Privacy policy
Privacy policy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1. Data controller
| Company name | Flamme Rouge |
| Legal form | bv |
| Registered office | Groenbek 2, 8790 Waregem, BE |
| Company registration number (CBE) | 0568899258 |
| VAT number | BE0568899258 |
| info@flammerouge.be | |
| Phone | +32 471 92 56 31 |
2. What personal data do we process?
2.1 Data you provide to us
| Category | Examples |
|---|---|
| Identification data | Name, first name, date of birth, nationality |
| Contact data | Email address, phone number, address |
| Travel documents | Passport number, expiry date, visa information (if legally required) |
| Payment data | Bank account number (IBAN), credit card details (processed via certified payment provider) |
| Travel preferences | Dietary needs, mobility needs, room preferences |
| Health data | Medical details relevant to the trip (only if you voluntarily provide them) |
| Fellow traveller data | Name, date of birth, passport details of persons you book for |
2.2 Data collected automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type, operating system, device type |
| Usage data | Pages visited, click behaviour, session duration |
| Cookies | See our Cookie policy |
3. Purposes and legal bases for processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Performance of the travel contract Booking processing, reservations with third parties, compiling travel documents |
Necessary for the performance of a contract (Art. 6.1.b) | 10 years after the end of the trip (commercial law retention obligation) |
| Invoicing and accounting | Legal obligation (Art. 6.1.c) | 7 years (fiscal retention obligation) |
| Customer service | Necessary for the performance of a contract (Art. 6.1.b) | Duration of the customer relationship + 2 years |
| Legal obligations in the travel sector | Legal obligation (Art. 6.1.c) | In accordance with applicable sector legislation |
| Marketing communications | Consent (Art. 6.1.a) or legitimate interest (Art. 6.1.f) with opt-out | Until withdrawal of consent; max. 3 years after last interaction |
| Website analysis and improvement | Legitimate interest (Art. 6.1.f) | Max. 26 months |
| Fraud prevention and detection | Legitimate interest (Art. 6.1.f) | 5 years after transaction |
| Dispute resolution | Legitimate interest (Art. 6.1.f) | Duration of dispute + statutory limitation periods (max. 10 years) |
4. Recipients of your data
We only share your personal data with the following categories of recipients, and only to the extent necessary:
| Recipient | Purpose |
|---|---|
| Travel service providers | Hotels, airlines, carriers, local agents — performance of booked travel services |
| Payment service providers | Payment processing |
| Travel Guarantee Fund | Legally required insolvency protection |
| FPS Economy / government authorities | Supervision, licences, tax declaration |
| Aviation authorities | API/PNR data (legal obligation) |
| IT service providers / hosting | Technical management (data processing agreement Art. 28 GDPR) |
| Accountant / auditor | Financial administration (legal obligation) |
| Insurers | Handling of travel insurance / liability insurance claims |
We never sell your personal data to third parties.
5. Transfer outside the European Economic Area (EEA)
Some travel service providers are located outside the EEA. In that case, your data is transferred on the basis of:
- An adequacy decision by the European Commission (Art. 45 GDPR)
- Standard contractual clauses (SCCs) approved by the European Commission (Art. 46.2.c GDPR)
- Your explicit consent (Art. 49.1.a GDPR), after you have been informed of the possible risks
You can request a copy of the applicable safeguards via info@flammerouge.be.
6. Your rights as a data subject
| Right | Description |
|---|---|
| Right of access (Art. 15) | You can request what data we process about you |
| Right to rectification (Art. 16) | You can have inaccurate or incomplete data corrected |
| Right to erasure (Art. 17) | You can request deletion, unless a legal retention obligation prevents this |
| Right to restriction of processing (Art. 18) | You can have processing restricted in certain circumstances |
| Right to data portability (Art. 20) | You can receive your data in a structured, commonly used and machine-readable format |
| Right to object (Art. 21) | You can object to processing based on legitimate interest, including direct marketing |
| Right to withdraw consent (Art. 7.3) | You can withdraw consent at any time, without affecting the lawfulness of prior processing |
| Right regarding automated decision-making (Art. 22) | You have the right not to be subject to a decision based solely on automated processing that has legal effects |
How to exercise your rights
Send your request to info@flammerouge.be or by post to Groenbek 2, 8790 Waregem, BE, together with a copy of your identity document (for verification purposes). We will respond within 30 days of receipt.
7. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access control based on need-to-know
- Regular backups
- Secure hosting within the EEA
- Logging and monitoring of access to personal data
8. Cookies
For information about our use of cookies, please refer to our Cookie policy, available on this website.
9. Changes to this privacy policy
We may update this privacy policy from time to time. The most recent version is always available on this page. Material changes will be communicated by email or via the booking platform.
10. Complaints
If you believe your personal data is not being processed correctly, you may:
- Contact us via info@flammerouge.be
- Lodge a complaint with the Belgian Data Protection Authority (DPA):
- Drukpersstraat 35, 1000 Brussel
- Tel: +32 (0)2 274 48 00
- E-mail: contact@apd-gba.be
- Website: www.gegevensbeschermingsautoriteit.be
Last updated: 28 September 2026