Privacy policy
We process your data to handle your reservation or booking, to meet legal obligations and to run this website securely. Here is what that means in practice.
Controller
Manuela Ruwette, trading as "La Maison du Golf au Mergelhof", Rue de Terstraeten 254, 4851 Plombières, Belgium. Phone +32 87 78 92 88, email [email protected].
Table reservations via TheFork
For table reservations we use TheFork (LaFourchette SAS, 28 rue Sainte Foy, 75002 Paris, France, a Tripadvisor Group company). When you click a reservation link you leave this website and are redirected to TheFork. Only there do you enter your reservation details; TheFork processes them as a separate controller and sets its own cookies. We receive from TheFork the details needed to carry out your reservation (name, contact details, date, time, number of guests). The legal basis for the redirection and the handling of your reservation is Art. 6(1)(b) GDPR. Transfers to third countries may occur. Details are set out in TheFork's privacy policy at thefork.com/privacy. Reservations made by phone are processed by us under Art. 6(1)(b) GDPR.
Hotel bookings via direct-book.com
Room bookings take place on direct-book.com, a service of SiteMinder Limited. When you click a booking link you leave this website; you only enter your booking details there, and that provider's privacy policy applies. From the booking system we receive the details needed to carry out your stay (name, contact details, travel dates, chosen rate). The legal basis is Art. 6(1)(b) GDPR. Invoice-relevant data is retained for seven years under Belgian law.
Registration form
Overnight guests in Belgium are subject to a registration requirement. You fill in the form by hand on site; it is not stored on this website. The legal basis is compliance with a legal obligation under Art. 6(1)(c) GDPR.
Payment
No online payment takes place on this website. Payment for your stay follows the conditions of the rate chosen in the booking system or is made at the house.
Gift vouchers
Gift vouchers are currently ordered by phone or directly at the house. In doing so we process your details as the buyer, the intended recipient and your personal message in order to issue the voucher. The legal basis is Art. 6(1)(b) GDPR. We keep issued vouchers until their validity expires and thereafter within the statutory tax retention period.
Ad measurement with Google Ads only with your consent
We run ads on Google and want to know whether they work. The Google script is only loaded after you have agreed in the cookie notice. If you decline or make no choice, nothing is retrieved from Google's servers and no data is transmitted to Google. If you agree, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, sets a cookie that attributes the click on a booking, reservation, call or menu link to your ad (Google Ads conversion tracking, stored for up to 90 days). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected. Your choice is stored locally by your browser and does not reach us.
Enquiries for celebrations and events
For an enquiry or sign-up we process your contact details, the occasion, your preferred date and your message in order to make you a proposal or record your participation. The legal basis is Art. 6(1)(b) GDPR. Enquiries that do not lead to a booking are deleted after twelve months at the latest.
Email delivery
Confirmations, reminders and invoices are sent by email via our mail provider MXroute (Loading Deck LLC, USA), which delivers the messages on our behalf. A copy of each message also goes to our technical service provider, who maintains the platform and must be able to trace deliveries in the event of a fault; he processes the data solely on our instructions as a processor and uses it for no other purpose. The legal basis is Art. 6(1)(b) and (f) GDPR.
File attachments
We may store PDF files internally with a reservation, for example an agreed menu. These files are kept outside the publicly accessible area and can only be retrieved after logging in to the administration area.
Calendar synchronisation with booking portals
To prevent double bookings we synchronise occupied periods with booking portals such as Booking.com. Only periods and an occupancy flag are exchanged, never guest data. The legal basis is our legitimate interest in accurate availability under Art. 6(1)(f) GDPR.
Hosting
The website runs on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, under a data processing agreement pursuant to Art. 28 GDPR. When you visit, the server processes technically necessary access data such as IP address, time, requested file and browser identifier. The legal basis is the legitimate interest in secure operation under Art. 6(1)(f) GDPR. These logs are deleted after 14 days at the latest.
Delivery via Cloudflare
The site is delivered via the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes connection data for delivery and to protect against attacks. The legal basis is the legitimate interest in fast and secure delivery under Art. 6(1)(f) GDPR. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, supplemented by standard contractual clauses.
Fonts
All fonts used are hosted on our own server and served exclusively from there. No connection is made to Google Fonts or other external font providers; your IP address is not transmitted to third parties for this purpose.
Cookies
We set only two technically necessary cookies: one for your session and one that remembers your language choice. Both serve solely to operate the website, so no consent is required for them. A Google advertising cookie is set only after your consent; see the section on ad measurement. We do not use analytics cookies.
Protection against abuse
To protect our forms against automated mass submissions, we briefly store an encrypted identifier of your connection. The legal basis is the legitimate interest in undisturbed operation under Art. 6(1)(f) GDPR.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent given at any time. Please use the contact details above. You may also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels) or with any other EU supervisory authority.
Last updated: 24.08.2026