Privacy policy
This guide collects as little data as it can. It has no advertising trackers, no profiling and no newsletter. This page lists what is collected, why, for how long, which cookies are used and how to exercise your rights.
Who is responsible
The data controller is the publisher of the site: Empanada Group, 27 boulevard Saint-Martin, 75003 Paris, France. Contact for any question about your data: [email protected].
What data is processed
- Audience measurement. The site uses Matomo, installed on the site’s own server, so the statistics are not sent to a third party. It runs without cookies. The pages you read and the clicks on outgoing links, such as a booking button, are counted as anonymous events. The IP address is anonymised before it is stored (the last two bytes are masked) and the Do Not Track setting of your browser is respected. This configuration meets the conditions set by the CNIL, the French data protection authority, for exempting audience measurement from consent.
- Server logs. Like any web server, the host records the IP address, the address requested, the browser and the time of each request, for security and technical diagnosis. They are not used to analyse behaviour. They are kept for 30 days at most. Legal basis: the publisher’s legitimate interest (Article 6(1)(f) GDPR).
- Your choice about cookies. When you accept or refuse third-party services in the banner, the choice is stored in a cookie and logged in a consent register, as explained below.
- Messages you send. If you write to the guide to report a mistake or suggest a listing, your address and your message are kept for the time needed to handle the request. They are not used for anything else: no newsletter, no prospecting, no resale. They arrive at [email protected] and are deleted once the exchange is over, or earlier on request.
The site has no user accounts, no comment form and no registration for visitors.
Why and on what legal basis
| Processing | Purpose | Legal basis |
|---|---|---|
| Audience measurement (Matomo, no cookie) | Know which pages are read, improve the guide | Legitimate interest (Article 6(1)(f) GDPR), measurement limited to anonymous statistics |
| Server logs | Security and technical diagnosis | Legitimate interest (Article 6(1)(f)) |
| Cookie wf_consent and consent register | Remember your choice and be able to show it | Strictly necessary to honour your choice. Legal obligation to demonstrate consent (Article 7(1)) |
| Third-party services (map of accommodation, embedded videos) | Show content from other providers | Your consent (Article 6(1)(a)), given in the banner |
| Messages you send | Answer you and correct listings | Legitimate interest (Article 6(1)(f)) |
Cookies and local storage
On your first visit, a banner asks whether third-party services may load. Until you accept, none of them loads. Refusing takes one click, as accepting does. You can change your mind at any time with the round cookie button at the bottom left of every page.
| Name | Where | Purpose | Duration |
|---|---|---|---|
| wf_consent | Cookie of this site | Stores your choice about third-party services, the banner version, the date and a random identifier | 6 months |
| ffg_pays | Local storage of your browser | Remembers the country you picked in the map selector, so the map opens on it next time. It stays on your device and is never sent to the site | Until you clear your browser data |
| wordpress_* and wp-settings-* | Cookies of this site | Login of the site’s administrators only. Not set for visitors | Session, or up to 1 year |
No cookie is used for advertising or profiling.
Consent register
To be able to show that you made a choice, each choice is recorded on the site’s server with: the random identifier from your cookie, the date, the version of the banner, your choice (accept, refuse or customise), the language and the address of the page where you chose. Neither your IP address nor your browser details are recorded. To limit abuse, the server briefly keeps a salted and shortened fingerprint of your IP address, for one hour, to count requests. Register entries are deleted automatically after 12 months.
Third parties
| Service | Where it appears | What happens |
|---|---|---|
| Stay22 map of accommodation | On listings with a known location, when a Stay22 account is set up | Loads only after you accept. Stay22 may set cookies and receives usage data such as your IP address and the page viewed |
| Embedded videos and maps (YouTube, Vimeo, Google Maps) | Where an article embeds one | Replaced by a notice until you accept. After that, the provider may set cookies or use your browser storage |
| OpenFreeMap | On pages showing the map | Your browser asks tiles.openfreemap.org for the map tiles, so that service receives your IP address and the area you view. This request is not subject to the banner |
| Stay22, Booking.com, GetYourGuide, Civitatis, Klook and other partners | Booking and ticket buttons, when a partner account is set up | Nothing is sent to them until you click. Booking links go through a Stay22 redirect, so Stay22 receives the usual request (IP address, destination page) and attributes the commission. Once you are on a partner’s site, its own privacy policy applies |
The fonts and the map software are served from this site itself. No font is loaded from an outside service. The share buttons are plain links: nothing is loaded from Facebook, X or WhatsApp until you click one.
Some of these providers may process data outside the European Union, under their own policies.
How long data is kept
- Cookie wf_consent: 6 months.
- Consent register: 12 months, then automatic deletion.
- Local storage ffg_pays: until you clear your browser data.
- Messages sent to the guide: for the time needed to handle the request.
- Server logs: 30 days at most.
- Audience statistics: anonymous from the start (no cookie, masked IP address), kept on the site’s server to compare audiences from one year to the next.
Your rights
Under the GDPR you can ask for access to your data, its correction or deletion, a limit on its use, its portability, and you can object to a processing based on legitimate interest. Where processing rests on your consent, you can withdraw it at any time with the cookie button, without affecting what was done before.
To use these rights, write to the contact given above. We answer within one month. If you think your rights are not respected, you can complain to the French data protection authority, the CNIL (www.cnil.fr), or to the authority of the country where you live.
Changes
This policy changes when the site’s practices change. The date below is updated each time.
Last updated: 31 October 2026.