Where we got your details
If a message from us sent you here, this page explains where your details came from and how to stop us using them.
Vidimo sells compliance software to accommodation businesses. To find the businesses it might help, we read the public registers that some countries require accommodation providers to appear in. If a message from us sent you to this page, your entry in one of those registers is where your details came from. You never gave them to us, and this page is how we tell you what we hold.
You can tell us to stop at any time, and we will, permanently. You do not have to give a reason, and it costs you nothing. Skip to how to object or be erased.
Who is responsible
Nuage is the data controller for the details described on this page. Write to us at privacy@vidimo.app or by post at Nuage, 60 rue François 1er, 75008 Paris, France.
Where your details came from
From an official public register of accommodation providers, published by the authority that maintains it. In Slovenia that is the Register nastanitvenih obratov (RNO), published by AJPES. As we enter further European markets we read the equivalent register wherever one exists. This page covers only details we took from a register of this kind.
We take only what the register itself publishes: the name of the accommodation and its operator, the operator's registered address, the registration number, the legal form, the type and size of the accommodation, and any contact email, telephone number or website the register lists. We keep the entry in the form the register publishes it: if it carries fields beyond those listed here, we keep those too.
Why we hold them, and on what legal basis
We hold them to assess whether Vidimo is relevant to your business and, where the law of your country permits it, to write to you about it. The legal basis is our legitimate interest in direct marketing to accommodation operators (GDPR art. 6(1)(f)). We have weighed that interest against your interests and your fundamental rights and freedoms: the details are already public by law, what we write about is your business rather than you personally, the volume we send is low, and we stop writing the moment you tell us to. An approach this easy to refuse is what we consider proportionate.
That balance does not override the rules on the channel itself. Whether we may email, telephone or write to you at all is decided separately, per country and per channel: email and telephone by that country's electronic-communications law, post by the rules that country applies to postal marketing. Where the law requires your prior consent, we do not contact you on that channel without it.
Who else sees them
Nobody buys or receives this data from us. It is held in our own customer-relationship system and processed by the service providers that run our infrastructure and send our email, listed on our subprocessors page. We do not sell, rent or share it for anyone else's marketing.
The database holding these details runs in the EU, in Stockholm, and the service that sends our email runs in the EU, in Ireland.
We rank entries to decide who to approach
We score each register entry against what we are looking for, mostly the number of units it lists and the kind of accommodation it is, and that score decides the order we make contact in and which operators we never contact at all. Under the GDPR this is profiling, but profiling that only orders our own attention: the only thing it decides is whether and when we write to you, nobody is refused a service by it, and a person decides every approach. Your right to object below covers this profiling as well as the messages we send.
How long we keep them
Three years, counted from when we first took your entry from the register. The French data protection authority (the CNIL) allows three years for prospect data, running from when the details were collected or from the last contact coming from the prospect, and Nuage is established in France. Our clock runs only from that first reading: it does not restart when the register republishes the same entry, and it does not restart on contact.
When the three years are up we delete the entry, the contact details, and the sales record we had built around it. If a conversation had actually started by then (you replied, or we had opened a file on it), that file is kept under the basis it was opened on, and becoming a customer moves you to our main privacy policy entirely.
Your business may still be listed in the public register after that, and a later reading of it could pick your entry up again as a new prospect, with nothing we had previously built up about you, because that was deleted. If you would rather that never happened, ask us to stop and we will record it permanently: an objection has no expiry date.
How to object, or ask us to erase you
Email privacy@vidimo.app or write to Nuage, 60 rue François 1er, 75008 Paris, France. Tell us the name of the accommodation business, and whether you want us to:
- Stop contacting you (GDPR art. 21(2)). We must stop, and there is nothing for us to weigh. Say if you only mean one channel (for example, no email but post is fine), otherwise we stop on every channel.
- Erase what we hold (GDPR art. 17). We delete the contact details and the operator's details, and we keep only the minimum needed to recognise the entry if the register republishes it, so that our record of your request survives and we do not take your details again on the next reading.
A request covers your whole business, not one property. If you operate several registered accommodations in one country, telling us to stop through one of them stops us using any of them. We link your entries to each other using the details the register publishes, and that linking only works within one country. If you are listed in another country's register as well, say so and we will record your request for that country too.
We act on the request when we receive it and reply within one month. You can also ask us for a copy of what we hold, for a correction, or for restriction of processing. If you are unhappy with how we have handled it, you can complain to the supervisory authority in your own country, or to the CNIL, which is the authority Nuage answers to in France.
Why you are reading this rather than receiving it
Art. 14 normally requires us to give you this information directly. A register of this kind runs to thousands of entries, and writing individually to every one of them to say that we had read a public register would itself be a mass unsolicited mailing. Reaching each operator individually would therefore take disproportionate effort, which is the condition art. 14(5)(b) sets, and publishing the information is one of the appropriate measures it then asks for. Anyone we contact from a register entry is pointed to this page in the message itself.