Your information.
Simple and proper.

1. Who is the controller?

LUNE 29 c/o Kasper Andersen, 29 rue de la Lune, 75002 Paris, is the controller for personal data processed in connection with visits, enquiries and bookings through lune29.fr, and for our own processing connected with the Instagram profile @lune29.paris. Contact: bonjour@lune29.fr.

2. Enquiries and bookings

We process the information needed to handle your enquiry, including name, email, telephone number, requested dates, number of guests, promo code, price information and information you provide in the message or later correspondence.

The purpose is to respond, administer a possible booking and communicate with you. Processing is necessary to take steps at your request before entering into a contract and, where a rental agreement is made, to perform it, under GDPR Article 6(1)(b). We may also process information to comply with legal obligations, including accounting requirements, under Article 6(1)(c).

3. Website visits

Technical information necessary to deliver and secure the website may be processed, including IP address, visit time, browser and device information and technical logs. The basis is our legitimate interest in operating a secure and functional website under Article 6(1)(f).

The interactive map uses OpenStreetMap, unpkg and FOSSGIS routing. Your browser may connect to these services, which may receive technical connection data including your IP address.

3.1 Our Instagram profile

You can find us on Instagram as @lune29.paris. When you follow our profile, comment, like a post or send us a message, we may process your name, username, profile information available to us and the content of your interaction or message. This information comes from you and Instagram.

We use this information to answer questions, present LUNE 29 and stays in Paris, and manage our profile. If Instagram makes statistics available to us, we may use them to understand how our profile and content are used.

Our processing is based on our legitimate interests in presenting LUNE 29, communicating with prospective guests and improving our content, under GDPR Article 6(1)(f). We limit processing to what is necessary for these purposes and take account of what you can reasonably expect when interacting with our profile. You can object by contacting bonjour@lune29.fr.

If your message concerns a specific stay enquiry or booking, we process the necessary information as described in section 2. Please do not share sensitive or confidential information in public comments.

4. Recipients

Simply.com A/S, Højvangen 4, 8660 Skanderborg, Denmark, provides hosting, database, email and technical functions for enquiries and bookings as our processor. OpenStreetMap, FOSSGIS routing and unpkg may process technical data in connection with the map.

4.1 Instagram and Meta's processing

Instagram is provided in the EU/EEA by Meta Platforms Ireland Limited. When you use our profile, Meta also processes information about you for its own purposes. This may include information about your profile, interactions and use of the platform. Public comments and other public interactions can also be seen by other users.

Read more about Meta's processing and your choices:

• Meta's privacy policy covering Instagram and other services
• Instagram's privacy settings

Depending on the features we use, we and Meta may be joint controllers for specific processing connected with our profile, including processing to provide us with statistics. Any joint controllership concerns processing whose purposes and means we determine together with Meta; it does not automatically extend to all of Meta's other processing.

Meta describes the allocation of responsibilities for joint processing covered by its Controller Addendum in Meta's joint controller terms. The applicability of these terms depends on the particular feature and processing. Where we are joint controllers, you can exercise your rights against both us and Meta.

Meta's processing may involve transfers to countries outside the EU/EEA, including the United States. Meta's privacy policy explains its transfers and the transfer mechanisms used. Following a link from lune29.fr to Instagram takes you away from our website to Meta's service.

5. Cookies and similar technologies

The public website does not use cookies or similar technologies for analytics, profiling or marketing, and does not use local browser storage. The protected administration area and private arrival guide use technically necessary session cookies for login, access control and security. These cookies are not used for analytics or marketing.

6. Retention

Enquiries that do not lead to a booking are normally deleted one month after closure unless a specific need justifies longer retention. Completed-booking information is normally kept for three years. Accounting records are kept for five years under applicable accounting law.

7. Your rights

Subject to the conditions in the GDPR, you may have rights of access, rectification, erasure, restriction, objection and data portability. Contact bonjour@lune29.fr to exercise your rights.

8. Complaint

You may complain to the competent data protection authority if you believe the processing infringes data protection law.