Personal data

Privacy policy

How Guest Intelligence collects, processes and protects your personal data, in line with GDPR.

Last updated · May 5, 2026H HOLDING S.à r.l. · RCS Luxembourg B245271 · VAT LU35277972

1. Data controller

H HOLDING S.à r.l. (Guest Intelligence), a Luxembourg company registered with RCS Luxembourg under number B245271, headquartered in Luxembourg, is the data controller for personal data collected through guest-intelligence.com and the Guest Intelligence platform.

2. Data we collect

We collect: (a) data you provide directly (contact form, demo request, sign-up) — name, work email, hotel name, optional phone; (b) technical data tied to your visit (IP address, browser, pages viewed); (c) operational data sent by your PMS once you are a customer (bookings, guest profiles).

3. Purposes

Your data is used to: respond to your requests, deliver and improve the platform, ensure service security, comply with legal obligations and — only with your consent — send commercial communications.

Processing relies, depending on the case, on contract performance, legal obligation, Guest Intelligence's legitimate interest in operating and improving its service, or your explicit consent.

5. Hosting and sub-processors

All data is hosted in Europe (France and Germany). We rely on technical sub-processors (hosting, AI model providers) selected for GDPR compliance. The current list is available on request at legal@guest-intelligence.com.

6. Retention

Prospect data: 3 years from last contact. Customer data: contract duration, plus 5 years for accounting obligations. Technical logs: 13 months.

7. Your rights

You have the right to access, rectify, erase, restrict, port and object. To exercise these rights, write to legal@guest-intelligence.com. You may also lodge a complaint with the CNPD (Luxembourg) or any European data protection authority.

8. Security

TLS encryption in transit, encryption at rest, role-based access control, regular security audits, daily backups.