Privacy Policy

When you request a GEO analysis of a hotel, we collect the information you enter in the form:

• your first name;
• your last name;
• your professional email address;
• your telephone number;
• the name of the hotel concerned;
• its location;
• its official website address.

This information is provided directly by you.

The fields in the form are mandatory so that BloomingPilot can correctly identify and process the request and communicate with the person submitting it.

We use the information collected to:

• record and process your GEO analysis request;
• precisely identify the property concerned;
• prepare and carry out the requested analysis;
• send you information and results relating to this analysis;
• communicate with you about your request;
• introduce you, in the context of your professional activity, to BloomingPilot services that may be relevant to your property or business.

The data is not sold to third parties.

It is not used for advertising campaigns conducted on behalf of third parties.

The processing of information necessary to manage your analysis request is based on pre-contractual steps taken at your request and, where applicable, on REPONSE42’s legitimate interest in responding to requests it receives and ensuring follow-up on its services.

Marketing communications sent to professionals in connection with their business activities are based on REPONSE42’s legitimate interest in developing BloomingPilot services.

You may object at any time to the use of your contact details for direct marketing purposes, free of charge and without having to justify your request.

Exercising this right does not prevent BloomingPilot from sending you communications strictly necessary to process a request or service you have asked for.

The professional contact details provided in the form may be used by BloomingPilot to contact you about its services where they relate to your professional activity.

When your data is collected, you may indicate that you do not wish to receive marketing communications.

You may also object at any time afterwards:

• by using the unsubscribe mechanism in the relevant communications, where available;
• or by writing to rgpd@bloomingpilot.com.

There is no charge for exercising this right to object.

Your data is accessible only to authorised personnel within REPONSE42 and to the technical service providers required to operate the service.

As of the date this policy was last updated, the infrastructure used for the analysis process includes, in particular:

• Lovable, for the service’s application, backend and database;
• n8n, for automated processing orchestration;
• Microsoft Azure, used as hosting infrastructure by n8n Cloud.

These providers act only to the extent necessary to operate the service and in accordance with their respective contractual and regulatory obligations.

Other technical service providers may be added as the service evolves. This policy will be updated where their involvement substantially changes the processing of your data.

The BloomingPilot project used for this data collection is configured in the Europe region of Lovable Cloud.

The n8n Cloud instance used by BloomingPilot is hosted in the European Union.

BloomingPilot prioritises infrastructure located in the European Union for the processing covered by this workflow.

If the future use of a provider were to involve a transfer of personal data outside the European Economic Area, REPONSE42 will ensure that the transfer is based on a mechanism that complies with applicable regulations and will update the information provided to the individuals concerned where necessary.

Data relating to an individual who has requested an analysis but has not become a client is retained for a maximum of two years from the date of collection or the last active contact initiated by that individual.

A new active contact initiated by you may therefore start a new retention period.

At the end of this period, the data is deleted or anonymised, unless longer retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

If a contractual relationship is established with REPONSE42, the data necessary for that relationship may be subject to different retention periods in accordance with applicable obligations.

Under applicable data protection regulations, and subject to the conditions set out in the legislation, you may:

• access personal data concerning you;
• request its rectification;
• request its erasure;
• request restriction of its processing;
• object to certain processing activities;
• object to direct marketing at any time;
• request data portability where this right applies.

To exercise your rights: rgpd@bloomingpilot.com

We may request additional information only where necessary to verify your identity.

You also have the right to lodge a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL).

REPONSE42 implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Exchanges between the service’s various technical components must use secure communications.

Technical secrets, API keys and infrastructure credentials must never be exposed in the browser or on public pages.

However, as no IT system can guarantee absolute security, REPONSE42 adapts its safeguards to the risks identified and to the evolution of the service.

This policy may change to reflect:

• the evolution of BloomingPilot services;
• new service providers;
• new features;
• or regulatory changes.

In the event of a substantial change concerning the use of your data, the information provided to users will be updated accordingly.

Last updated: 10 August 2026.