Privacy · GDPR
Privacy Policy
Last updated: April 29, 2026
1. Data Controller
PARIS VIP TOURISME (SIREN 980 702 880), with registered offices at 66 Avenue des Champs-Élysées, 75008 Paris · France, is the controller of personal data collected through its website parisviptourisme.fr and its mobile applications (Paris VIP Tourisme – Customer & Driver). For any question regarding data protection, please write to info@parisviptourisme.fr.
2. Data Collected
We collect only the data strictly necessary to deliver our private chauffeur service: first/last name, email, phone number, pick-up & drop-off addresses, flight information (if applicable), service preferences, and payment data (processed exclusively by Stripe — we never store your card numbers). For the Driver app, we also collect real-time geolocation during active missions for vehicle tracking purposes.
3. Purpose of Processing
Your data is used to: (a) manage your reservations and deliver the transport service, (b) communicate with you regarding your ride (email, SMS, WhatsApp), (c) process payments via Stripe, (d) comply with our legal and tax obligations (French LOTI law, VTC registry), (e) improve our service. We never sell, rent, or share your data with third parties for commercial purposes.
4. Legal Basis
Processing is based on the performance of a transport contract (Article 6.1.b GDPR), compliance with legal obligations (Article 6.1.c), and, for optional marketing communications, your explicit consent (Article 6.1.a), which can be withdrawn at any time.
5. Data Retention
Booking data is retained for 10 years for accounting and tax purposes (French Commercial Code). Customer account data is retained while your account is active and deleted after 3 years of inactivity. Driver geolocation data is retained for 90 days.
6. Subprocessors
We use the following GDPR-compliant providers: Stripe (payments), Resend (transactional emails), AviationStack (flight tracking), MongoDB Atlas (database hosting), Apple/Google (push notifications). No data is transferred outside the EU without standard contractual clauses or an adequacy decision.
7. Your Rights
Under GDPR, you have the right to access, rectify, erase, port, restrict, and object to the processing of your data at any time. To exercise these rights, write to info@parisviptourisme.fr (reply within 30 days). You may also file a complaint with the CNIL (cnil.fr).
8. Cookies
Our website uses strictly necessary cookies (session, language) and anonymous audience measurement cookies. No advertising or third-party tracking cookies are placed without consent.
9. Security
All communication with our servers is encrypted via HTTPS/TLS 1.3. Passwords are hashed with bcrypt. Payments are processed by Stripe (certified PCI-DSS Level 1).
10. Minors
Our service is not intended for minors under 16. We do not knowingly collect any data concerning minors.