Privacy Policy

Rumboé is committed to protecting your privacy. This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and what your rights are.

The French version of this policy is the legally binding reference document. This English translation is provided for informational purposes only.

1. Data Controller

Data Controller	Rumboé
Address	Toulouse, France
Contact	contact@rumboe.com

2. Personal Data We Collect

2.1 Contact form and quote requests

First name and last name
Email address
Phone number (optional)
Travel details (destination, dates, budget, number of travellers)
Free text message

2.2 Newsletter subscription

Email address

2.3 User account

First name and last name
Email address
Login credentials

2.4 Browsing data (cookies)

IP address (anonymised)
Pages visited, session duration
Browser and device type

3. Purposes and Legal Bases for Processing

Purpose	Legal basis
Responding to quote requests and enquiries	Pre-contractual measures (Art. 6.1.b GDPR)
Managing bookings and travel arrangements	Performance of contract (Art. 6.1.b GDPR)
Sending newsletter	Consent (Art. 6.1.a GDPR)
Account creation and management	Performance of contract (Art. 6.1.b GDPR)
Website analytics	Legitimate interest (Art. 6.1.f GDPR)
Legal obligations (accounting, tax)	Legal obligation (Art. 6.1.c GDPR)

4. Data Retention

Category	Retention period
Quote requests and prospects	3 years from last contact
Client data (completed bookings)	10 years (legal and accounting obligation)
Newsletter subscribers	Until unsubscription
Login data	12 months
Analytics cookies	Maximum 13 months

5. Recipients of Your Data

Rumboé — sales and travel planning team
Technical providers — web hosting, emailing solutions (strictly within the scope of their contracted services)
Travel partners — hotels, carriers, local guides, solely for the purpose of organising your trip

Your data is never sold, rented, or shared with third parties for commercial purposes.

6. International Data Transfers

As part of organising your travels, certain data may be transferred to local partners located outside the European Union (in particular in Guatemala). Such transfers are governed by standard contractual clauses approved by the European Commission, in accordance with Chapter V of the GDPR.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of access — obtain a copy of the data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restriction of processing — limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to certain processing, in particular for direct marketing purposes
Right to withdraw consent — withdraw your consent at any time (e.g. unsubscribing from the newsletter)

To exercise these rights, please contact us at: contact@rumboe.com

We undertake to respond within one month of receiving your request.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

8. Cookies

Type	Purpose	Legal basis
Essential cookies	Website functionality (session, CSRF security)	Legitimate interest — no consent required
Analytics cookies	Audience measurement	Consent
Preference cookies	Storing chosen language	Legitimate interest

You can manage or refuse cookies through your browser settings or via the cookie management banner displayed on your first visit.

9. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration, or destruction. The website uses HTTPS encryption. Passwords are stored in hashed form.

10. Updates to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.

Last updated: 03/07/2026