our website, we ask your permission to set cookies and other trackers (see further in the “Cookies” section for more information on our use of cookies).
If you allow us to set analytical cookies or trackers, we collect analytical information about your browsing behavior on our website, such as your IP address, your (limited) location data, your unique online ID, information about the device you use to visit our website, the website from which you clicked through to our website and your browsing behavior on our website. We do this to improve your user experience on our website based on your preferences.
If you give us permission to set functional cookies, we can activate the spam filter on our contact form and you help us keep our incoming data clean.
If you give us permission to set marketing cookies, we can link your actions as a website user to our CRM Tool Teamleader and in this way we can deduplicate completed contact forms in our database.
More information about cookies can be found in article 6 of our privacy policy.
Article 3: Who receives your personal data?
We do not disclose your personal data to third parties for commercial reasons.
However, if necessary for internal reorganization or transfer of activities, we may transfer your data to other entities within our group or to third parties who may ensure the continuity of our services. In this case, we will always inform you in advance to the extent possible, but you understand that this is not technically or commercially feasible in all circumstances.
Castillion.be may appoint third-party processors to provide specific services. These service providers will perform data processing on our behalf and on our order (in the capacity of processor). These are the service providers we use for our broad administration, informatics and accounting. An up to date list of the external processors with who personal data is shared is available upon request at info@castillion.be.
Castillion.be will carefully select processors in accordance with applicable data protection legislation. In addition, Castillion.be will ensure that processing operations are carried out in accordance with the terms of any written contract and with legal data processing regulations.
We always try to make maximum use of European suppliers, but if we have to use non-European third parties, we ensure that your data is just as secure outside Europe as it is here in Europe. As such, where necessary, we enter into Standard Contractual Clauses with these partners and provide additional safeguards.
In rare cases, we may be required to disclose personal data based on a court order or to satisfy other mandatory laws or regulations. We will try to give you advance notice to the best of our ability, unless we cannot do so for legal reasons.
Article 4: What are your rights regarding the protection of your personal data?
As a data subject, if the conditions are met as stated in the AVG, you are entitled to:
Information about your personal data: You have the right to know about your personal data and our use of that personal data at any time, free of charge, or to request a copy of it.
Rectification and erasure: You also have the right to request the correction or (in some cases) deletion of your data.
Restriction of processing: You may also ask to restrict the processing of your personal data in a number of cases listed in the GDPR.
Object to the processing of your personal data: You have the right to object to the processing of your personal data if you have serious and legitimate reasons to do so that exceed our need to process your data or to withdraw a previously given permission. You also have the right to object at any time to the use of personal data for direct marketing purposes, even without having to provide a reason.
The transfer of your data: You have the right to request your personal data in digital and readable form and/or to have it transferred to another service provider of your choice.
If you wish to use any of these rights, please let us know as specifically as possible. When exercising your rights, castillion.be needs to be able to verify your identity to prevent someone else from impersonating you. Therefore, if in doubt, we may always request a copy of a valid ID. You can contact us by e-mail addressed to info@castillion.be or by post at the following address: Heilige-Geeststraat 1, 8000 Bruges.
Finally, you have the right to file a complaint with the Belgian Data Protection Authority if it appears that we have not responded appropriately within 30 days to a request based on one of the above rights:
You can also go to civil court to seek damages.
Article 5: How do we secure your personal data?
We have taken appropriate technical and organizational security measures to ensure the safety of your personal data. For example, our server and software tools are secured with a username and password, access restrictions apply, and we use encryption whenever possible. Furthermore, we provide training to our staff on data protection, have internal guidelines around data security and take appropriate security in the form of up to date antivirus and firewall protection.
Under no circumstances can castillion.be be held liable for any direct or indirect damage resulting from an incorrect or illegal use by a third party of the personal data.
Article 6: Cookies
Our website uses cookies and similar technologies. This helps us to provide you with a better user experience when you visit our website and also allows us to optimize our website. We set only strictly necessary cookies without your prior consent. For all other cookies we ask your permission via our cookie banner. You can manage your cookie preferences at any time via the “manage cookie preferences” link in our footer. Your cookie consent is valid for 6 months, after which we will ask your preferences again.
The cookie list below gives you an overview of the cookies our website uses:
Cookie list
A cookie is a small text file containing data that a website (when a user visits it) wants to store on your device in order to remember information such as your language preference or login information. These cookies are set by us and are called internal cookies. We also use external cookies or third party cookies, which are cookies from a different domain than the website you are on. We use cookies and other tracking technologies specifically for the following purposes:
Strictly necessary cookies
These cookies are necessary for our website to work correctly and are therefore placed without your consent. For example, we use them to query and save your cookie consent. We do not collect personal data with these cookies and never pass on the information collected to third parties.
Name: moove_gdpr_popup
Host: castillion.be
Retention period: 365 days
Description:This cookie is used to store your your cookie preferences.
Analytical cookies
We want to keep improving our website and services. Analytical cookies are a useful tool for that. They provide us with information such as the number of visitors on our website, which pages are the most popular, and so on. We never place them without your permission, but would of course appreciate it if you would give us your permission.
Name: _ga
Host: castillion.be
Retention period: 365 days
Description: This is the main cookie used by Google Analytics, and allows us to distinguish visitors from each other. Every site that implements Google Analytics, including Google services, uses this cookie.
Name: _ga_xxxxxxxxxx
Host: castillion.be
Retention period: 365 days
Description: This cookie is used to calculate visitor, session and campaign data and track site usage for our website analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.
Marketing cookies
These cookies are set for marketing purposes and are used to track your browsing habits after you have visited our website and/or to show you personalized advertisements. These cookies can be placed by us or by third parties on our website. You determine whether you give permission for such marketing cookies to be placed.
Name: _gcl_ai
Host: castillion.be
Retention period: 89 days
Description: This is a first-party cookie for the “Conversion Linker” functionality of Google Ads: it takes the information from ad clicks and stores it in a first-party cookie so that conversions can be attributed outside the ad landing page.
If you notice other cookies being set through our website, we thank you for notifying us immediately so that we can make the necessary adjustments.
We provide you with as much information as possible about cookies placed by third parties. If you still want to know more, we would like to refer you to the privacy statements of these parties on their respective websites. Please note that we do not exercise any influence on the content of those statements, nor on the content of the cookies of these third parties.
If you have further questions or comments about the processing of your personal data, please contact us by e-mail to info@castillion.be or by mail to Heilige-Geeststraat 1, 8000 Bruges.
Under no circumstances can castillion.be be held liable for any direct or indirect damage resulting from an incorrect or illegal use by a third party of the personal data.
