The studio
Legal notice & privacy.
Published pursuant to Articles III.74 and XII.6 of the Code of Economic Law. The contractual terms of the subscription are set out, for their part, in the terms and conditions.
1Publisher of the site and of the service
The Convivos site and service are published by:
- Company name
- Jim Legrandhenri
- Legal form
- Entreprise individuelle (droit belge)
- Registered office
- Rue Delhasse 14, 4900 Spa, Belgique
- Company number (CBE)
- 1037.815.074
- VAT number
- BE 1037.815.074
- Responsible publisher
- Jim Legrandhenri
- noah@jimos.be
2Hosting and location of the data
The service and its databases are hosted on a dedicated server located in the European Union, with OVH SAS, 2 rue Kellermann, 59100 Roubaix, France — RCS Lille Métropole 424 761 419.
The encrypted backups are kept with an object storage provider located in the European Union. No data is transferred outside the European Economic Area.
3What the service does
Convivos is booking software sold by subscription to professional establishments — restaurants and accommodation providers. It comprises a public booking module embedded in the establishment’s website, a private booking book in which the establishment runs its service, and the automatic sending of confirmations and reminders.
4Personal data
4.1Two distinct roles, not to be confused
The data of guests and travellers — name, contact details, bookings, notes in the book — is processed on behalf of the establishment, which is the controller of that data. Convivos acts only in the capacity of processor within the meaning of Article 28 of the GDPR. The data processing agreement is set out in § 10 of the terms and conditions, which binds the publisher to each client establishment.
The data of the professional client — login account, billing details, technical logs — is processed by us in the capacity of controller. That is what the remainder of this section describes.
4.2What we process, why, and on what basis
| Data | Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Name, e-mail address, language, password (hashed) | Open and maintain the account, authenticate | Performance of the contract | Term of the contract + 1 year |
| Name of the establishment, billing details | Invoice, keep the accounts | Legal obligation (accounting) | 7 years (accounting retention period) |
| Technical logs, connection IP address | Security, abuse prevention, diagnostics | Legitimate interest | 12 months |
| Sending e-mail addresses and delivery status | Deliver the messages of the service | Performance of the contract | 12 months |
| Date, version and IP address of the acceptance of the terms | Prove contractual consent | Legal obligation (Art. VI.91/4 Code of Economic Law) | Term of the contract + 10 years |
4.3What we do not do
We sell no data. We carry out no profiling and no automated decision-making producing legal effects. The public site sets no audience-measurement or advertising cookie: the only cookies set are strictly necessary to its operation — your choice of language, set only if you change it; a sign-up identifier, set only if you submit the sign-up form and erased as soon as your address is confirmed — it holds nothing but a random number, neither your address nor your name; and a session, set only if you sign in. They therefore require no prior consent, and that is why this site imposes no banner on you.
4.4Sub-processors
| Sub-processor | Role | Location |
|---|---|---|
| OVH SAS | Hosting of the server and of the databases | France (EU) |
| Scaleway SAS | Storage of the encrypted backups, away from the main server | France (EU) — Paris region |
| Brevo (Sendinblue SAS) | Delivery of transactional messages | France (EU) |
We engage no payment provider to date: subscriptions are invoiced and collected manually. If card payment is enabled one day, this list will be updated with the notice set out below, before any transmission of data.
We also use a technical monitoring service which receives only a signal that our automatic tasks are running correctly — no data of your guests or of your travellers is transmitted to it.
Any change to this list is communicated to professional clients at least thirty days in advance, together with the right to object provided for in § 10.8 of the terms and conditions.
4.5Your rights
You have a right of access, of rectification, of erasure, of restriction, of objection and of portability. You may exercise them at any time by writing to the address given in § 1. We reply within one month.
The ‘Account’ area also allows you to delete the account without going through us, and the book allows you to export bookings and guest records in CSV format, at any time.
You may lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.
5Intellectual property
The software, its code, its interfaces, its texts and its visual identity are protected and remain the exclusive property of the publisher. The subscription confers a personal, non-exclusive and non-transferable right of use, for the term of the contract — and nothing more.
The data entered by the client and that of its guests belong to the client: we acquire no right in them. The name, the colours and the logo of the establishment displayed in the booking module remain the property of the establishment, which authorises us to display them for the sole purposes of the service.
6Liability
The publisher takes reasonable steps to ensure the accuracy of the information published on this site. The undertakings relating to the service — availability, backups, security — are defined by the terms and conditions, which prevail over this page for everything concerning the subscription.
7Governing law
This legal notice is governed by Belgian law.