Grotels privacy information

Grotels is operated by SOLID Ventures. We use the information submitted through the group-request form, property application and private portals to arrange accommodation searches, review properties and offers, manage access and administer reservations and commercial relationships.

Information we use

• Trip requirements, including dates, destination, group size, rooming, meals and budget.
• Organiser names, professional or personal contact details and request communications.
• Property, organization, capacity, facilities and website information.
• Professional contact names, email addresses, telephone numbers and preferred language.
• Portal authentication, agreement, offer, booking, audit and security records.

Access and sharing

Property contact details remain private. Group organisers receive only reviewed property and offer information needed for their accommodation request. Service providers receive only the information required to operate the platform securely.

After a successful group request, a path-limited, HttpOnly handoff cookie can open the private tracking page without exposing its locator to scripts on the public form. It expires after ten minutes or its first use; the confirmation email remains the durable access channel.

Protection against automated abuse

We use Cloudflare Turnstile to protect forms, including sign-in, against automated abuse. For information on how Cloudflare processes data through this service, see its Turnstile Privacy Addendum.

Audience measurement

On configured public Grotels pages, PostHog EU Cloud starts when the page loads; it does not wait for a privacy-banner signal. Persistent analytics identifiers, autocapture and session replay are disabled, and browser Do Not Track is respected. URL queries and fragments, referrers, search and campaign-attribution terms, free-text fields, contact details, exact trip dates and all private portal or operations pages are excluded.

The remaining data can include a random in-memory identifier that is not retained across page loads, brand, language, a public path and coarse categories such as a group-size range. It is processed in PostHog’s EU Cloud for no longer than 12 months. See the PostHog privacy policy and data processing agreement information.

Public pages also load Google Analytics 4 (G-JRV61XEKJ3) and the Google Ads conversion tag (18347263340) through Google Tag Manager. Google can receive the public page URL, IP address, browser or device information and a quote-conversion signal. The application keeps analytics storage, advertising storage, advertising-user-data and advertising personalisation signals denied, and does not add quote-form fields to Google events. Google tags may still receive cookieless measurement signals. No in-app banner or visitor choice control is currently connected; this temporary setup will be revisited when a consent solution is deployed. See how Google uses data from partner sites and its cookie information.

Your rights

You may request access, correction or deletion where applicable, or ask a question about this processing, by emailing partners@grotels.com.