Where we got your details
If we contacted your accommodation business and you never gave us your details, this page explains where they came from and how to stop us using them.
Vidimo sells compliance software to accommodation businesses. To find the businesses it might help, we read the public registers that each country requires accommodation providers to appear in. If we have written to you, your entry in one of those registers is where your details came from. You never gave them to us, and this page is how we tell you what we hold.
You can tell us to stop at any time, and we will, permanently. You do not have to give a reason, and it costs you nothing. Skip to how to object or be erased.
Who is responsible
Nuage is the data controller for the details described on this page. Write to us at privacy@vidimo.app or by post at Nuage, 60 rue François 1er, 75008 Paris, France.
Where your details came from
From the official public register of accommodation providers in your country, published by the authority that maintains it. In Slovenia that is the Register nastanitvenih obratov (RNO), published by AJPES. As we enter further European markets we read that market's equivalent register; the source of any particular entry is always a public register of this kind, never a purchased list, never a scraped booking site, and never a third-party data broker.
We take only what the register itself publishes: the name of the accommodation and its operator, the operator's registered address, the registration number, the legal form, the type and size of the accommodation, and any contact email, telephone number or website the register lists.
Why we hold them, and on what legal basis
We hold them to assess whether Vidimo is relevant to your business and, where the law of your country permits it, to contact you about it once. The legal basis is our legitimate interest in direct marketing to businesses (GDPR art. 6(1)(f)). We have weighed that interest against your interests and rights: the details are already public by law, the volume we send is low, and a single approach that is easy to refuse is what we consider proportionate.
That balance does not override the rules on the channel itself. Whether we may email, telephone or write to you at all is decided separately, per country and per channel, by that country's electronic-communications law. Where the law requires your prior consent, we do not contact you on that channel without it.
Who else sees them
Nobody buys or receives this data from us. It is held in our own customer-relationship system and processed by the service providers that run our infrastructure and send our email, listed on our subprocessors page. We do not sell, rent or share it for anyone else's marketing.
How long we keep them
Three years, counted from when we first took your entry from the register. That is the period the French data protection authority (the CNIL) sets for prospect data, and Nuage is established in France. The clock does not restart when the register republishes the same entry; it would restart if you contacted us.
When the three years are up we delete the entry, the contact details, and the sales record we had built around it. If a conversation had actually started by then — you replied, or we had opened a file on it — that file is kept under the basis it was opened on, and becoming a customer moves you to our main privacy policy entirely.
Your business may still be listed in the public register after that, and a later reading of it could pick your entry up again as a new prospect — with nothing we had previously built up about you, because that was deleted. If you would rather that never happened, ask us to stop and we will record it permanently: an objection has no expiry date.
How to object, or ask us to erase you
Email privacy@vidimo.app or write to Nuage, 60 rue François 1er, 75008 Paris, France. Tell us the name of the accommodation business, and whether you want us to:
- Stop contacting you (GDPR art. 21(2)). We must stop, and there is nothing for us to weigh. Say if you only mean one channel — for example, no email but post is fine — otherwise we stop on every channel.
- Erase what we hold (GDPR art. 17). We delete the contact details and the operator's details, and we keep only the minimum needed to recognise the entry if the register republishes it, so that our record of your request survives and we do not take your details again on the next reading.
A request covers your whole business, not one property. If you operate several registered accommodations, telling us to stop through one of them stops us using any of them, including entries in other countries' registers that carry the same email address or telephone number.
We act on the request when we receive it and reply within one month. You can also ask us for a copy of what we hold, for a correction, or for a restriction on our use of it. If you are unhappy with how we have handled it, you can complain to your national data-protection authority — in Slovenia, the Informacijski pooblaščenec.
Why you are reading this rather than receiving it
Art. 14 normally requires us to give you this information directly. A national accommodation register runs to tens of thousands of entries, and writing individually to every one of them to say that we had read a public register would itself be a mass unsolicited mailing — the very thing the rule exists to limit. We therefore rely on art. 14(5)(b) and publish the information here instead, which is the condition that provision attaches. Anyone we do contact is pointed to this page in the message itself.