Your privacy.
Updated 9 November 2026
Who is responsible?
Paul Gedda operates penthousemontmartre.com, including its French and international versions. For questions or to exercise your privacy rights, contact Paul on WhatsApp and mention “privacy”.
Website visits and interactions
Audience measurement is provided by Umami Cloud and is enabled when a page opens. There is no advertising or cross-site marketing tracking.
Umami receives the page path, time, referring website’s origin, technical browser and screen information, approximate country, region and city, and a marker identifying the French or international page. Interaction events identify predefined areas such as the photo, title, phone number, WhatsApp banner or button, language selectors, review links and privacy link. They can include the kind of interaction, the selected language, a device-size category and a coarse 5% grid cell relative to the clicked section. Copying the displayed host phone number, scroll-depth milestones, the appearance of the reviews and visible focused-page time at 15, 30 and 60 seconds may also be counted. Each milestone is counted once per page load. These signals do not prove that a visitor is human or has read the content. Umami may derive pseudonymous visitor and session identifiers from technical request information. Counts and location are estimates.
The site does not send your chosen travel dates, guest count, phone number or WhatsApp message text to Umami. Query strings, page fragments and the paths or query strings of referring pages are removed from the analytics payload. No account identifier, visitor input, pointer movement, screenshot or session replay is collected. Coarse click locations describe the page areas used, rather than recording a browsing session. The privacy notice itself is excluded from audience measurement; a click opening it from the main page may be counted.
Browser privacy preferences
The site respects Do Not Track and Global Privacy Control signals sent by your browser, as well as a previously saved opposition to audience measurement. These preferences stop future analytics events without removing events already sent.
Providers, storage and retention
Paul can view the statistics in his private Umami account. Its analytics storage region is EU (Frankfurt), and the current Hobby plan keeps production analytics for six months. Umami’s infrastructure and security processing can involve other regions and separate operational logs. Its data processing agreement, subprocessor list and privacy policy explain the processing, transfer safeguards and backup retention. An EU storage choice does not mean every operation stays in the EU.
Website operation and external links
Hosting uses Sites (OpenAI) and Cloudflare infrastructure. Delivering and securing pages involves IP addresses and technical request logs, independently of audience measurement. The country inferred from the IP selects the French or international page; it is not precise GPS location. This operational processing serves the legitimate interest of running and protecting the website. Necessary security cookies may be set. The site’s language preference is saved locally in your browser until you clear it. These functions continue when statistics are disabled.
Opening WhatsApp contacts an external service and prepares a message; the site never sends it automatically. You choose what to send. Paul uses messages he receives to answer your request and discuss a possible stay. See WhatsApp’s privacy policy for its own processing.
Your rights
Depending on the processing and legal basis, you may request access, correction, deletion, restriction, portability or object to processing, including audience measurement. Contact Paul using the link above. You can also complain to the CNIL. Statistics cannot always be linked to a named individual; no extra identity data is collected just to identify visitors.