Privacy policy

This page explains what personal data we collect on this site, why, how long we keep it and how to exercise your rights. Last updated: 9 November 2026.

Data controller

ATRIUM HOTEL, SAS, 9 rue des Pèlerins, 65100 Lourdes, France. Contact for any question about your data: contact@atriumlourdes.com or by post to the address above.

The data we collect

Bookings. When you book, you are taken to our booking engine, provided by Thaïs. Your name, contact details, stay dates and payment information are processed there to carry out your booking. Thaïs acts on our behalf as a data processor. Card details never pass through this site.

Contact and quote forms. We use your name, email address, phone number if given and your message to reply to you. If you tick the box provided, we may also send you our offers by email; you can unsubscribe at any time. Anti-spam protection (Cloudflare Turnstile) checks that the form is filled in by a person.

Audience measurement. Only with your consent, we measure site traffic with Google Analytics 4 to understand which pages are useful. Without your consent, no measurement tool is triggered. You can change your mind at any time using the “Manage cookies” link at the bottom of every page.

Why, and on what legal basis

  • Managing your booking and stay: performance of a contract.
  • Replying to your requests: our legitimate interest in replying to you.
  • Sending you our offers and measuring site traffic: your consent.
  • Keeping our accounts and meeting our obligations as a hotel: legal obligation.

How long we keep your data

  • Contact requests with no follow-up: 3 years after the last exchange.
  • Data linked to a stay: for the duration of the customer relationship, then 3 years to send you our offers if you agreed.
  • Invoices and accounting records: 10 years, as required by law.
  • Audience measurement cookies: 13 months maximum.

Who can access your data

Only the hotel team and our technical providers, each for its own task: Thaïs (booking engine), IONOS (website hosting, in France), Cloudflare (form anti-spam) and Google (audience measurement, if you accept). Google may process some data outside the European Union, under the safeguards provided by the GDPR. We never sell your data.

Your rights

At any time you can access your data, have it corrected or deleted, restrict or object to its use, ask to receive a copy and withdraw your consent. Write to us at contact@atriumlourdes.com: we reply within one month. If you believe your rights are not being respected, you can complain to the CNIL, the French data protection authority (www.cnil.fr).

Cookies

Details of the cookies used and how to change your choices are in our cookie policy (in French).