Privacy Policy

Last updated: 27 April 2026.

This policy describes how Clicavis processes personal data through the guest webapp made available to clients of partner hotels. It complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

Clicavis - Sole trader (French micro-entreprise)
Email: infos@clicavis.com

Data collected

• Geolocation (optional) - used only if the user explicitly enables location from the "More" screen. Location data is never sent to any third party server; it stays on the device to compute local distances.
• Preferred language - inferred from the browser or chosen manually, stored locally (localStorage) to remember the preference between visits.
• Technical data - User-Agent and anonymised (truncated) IP address, collected by our host OVH within standard server logs (security, abuse prevention).
• URL parameters - room number (?c=) and guest name (?nom=) optionally present in the link provided by the hotel. These parameters are neither stored nor transmitted; they only personalise the local display.

Cookies

The webapp does not use any tracking cookie or advertising tracker. Only browser localStorage is used to remember the language preference. If audience measurement is added in the future, it will rely on a GDPR-friendly cookieless solution (such as Plausible). This policy will be updated accordingly.

Legal basis

Processing of technical data is based on the legitimate interest of Clicavis in providing the digital concierge service requested by the hotel for its guests. Processing of geolocation is based on the explicit consent of the user.

Retention period

Collected data (geolocation, language) is retained only for the duration of the user session or, for language, until the user clears their browser storage. No nominative data is retained by Clicavis beyond the session.

Server logs from the host are kept for a maximum of 13 months, in line with French CNIL recommendations.

Recipients

No personal data is transmitted to third parties. The only external requests issued by the webapp concern:

• Open-Meteo API (open-meteo.com) - to retrieve weather based on the hotel's latitude and longitude (no user data is sent).
• Bunny Fonts (fonts.bunny.net) - to load fonts, with no personal data collection.
• jsDelivr (cdn.jsdelivr.net) - to load the QR code generation library used for the Wi-Fi QR code on the device.

User rights

In accordance with the GDPR, you have the right to access, rectify, erase, object to and restrict processing of your data. To exercise these rights, contact: infos@clicavis.com.

You also have the right to lodge a complaint with the French data protection authority CNIL (cnil.fr) or the supervisory authority of your country of residence.

Security

The service is served exclusively over HTTPS. Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy) are enabled at the server level.

Policy updates

Clicavis reserves the right to amend this policy at any time. The last update date is shown at the top of the document.

For any question about this privacy policy, you may contact us at infos@clicavis.com.