PRIVACY POLICY

Last Updated: June 2026
Data Controller: MARIVAUX SCOMM,
Boulevard Adolphe Max 98, 1000 Brussels, Belgium
(VAT: BE0442.904.176)

At Marivaux Hotel Brussels, we are dedicated to protecting your privacy and safeguarding your personal data in full compliance with the EU General Data Protection Regulation (GDPR) and the Belgian Data Protection Act of 5 July 2018. This Privacy Policy explains how we collect, use, disclose, and protect your data when you interact with us through our website, reservation systems, or during your stay.

Types of Personal Data We Collect

We collect information necessary to provide you with luxury hospitality services. This may include:

Identity & Contact Data: Name, home address, email address, telephone number, date of birth, nationality, and passport/ID details (collected exclusively for statutory guest registration obligations under Belgian law).
Financial Data: Credit card details, billing address, and transaction history.
Stay & Preference Data: Arrival/departure dates, room preferences, dietary requirements, and leisure activity choices.
Special Categories of Data: Health data or accessibility requirements (e.g., wheelchair access or specific medical conditions affecting your stay), processed only with your explicit consent.
Digital & Technical Data: IP address, browser type, cookie identifiers, and website usage data.
Legal Bases and Purposes for Data Processing

Under the GDPR, we only process your data when we have a valid legal basis. The table below outlines how and why your data is used:

Purpose of Processing Categories of Data Involved Legal Basis (GDPR)
Fulfilling Reservations & Stays: Processing bookings, check-ins, payments, and special requests. Identity, Contact, Financial, and Preference Data. Performance of a Contract (Art. 6(1)(b) GDPR).
Legal Compliance: Mandatory registration of travelers with Belgian authorities and maintaining tax records. Identity, Contact, and Financial Data. Legal Obligation (Art. 6(1)(c) GDPR).
Direct Marketing: Sending newsletters, exclusive promotions, and updates about our services. Identity and Contact Data. Consent (Art. 6(1)(a) GDPR) for new users; or Legitimate Interest for existing clients (with opt-out).
Improving Services: Analyzing website usage, conducting voluntary guest surveys, and optimizing hotel operations. Digital, Technical, and Aggregate Stay Data. Legitimate Interest (Art. 6(1)(f) GDPR).

Data Retention Limits

We will not retain your personal data longer than is strictly necessary to fulfill the purposes for which it was collected or to comply with applicable legal, tax, or regulatory requirements under Belgian law.

Guest Registration Forms: Retained for the mandatory period required by local police and tourism regulations.
Financial & Invoice Records: Retained for 7 years to satisfy Belgian accounting and corporate tax statutory requirements.
Marketing Data: Retained until you withdraw your consent or opt out of our communications.
Backup Files: System backups are kept securely and overwritten automatically on a fixed, restricted cycle.
Data Sharing and International Transfers

We do not sell, rent, or lease your personal data to third parties. We only share your data with trusted entities strictly necessary to execute our operations:

Service Providers: IT support, booking engines, payment gateway processors, and marketing delivery systems, all bound by strict Data Processing Agreements (DPAs).
Legal Authorities: Public or judicial bodies when required under Belgian law.
International Transfers: If your data is transferred outside the European Economic Area (EEA), we guarantee a similar level of protection by ensuring the implementation of Standard Contractual Clauses (SCCs) approved by the European Commission, or relying on countries with an adequacy decision.
Security Safeguards

Marivaux Hotel Brussels employs robust organizational, physical, and advanced technical security measures to protect your data against unauthorized access, loss, alteration, or disclosure. All online transactions, booking entries, and data transmissions are secured using modern, industry-standard cryptographic protocols (such as TLS/HTTPS encryption) and strict internal access control policies.

Your Rights Under the GDPR

As a data subject, you possess comprehensive rights regarding your personal data under EU law. You have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Request the correction or completion of inaccurate data.
Erasure (“Right to be Forgotten”): Request the deletion of your data, provided it is no longer required for legal compliance or contractual execution.
Restriction: Request that we temporarily halt processing your data in specific scenarios (e.g., while disputing its accuracy).
Data Portability: Receive your data in a structured, machine-readable format to transfer it elsewhere.
Objection: Object at any time to data processed under legitimate interest or for direct marketing purposes.
Withdraw Consent: Withdraw your consent for future processing at any time where processing is consent-based.

How to Exercise Your Rights:

To exercise any of these rights, please contact our privacy coordinator at privacy@hotelmarivaux.be or via the physical address provided below.

Verification Note: To protect your security and privacy, we must verify your identity before processing your request. We will ask you to provide identifying information already known to us (such as a booking reference or registered email). We will not request a copy of your official ID card unless your identity cannot be confirmed through less intrusive means.

Online Technologies (Cookies)

Our website utilizes cookies and similar tracking technologies to enhance user navigation, analyze site traffic, and deliver personalized content.

Essential Cookies: Necessary for the functional performance of the website and reservation process.
Analytical/Marketing Cookies: Deployed only if you provide your explicit opt-in consent via our cookie consent banner upon landing on our site. You can modify or withdraw your cookie preferences at any time through your browser settings or our website’s consent manager.
Jurisdiction and Regulatory Authority

This Privacy Policy is exclusively governed by and construed in accordance with Belgian law. Any disputes arising under or in connection with this policy fall under the exclusive jurisdiction of the Courts of Brussels.

If you believe that Marivaux Hotel Brussels has not processed your data in compliance with data protection laws, you have the right to lodge a formal complaint with the Belgian Data Protection Authority (APD / GBA):

Address: Rue de la Presse 35, 1000 Brussels
Website: dataprotectionauthority.be
Contact Details

For any questions, concerns, or data protection inquiries, please contact us directly:

MARIVAUX SCOMM
Boulevard Adolphe Max 98
1000 Brussels, Belgium
Email: privacy@hotelmarivaux.be (Recommended for privacy requests)
Phone: +32 2 227 03 00

We reserve the right to update this policy periodically to reflect changes in our legal obligations or operational systems. Revised versions will be immediately available on our public platforms.