Privacy Policy

1. Who we are

This website is operated by Appart-Hôtel Gwendy, 3 rue de Luxembourg, L-7412 Bour, Luxembourg. For any privacy question you can reach us at hotel@gwendy.lu or +352 308 888. Appart-Hôtel Gwendy is the data controller within the meaning of the EU General Data Protection Regulation (GDPR) and the Luxembourg data protection law of 1 August 2018.

2. What data we collect and why

We only collect the personal data you send us through our forms:

• Booking request form: name, email, phone, selected room, check-in and check-out dates, number of guests, optional notes.
• Contact form: name, email, phone, subject, message.

This data is used solely to reply to your enquiry and, where applicable, to prepare and manage your stay. Legal basis: performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR).

3. Who receives your data

Form submissions are sent by email to the hotel's own inbox (hotel@gwendy.lu). To deliver these emails we use Resend (Resend, Inc., USA) as an email transactional processor. No data is sold, rented or shared with advertisers or any other third party.

4. Cookies and tracking

This website does not use any advertising, analytics or third-party tracking cookies. We do not run Google Analytics, Facebook Pixel, Google Tag Manager or similar services. The only cookie the site may set is a strictly necessary functional cookie used to remember an interface preference (sidebar state). Under Art. 5(3) of the ePrivacy Directive, strictly necessary cookies do not require consent.

Our contact page embeds a Google Maps iframe so you can locate us. When you view that page, Google may receive your IP address and set its own cookies according to Google's Privacy Policy.

5. How long we keep it

Enquiries that do not lead to a booking are kept for up to 12 months and then deleted. Booking-related data is kept for the legal retention periods applicable to Luxembourg hospitality businesses (in particular tax and accounting obligations, up to 10 years).

6. Your rights

Under the GDPR you have the right to:

• access your personal data;
• request rectification or deletion;
• request restriction of processing;
• object to processing;
• data portability;
• lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD).

To exercise any of these rights, email us at hotel@gwendy.lu.

7. Security

Data submitted through our forms is transmitted over encrypted HTTPS connections. Access to the hotel inbox is restricted to authorised staff.

8. Image credits

Several tourism illustrations on this site are licensed content:

• Vianden Castle — photo by Jeff Croisé, Wikimedia Commons, licensed under CC BY-SA 4.0.
• Luxembourg City panorama — photo by djedj, Wikimedia Commons, released under CC0 / Public Domain.
• Mullerthal cascade — photo by Cayambe, Wikimedia Commons, licensed under CC BY-SA 3.0.
• Kniddelen mat Wäinzoossiss a Moschterzooss (Luxembourgish dumplings with wine sausage and mustard sauce) — photo by Bdx, Wikimedia Commons, licensed under CC BY-SA 4.0. Source: Wikimedia Commons.

9. Updates

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision.