Rumboé is committed to protecting your privacy. This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and what your rights are.
The French version of this policy is the legally binding reference document. This English translation is provided for informational purposes only.
| Data Controller | Rumboé |
|---|---|
| Address | Toulouse, France |
| Contact | contact@rumboe.com |
| Purpose | Legal basis |
|---|---|
| Responding to quote requests and enquiries | Pre-contractual measures (Art. 6.1.b GDPR) |
| Managing bookings and travel arrangements | Performance of contract (Art. 6.1.b GDPR) |
| Sending newsletter | Consent (Art. 6.1.a GDPR) |
| Account creation and management | Performance of contract (Art. 6.1.b GDPR) |
| Website analytics | Legitimate interest (Art. 6.1.f GDPR) |
| Legal obligations (accounting, tax) | Legal obligation (Art. 6.1.c GDPR) |
| Category | Retention period |
|---|---|
| Quote requests and prospects | 3 years from last contact |
| Client data (completed bookings) | 10 years (legal and accounting obligation) |
| Newsletter subscribers | Until unsubscription |
| Login data | 12 months |
| Analytics cookies | Maximum 13 months |
Your data is never sold, rented, or shared with third parties for commercial purposes.
As part of organising your travels, certain data may be transferred to local partners located outside the European Union (in particular in Guatemala). Such transfers are governed by standard contractual clauses approved by the European Commission, in accordance with Chapter V of the GDPR.
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
To exercise these rights, please contact us at: contact@rumboe.com
We undertake to respond within one month of receiving your request.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr
| Type | Purpose | Legal basis |
|---|---|---|
| Essential cookies | Website functionality (session, CSRF security) | Legitimate interest — no consent required |
| Analytics cookies | Audience measurement | Consent |
| Preference cookies | Storing chosen language | Legitimate interest |
You can manage or refuse cookies through your browser settings or via the cookie management banner displayed on your first visit.
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration, or destruction. The website uses HTTPS encryption. Passwords are stored in hashed form.
We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.
Last updated: 03/07/2026