Privacy policy

This privacy policy describes how RESAPASS TRAVEL ("Resapass") collects, processes and protects your personal data when you use resapass.co and any related mobile applications.

Data controller

RESAPASS TRAVEL is the data controller for the personal data collected on the platform. Contact: help@resapass.co.

What we collect

Account details (name, email, phone, preferred language).
Booking data (dates, guests, hotel, price, payment status).
Technical data (IP address, device, browser, pages visited) via analytics cookies.
Communications with our support team.

Why we process it

Fulfil bookings and manage your account (contractual necessity).
Provide customer support and process payments (contractual necessity).
Send transactional emails and, with consent, marketing messages.
Prevent fraud and comply with our legal obligations.
Improve the platform (legitimate interest, aggregated analytics).

Recipients

Data is shared strictly on a need-to-know basis with our hotel and technical partners (Ratehawk, Stripe, Mailgun, Cloudflare, Amazon Web Services, Supabase). We never sell your data.

Retention

Account data is kept while your account is active; booking records are retained for 10 years for accounting and tax purposes. Marketing data is deleted 3 years after the last interaction.

Your rights

Under the GDPR you may access, rectify, erase, restrict, port or object to the processing of your personal data. Email help@resapass.co to exercise any of these rights. You may also lodge a complaint with the CNIL (French supervisory authority).

Cookies

We use strictly necessary cookies for the site to work and, with your consent, analytics and marketing cookies. You can change your choice at any time from the cookie banner.

Last updated: 25 April 2025. The French version at /politique-de-confidentialite is the legally binding reference.