Privacy policy
To be completed and dated. A privacy policy must describe what this company actually does with data — not a generic template. The sections below list what has to be documented under articles 12 to 14 GDPR.
Controller
Paris Travel Transfer, 34 Avenue des Champs-Élysées, 75008 Paris, France.
To be completed: contact point for data protection requests.
What this website collects
This website has no account system, no analytics tag and no advertising pixel by default. The booking form does not send anything anywhere on its own: it opens WhatsApp or your own email client with a pre-written message, which you then choose to send.
To be updated the day an analytics or advertising tag is added — that changes the legal basis and triggers a consent banner requirement.
Data received through WhatsApp, email and telephone
To be documented: categories of data, purposes, legal basis (performance of the contract, legitimate interest), retention periods.
Recipients and subcontractors
To be documented: drivers, subcontracted operators, payment provider, hosting provider, WhatsApp (Meta) and any transfer outside the EU.
Your rights
To be documented: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the CNIL.
Cookies
To be documented once any third-party script is added.