Your data, plainly explained
What this site collects, why, for how long, and how you keep control over it.
Written to be read, without needless jargon.
- Home
- Privacy
Who handles your data
This page sets out what personal data omammamia.fr collects, why it is collected, how long it is kept and what you can do to keep control over it.
The data controller is O MAMMA LOURMARIN, a French limited liability company (SARL) with share capital of €20,000, registered with the Avignon trade and companies register under number 994 655 678, whose registered office is at Les Borrys, 209 chemin du Dégoutaou, 84360 Mérindol, France. It operates the hotel and restaurant O Mamma Mia - Lourmarin, 21 route d'Apt, 84160 Lourmarin, in the Luberon.
- Postal address: 21 route d'Apt, 84160 Lourmarin, France.
- Telephone: +33 4 84 85 90 00 — second number: +33 7 62 63 19 76.
- Email for any question about personal data: reservation@omammamia.fr
- Data protection officer: none has been appointed, the hotel's processing falling outside the cases that make such an appointment mandatory under article 37 of the GDPR. Your requests are handled directly by management, at the address above.
Last updated: 4 August 2026. Our legal notice and terms and conditions complete this page.
Three forms, three purposes
Nothing is collected behind your back. You only share information when you fill in one of the three forms described below. Optional fields stay optional: leaving them empty prevents neither our reply nor your booking.
The contact form
On the Contact page, the form collects:
- your name;
- your email address;
- your telephone number, optional;
- the content of your message.
These details are used solely to answer you. The message is sent by email to reservation@omammamia.fr, monitored by the reception team. The form is protected by Google reCAPTCHA, described further down this page.
Booking a table
Restaurant bookings run through our own module, reached from The menu page and at omammamia.fr/resa/. It records:
- the date, service and time you would like;
- the number of adults and children;
- the dining room or terrace area requested;
- your name, email address and telephone number;
- the occasion, if any — birthday, business lunch — and the day and month of the birthday if you choose to enter them;
- your dietary restrictions and free-text message, both optional;
- your agreement to be contacted about the booking, and your subscription to our news if you tick that box.
This lets us allocate your table, send the confirmation or cancellation by email and reach you if anything changes. An allergy or a diet you mention is passed on to the kitchen and the floor team only, for the duration of the meal.
Booking a room
Room bookings are made on reservation.omammamia.fr, a platform operated by an outside provider. What you enter there — identity, contact details, dates of stay, chosen room — is first processed by that provider, who then passes on what we need to prepare your stay. You can browse the Rooms page freely: no data is collected while you look.
- The provider is eviivo Limited, a company incorporated in England whose offices are at Camburgh House, 27 New Dover Road, Canterbury, Kent CT1 3DN, United Kingdom. Its own privacy policy is available from the booking engine and governs the step you carry out there.
- A bank card guarantee may be requested to hold the booking. Card details are then entered directly on the booking engine and handled by eviivo and its payment institution. The hotel has no access to them and keeps no full card number; we will never ask you to send one by email or by message.
Lawful bases and retention periods
Every processing operation rests on one of the grounds set out in the General Data Protection Regulation:
- Booking a table or a room — performance of the contract or of the steps leading up to it.
- Replying to a message sent through the contact form — our legitimate interest in dealing with enquiries addressed to us.
- Sending our news by email — your consent, which you may withdraw at any time.
- Protecting the form against automated submissions — our legitimate interest in keeping the site usable.
- Keeping accounting records linked to a stay — a legal obligation.
Nothing is kept indefinitely. Data is deleted or archived once the reason for holding it has gone:
- Messages received through the contact form: three years from our last exchange with you.
- Table bookings stored by the internal module: twelve months after the date of the meal.
- Room booking files: three years after your last stay for customer follow-up, the booking engine provider applying its own periods in addition.
- Email addresses subscribed to our news: kept until you withdraw your consent, then deleted within one month of unsubscription.
- Accounting records: ten years from the end of the financial year, under article L.123-22 of the French commercial code.
- Server logs: six months, in line with the French data protection authority's recommendation on connection records.
Recipients, processors and transfers
Your data is never sold, rented or traded. It can be seen by:
- the hotel and restaurant team, and only as far as each role requires — reception for stays, floor and kitchen for meals;
- the hosting provider, which stores the site files and the messages on its servers: IONOS SARL, 7 place de la Gare, BP 70109, 57201 Sarreguemines Cedex, France;
- the provider behind the booking engine reservation.omammamia.fr: eviivo Limited, Camburgh House, 27 New Dover Road, Canterbury, Kent CT1 3DN, United Kingdom;
- Google, for the reCAPTCHA on the contact form and for the map shown on the contact page;
- where applicable, our accountants and the competent authorities, under legal obligations.
Transfers outside the European Union
Google services may involve a transfer of technical data to the United States. Such transfers rely on the safeguards set out in Chapter V of the Regulation — standard contractual clauses and the EU–US Data Privacy Framework.
Data entered on the booking engine is processed by eviivo Limited, established in the United Kingdom. That transfer relies on the adequacy decision adopted by the European Commission on 19 December 2025, which recognises that the United Kingdom ensures an adequate level of protection. Apart from those two cases, we arrange no transfer outside the European Union.
Taking back control, at any time
Regarding the data that concerns you, you have the following rights:
- Access — find out whether we hold data about you and obtain a copy of it.
- Rectification — have inaccurate or incomplete information corrected.
- Erasure — ask for your data to be deleted, subject to our legal retention duties.
- Restriction — ask for a processing operation to be frozen while a point is checked.
- Objection — object to processing based on our legitimate interest, and decline our news at any time.
- Portability — receive the data you provided in a machine-readable format.
- Withdrawal of consent — without affecting what was done before the withdrawal.
- Instructions on what should happen to your data after your death.
How to exercise them
Write to reservation@omammamia.fr, send a letter to 21 route d'Apt, 84160 Lourmarin, France, or use the form on the Contact page. State which right you wish to exercise and the email address or telephone number used for your booking, so that we can find the right file. We reply within one month; that period may be extended by two months for complex requests, and you will be told if it is. Proof of identity may be requested where there is reasonable doubt about who is asking.
Complaints
If our answer does not satisfy you, you may contact the French data protection authority: Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or file a complaint online at www.cnil.fr.
For a dispute about the stay or the meal itself, rather than about how your data is handled, the consumer mediator is the right route: their name and contact details appear on the Legal notice page, and the conditions for referring a case to them are set out in article 12 of the terms and conditions.
What is stored on your device
Nothing is stored on your device while you simply browse the site. There is no audience measurement, no advertising tracker and no social media button, which is why you are not shown a consent banner on arrival. The only things that can be stored are triggered by an action you take yourself, and they are listed below.
Full inventory
- Simply browsing — no cookie, no storage. Fonts, images, stylesheets and scripts are all served from our own servers, without going through any outside service.
- omammamia_lang — browser local storage, set by our table booking module to remember whether you are using the form in French or in English. It never leaves your device and disappears when you clear your browsing data. Exempt from consent.
- _GRECAPTCHA — set by Google on its own domain, and only from the moment you start filling in the contact form. It lasts about six months and serves solely to tell a visitor apart from an automated submission.
- Google Maps cookies — only if you click the button that displays the map, on the Contact page.
- PHPSESSID — a session cookie limited to the administration area reserved for the hotel team. A visitor to the public site never receives it.
The Google map loads only when you click
The Contact page first shows a plain still image where the map would be. Google's interactive map is loaded only after you deliberately click on it. Until you do, no connection is made to Google's servers from that page and no Google cookie is set. Our address is written out in full next to the map, so you can copy it into the navigation app of your choice without triggering anything.
reCAPTCHA on the contact form
The contact form is protected by reCAPTCHA, a Google service that tells a visitor apart from an automated submission. To do so it analyses technical data: IP address, browser characteristics, interactions with the page. The script is only called once you start filling in the form: opening the Contact page without touching it establishes no connection with Google. The check is then indispensable to sending us the message you are writing, which places it among the measures strictly necessary to the service you asked for. If you would rather avoid it, write to reservation@omammamia.fr or call +33 4 84 85 90 00. The processing carried out by Google is governed by its own terms, available at policies.google.com/privacy.
The room booking engine
Rooms are booked on reservation.omammamia.fr, a separate service operated by eviivo Limited. That subdomain has its own cookies and its own privacy policy, over which this page has no control: please refer to the information shown on the booking engine itself when you book.
Audience measurement and advertising
As things stand, the site uses no audience measurement tool, no advertising tracker and no social media button able to follow you elsewhere. Should that change, a consent banner would be added before anything is stored and this page would be updated.
Adjusting your browser
You can review, delete or block cookies at any time in your browser settings, and clear the local storage of the sites you visit. Blocking everything may prevent the contact form from being sent or the table booking module from loading.
Two closing points
The site is served over HTTPS, so what you type travels encrypted. Access to bookings and messages is limited to the members of staff who need it, through password-protected accounts. As no system is infallible, please never send sensitive details — card numbers, identity documents — through the contact form or by email.
This policy may change, particularly if a new tool is added to the site. The date at the top of the page shows the latest version; where a change materially affects processing based on your consent, you will be informed before it takes effect.