Last updated: [DATE]
[COMPANY NAME] ("Alps Elite Transfers", "we") takes the protection of your personal data seriously. This policy explains what data we collect on alpselitetransfers.com, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
[COMPANY NAME], [ADDRESS], SIREN [NUMBER].
Contact for any question about your data: [EMAIL]
2. Data we collect
Contact form
- First and last name
- Email address and phone number
- The content of your message
Booking / quote request form
- First and last name, email address, phone number
- Pick-up and drop-off addresses, dates and times
- Flight or train number, number of passengers, luggage, requested equipment (child seats, skis…)
- Any information you choose to add in the comments
WhatsApp messaging
If you contact us via WhatsApp, we receive your phone number, profile name and the content of your messages.
Browsing data
Subject to your consent, browsing data (pages visited, visit duration, device type, approximate location, traffic source) is collected via Google Analytics.
Mandatory fields are marked in the forms. Without this information, we cannot process your request.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your contact and quote requests | Pre-contractual steps taken at your request |
| Organising and carrying out your transfer, contacting you on the day of travel | Performance of a contract |
| Invoicing and accounting | Legal obligation |
| Audience measurement and website improvement | Your consent |
| Website security and abuse prevention | Legitimate interest |
We never sell or rent your data. We will only send you marketing messages with your consent, or about services similar to those you have already booked; you may object at any time.
4. Recipients
Your data is intended for [COMPANY NAME] and, only as far as necessary for their tasks:
- our drivers [and, where applicable, our transport partners], to carry out your transfer;
- our hosting provider o2switch (France);
- Google Ireland Ltd (Google Analytics), if you accept it;
- WhatsApp Ireland Ltd (Meta group), if you choose this contact method;
- our accountant, and public authorities where required by law.
5. Transfers outside the European Union
Google and Meta may transfer some data to the United States. These transfers are governed by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
6. Retention periods
- Contact and quote requests not followed by a booking: 3 years from the last contact.
- Customer data: for the duration of the business relationship, then 3 years for marketing purposes (unless you object).
- Invoices and accounting records: 10 years (legal obligation).
- Audience measurement data: [14] months maximum.
- Cookies: 13 months maximum; your consent choice is stored for 6 months.
7. Cookies
On your first visit, a banner allows you to accept, refuse or customise non-essential cookies. You can change your choice at any time via [the "Manage cookies" link in the footer / the cookie settings icon].
- Strictly necessary cookies (website operation, storing your consent choice, language): set without consent.
- Audience measurement cookies (Google Analytics:
_ga,_ga_*): set only with your consent, for a maximum of 13 months.
Refusing non-essential cookies does not prevent you from using the website.
8. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to give instructions regarding your data after your death.
To exercise these rights, write to us at [EMAIL] or [POSTAL ADDRESS]. We will reply within one month. Proof of identity may be requested if there is reasonable doubt.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
9. Security
We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access, regular website updates and backups.
10. Changes to this policy
This policy may be updated. The date of the last update is shown at the top of the page.