Privacy policy
This policy describes how 2AM Hospitality collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR).
Data controller
2AM Hospitality Rue du Pachy 6, 1315 Incourt, Belgium Contact: hello@2amhospitality.com
Data collected
We collect the data you provide via the contact form (name, email, company, type of request, message) as well as anonymised technical browsing data (with your consent, via Google Analytics).
Purposes of processing
Your data is used to: respond to your requests, organise a meeting or call, manage our commercial relationship, measure site traffic (anonymised statistics) and comply with our legal obligations.
Legal basis
Processing is based on your consent (form, analytics cookies), pre-contractual measures at your request, and our legitimate interest in developing our business.
Retention period
Messages received via the form are kept for 3 years from the last contact. Analytics data is retained for a maximum of 14 months. Cookie consent is stored for 12 months.
Recipients
Your data is only accessible to 2AM Hospitality. It may be processed by our technical sub-processors (Supabase hosting, Resend email delivery, Google Analytics), all contractually bound to comply with GDPR.
Transfers outside the EU
Some sub-processors (Google Analytics) may involve transfers outside the European Union, governed by the European Commission's standard contractual clauses.
Your rights
Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time. To exercise these rights: hello@2amhospitality.com.
Complaints
You may lodge a complaint with the Belgian Data Protection Authority (APD): www.autoriteprotectiondonnees.be
Security
We implement appropriate technical and organisational measures (TLS encryption, access control, backups) to protect your data against any unauthorised access, alteration or destruction.