Privacy policy
We process your data to handle your reservation or booking, to meet legal obligations and to run this website securely. Here is what that means in practice.
Controller
Manuela Ruwette, trading as "La Maison du Golf au Mergelhof", Rue de Terstraeten 254, 4851 Plombières, Belgium. Phone +32 87 78 92 88, email [email protected].
Table reservations via TheFork
For table reservations we use TheFork (LaFourchette SAS, 28 rue Sainte Foy, 75002 Paris, France, a Tripadvisor Group company). When you click a reservation link you leave this website and are redirected to TheFork. Only there do you enter your reservation details; TheFork processes them as a separate controller and sets its own cookies. We receive from TheFork the details needed to carry out your reservation (name, contact details, date, time, number of guests). The legal basis for the redirection and the handling of your reservation is Art. 6(1)(b) GDPR. Transfers to third countries may occur. Details are set out in TheFork's privacy policy at thefork.com/privacy. Reservations made by phone are processed by us under Art. 6(1)(b) GDPR.
Hotel bookings via direct-book.com
Room bookings take place on direct-book.com, a service of SiteMinder Limited. When you click a booking link you leave this website; you only enter your booking details there, and that provider's privacy policy applies. From the booking system we receive the details needed to carry out your stay (name, contact details, travel dates, chosen rate). The legal basis is Art. 6(1)(b) GDPR. Invoices and documents required for tax purposes are retained for ten years in principle under Belgian retention rules, counted from 1 January of the year following issue.
Registration form
Overnight guests in Belgium are subject to a registration requirement. You fill in the form by hand on site; it is not stored on this website. The legal basis is compliance with a legal obligation under Art. 6(1)(c) GDPR.
Payment
Gift vouchers are paid for online through the payment provider Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, Ireland). Your name, email address, the amount and your payment details are transmitted to Stripe; the card details themselves never reach us. Stripe only tells us whether the payment succeeded. The legal basis is Art. 6(1)(b) GDPR. Payment for your stay still follows the conditions of the rate chosen in the booking system or is made at the house.
Gift vouchers
Gift vouchers are bought directly on this website. In doing so we process your details as the buyer, the intended recipient, your personal message and the payment confirmation in order to issue the voucher and send it to you as a PDF. The legal basis is Art. 6(1)(b) GDPR. We keep issued vouchers until their validity expires and thereafter within the statutory tax retention period.
Withdrawal
Vouchers bought online carry a fourteen-day right of withdrawal. You declare the withdrawal using the Withdraw from a contract button at the foot of every page. For this we process your name, the order or voucher number and your email address in order to confirm receipt with the date and time and to refund the amount. The legal bases are Art. 6(1)(b) and (c) GDPR.
Ad measurement with Google Ads only with your consent
We run ads on Google and want to know whether they work. Without your consent, no Google service is loaded on this website and nothing is transmitted to Google. If you agree in the notice, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, sets cookies with a lifetime of up to 90 days that link a previous ad click to the following actions: clicks on the links to table reservation, room booking, phone number and menu, and the successful submission of our enquiry form (Google Ads conversion tracking). Measurement data including your IP address is transmitted to Google; processing by Google LLC in the USA is possible, Google is certified under the EU-US Data Privacy Framework. The content of your enquiry, your name, email address and phone number are not transmitted to Google as part of this measurement. We use your consent solely to measure the success of our ads; we do not release personalised advertising to Google. The legal basis is your consent under Art. 6(1)(a) GDPR.
We store your decision for 180 days in your browser's local storage; if that is unavailable, in a technically necessary cookie that is sent to our server on further visits. This storage serves only to respect your choice. You can withdraw your consent at any time with effect for the future via the "Privacy settings" link at the bottom of the page; we then stop ad measurement on this website. The lawfulness of processing carried out until then remains unaffected.
If you have consented to ad measurement and reached us via a Google ad, we additionally note the origin "Google ad" with your enquiry in order to assess the success of our advertising internally. The individual Google click identifier is not included in your enquiry. The legal basis is likewise your consent.
Enquiries for celebrations and events
When you enquire about a celebration or register for an event, we process your details on company, date, guest numbers, name, contact options and message in order to answer the enquiry and prepare a proposal, or to record your participation. If you wish to become the contracting party yourself, the legal basis is Art. 6(1)(b) GDPR. If you act for a company or another organisation, we process your business contact details on the basis of our legitimate interest in handling the enquiry and communicating with that organisation (Art. 6(1)(f) GDPR). To reply we need your name and at least one contact option; all other details are voluntary. Please do not send medical information about specific persons via the form; menu requirements can be given without naming individual guests, and we agree the details with you afterwards. Enquiries that do not lead to a booking are deleted no later than twelve months after processing ends, and earlier once they are no longer needed.
Email delivery
Confirmations, reminders and invoices are sent by email. A copy of each message also goes to our technical service provider, who maintains the platform and must be able to trace deliveries in the event of a fault; he processes the data solely on our instructions as a processor and uses it for no other purpose. The legal basis is Art. 6(1)(b) and (f) GDPR.
File attachments
We may store PDF files internally with a reservation, for example an agreed menu. These files are kept outside the publicly accessible area and can only be retrieved after logging in to the administration area.
Calendar synchronisation with booking portals
To prevent double bookings we synchronise occupied periods with booking portals such as Booking.com. Only periods and an occupancy flag are exchanged, never guest data. The legal basis is our legitimate interest in accurate availability under Art. 6(1)(f) GDPR.
Hosting
The website runs on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, under a data processing agreement pursuant to Art. 28 GDPR. When you visit, the server processes technically necessary access data such as IP address, time, requested file and browser identifier. The legal basis is the legitimate interest in secure operation under Art. 6(1)(f) GDPR. These logs are deleted after 14 days at the latest.
Delivery via Cloudflare
The site is delivered via the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes connection data for delivery and to protect against attacks. The legal basis is the legitimate interest in fast and secure delivery under Art. 6(1)(f) GDPR. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework, supplemented by standard contractual clauses.
Fonts
All fonts used are hosted on our own server and served exclusively from there. No connection is made to Google Fonts or other external font providers; your IP address is not transmitted to third parties for this purpose.
Cookies
We set only two technically necessary cookies: one for your session and one that remembers your language choice. Both serve solely to operate the website, so no consent is required. Your decision on ad measurement is remembered locally by your browser for 180 days, and only as a fallback in a cookie (see the section on ad measurement). Google advertising cookies are set only after your consent. We do not use analytics cookies.
Protection against abuse
To protect against automated bulk submissions, we temporarily process a pseudonymous identifier derived from your IP address when a form is submitted, in order to limit the number of enquiries within 30 minutes. This identifier is deleted automatically no later than one hour later. The legal basis is our legitimate interest in a secure, working enquiry form (Art. 6(1)(f) GDPR). If a company reaches this limit via a shared internet connection, please try again later or call us.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent given at any time. Please use the contact details above. You may also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels) or with any other EU supervisory authority.
Last updated: 10.09.2026