Privacy Policy

1. Data Controller

Zorion Etxea is operated as a registered bed & breakfast (SIRET 929 839 223 00013), located in Hendaye (64700), France. For any questions about this policy, please contact us at zorionetxea64700@gmail.com.

2. Data We Collect

3. Legal Basis

• Contact form — legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR).
• Analytics — your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by clicking "Decline" in the cookie banner, which will appear again if you clear your browser data.

4. Third-Party Processors

We share data only with the processors listed below, each bound by a data processing agreement:

• Resend Inc. — email delivery (contact form messages).
• Google LLC — Google Analytics 4 (usage analytics, consent only).
• Vercel Inc. — website hosting and Vercel Analytics (usage analytics, consent only).

5. International Data Transfers

Our processors are US-based companies. Transfers to the United States are covered by Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent safeguards, as required by GDPR Chapter V.

6. Data Retention

• Contact form messages — retained for as long as necessary to respond to your enquiry, then deleted.
• Analytics data — retained for 14 months (Google Analytics default setting), then automatically deleted.
• Cookie preference — stored locally in your browser until you clear your browsing data.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability for data you have provided.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at zorionetxea64700@gmail.com. We will respond within 30 days.

8. Complaints

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the French data protection authority:

• CNIL — Commission Nationale de l'Informatique et des Libertés
• 3 Place de Fontenoy, 75007 Paris, France
• www.cnil.fr