Privacy policy

1. Data controller

The data controller is Résidence Royale HNM, Akpakpa Sodjatinmè, 1ère rue à droite après Ciné Concorde, Cotonou, Republic of Benin. For any question about your data, write to booking@royalhnm.com.

Data protection officer: [À COMPLÉTER]. Representative in the European Union, where applicable: [À COMPLÉTER].

2. Data we collect

We collect only the data needed for the purposes set out below. Nothing is collected without your knowledge, and we neither sell nor rent our files.

• Stay bookings — title, surname, first name, email address, telephone number, country of residence, dates of stay, number of guests, special requests.
• Table bookings — surname, first name, email, telephone, date, time, number of guests, any allergies you tell us about.
• Event quote requests — surname, first name, contact details, type of event, preferred date, number of people and a description of your project.
• Contact form — surname, first name, email, optional telephone, subject and message.
• Newsletter — email address and language of correspondence.
• Technical data — connection logs (IP address, timestamp, pages viewed), kept for security and diagnostics.

Data about allergies or food intolerances may constitute health data. It is collected on the basis of your explicit consent, handled only by the kitchen and dining staff, and deleted after the service.

We never ask for your bank details by email or over the telephone. Online payments are handled by our provider, which alone receives payment data; we keep no copy of it.

3. Purposes and legal bases

Managing bookings and stays

Performance of the contract with you, or pre-contractual steps taken at your request.

Answering contact and quote requests

Pre-contractual steps and our legitimate interest in replying to you.

Sending the newsletter

Your consent, obtained by double opt-in: your subscription takes effect only after you confirm the link sent by email. You may withdraw it at any time.

Accounting, tax and immigration record obligations

Compliance with the legal obligations binding the establishment.

Site security and fraud prevention

The establishment’s legitimate interest.

4. Retention periods

• Booking files: three years from the end of the stay, then archived for the duration of accounting obligations.
• Accounting records: ten years, as required by law.
• Contact and quote requests not followed up: three years.
• Newsletter subscribers: until consent is withdrawn, then three years at most.
• Connection logs: twelve months.

5. Recipients

Your data is available only to those departments that need it — reception, restaurant, management — and to our processors, bound by contract to confidentiality and acting solely on our instructions:

• the website and database host;
• the transactional email provider;
• the online payment provider;
• where applicable, our accountant and legal advisers.

Some providers may be established outside Benin. Such transfers are covered by appropriate safeguards — standard contractual clauses or an equivalent mechanism. Details are available on request.

6. Cookies

The site uses only cookies strictly necessary for it to work: remembering your language and keeping your session during a booking. They do not require your prior consent and are not used for advertising tracking.

The location map provided by Google does set third-party cookies. That is why it loads only after you explicitly click: until you ask for it, no data is sent to Google.

7. Your rights

Under Benin law no. 2017-20 on the digital code and, where it applies, the General Data Protection Regulation, you have the following rights:

• right of access to your data and to obtain a copy;
• right to rectification of inaccurate or incomplete data;
• right to erasure, within the limits of our legal obligations;
• right to restriction of processing;
• right to object, on grounds relating to your situation;
• right to portability of the data you provided to us;
• right to withdraw your consent at any time;
• right to give directions as to what happens to your data after your death.

To exercise these rights, write to booking@royalhnm.com setting out your request. We reply within one month. Proof of identity may be requested where there is reasonable doubt as to who you are.

8. Complaints

If, after contacting us, you consider that your rights have not been respected, you may refer the matter to the Personal Data Protection Authority (APDP) of the Republic of Benin. People resident in the European Union may also contact the supervisory authority of their country of residence.

9. Security

We apply appropriate technical and organisational measures: encryption of communications, access segregated by role, logging of connections to the administration area and regular backups. As no system is infallible, we undertake to inform you without delay of any data breach likely to result in a high risk to your rights.

10. Changes

This policy may be updated to reflect changes in the law or in our processing. The date of last update appears at the top of the page; any substantial change will be brought to your attention by appropriate means.

This English text is a courtesy translation. In the event of any discrepancy in interpretation, the French version prevails.