Privacy policy

Data protection statement

We are delighted by the interest you have shown in our company. The management of GP SAS attaches particular importance to the security of users’ data and to compliance with data protection law.

You can browse the levoyageur.fr website without providing any personal data. However, we may need to process your personal data if you wish to use specific services offered by our company through our website. Where such processing is required and there is no legal basis for it, we systematically ask for the express consent of the data subject.

The processing of personal data such as a person’s name, address, email address or telephone number is always carried out in accordance with the General Data Protection Regulation and with the national data protection rules applicable to GP SAS. With this data protection statement, our company wishes to inform the public of the nature, scope and purpose of the personal data we collect, use and process. Data subjects are also informed of the rights they have in this respect.

As data controller, GP SAS has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data collected on this website. However, data transmitted over the Internet may be subject to security gaps, making absolute protection impossible. For this reason, data subjects also have the option of sending us their data by other means, for example by telephone.

Our website contains links to the websites of other providers or partners. Our privacy policy does not extend to the protection of your data on those websites. Any data collected by the operators of those sites is beyond our knowledge and control.

Identity of the data controller

Entity acting as data controller: GP SAS

The controller within the meaning of the General Data Protection Regulation, of any data protection law in force in the Member States of the European Union and of any other provision relating to data protection is:

GP SAS
Route du demi-bœuf
44310 La Limouzinière
FRANCE

Tel.: +33 (2) 43 32 16 00
Email: contact@groupe-pilote.com
Website: levoyageur.fr

Contact details of the external data protection officer: Integraal-MD — Email: dpo@groupe-pilote.com

Definitions

This data protection statement is based on the terminology of the General Data Protection Regulation (GDPR).

Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter the “data subject”). An “identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject

A data subject is an identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor

The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

The recipient is a natural or legal person, public authority, agency or another body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.

Third party

A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process the personal data.

Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Information on the collection of personal data

Collection of data and general information

GP SAS needs to collect personal information from you in order to provide you with a service. We collect personal information when you give it to us — by telephone, post or email, through your use of one of our websites, or through your use of our products and services. Please note that, in certain circumstances, if you do not provide the personal information we need, we will not be able to provide you with the products and services you have signed up for, or we may not be able to comply with a legal obligation.

Through data collection, GP SAS can provide its customers with user-friendly services and optimise the information and offers presented on our website to better meet the public’s expectations. Our legitimate interests are:

• ensuring the proper administration and management of our customer relationships,
• understanding how our customers use our services and optimising our vehicle fleet,
• analysing the services or products our customers want, or how they would like our services and products to be improved,
• understanding how our customers use our websites and identifying problems arising from their use,
• improving the customer’s user experience,
• informing our customers of the various products and services we offer and letting them know about new developments,
• understanding customer feedback and responding to it as well as possible,
• improving the promotions and benefits we can offer our customers,
• managing disputes and accidents and obtaining legal or professional advice.

Each time someone visits the levoyageur.fr website, certain data and general information is recorded. This information is saved in the server’s log files. The following data may be recorded:

• the type and version of the web browser used,
• the computer’s operating system,
• the URL of the website from which the system accessed levoyageur.fr,
• the sub-sites from which the system accessed levoyageur.fr,
• the date and time of access to our website,
• the system’s Internet service provider,
• any other similar data and information that would enable us to guard against an attack on our IT systems.

This anonymously collected data and information is evaluated by GP SAS for statistical purposes and with the aim of improving data protection and data security in our company, so as to guarantee optimal protection of the personal data we process. The anonymous server log file data is stored separately from all other personal data of the data subject.

Categories of personal data

In the course of our business, we may process the following categories of personal data:

• Permanent data: permanent data includes, for example, first name, surname, company name, address (private and/or business), date of birth, nationality.
• Contact data: contact data includes, for example, telephone number and email address (private and/or business).
• Optional data: optional data is data you provide to us without being asked, such as your preferences regarding vehicle equipment or vehicle category. It may also include other information, such as details of your journey to the branch (flight, train, etc.).

Use of social media

GP SAS is active on various social media, in particular the Le Voyageur Facebook page.

A social network is a social platform on the Internet — an online community that normally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or enable the Internet community to share personal or business information.

We have no knowledge of the content of the data transmitted or of its use by these companies. You can consult the privacy policies of these companies for more information on the purpose and scope of their data processing and their provisions concerning the use of your personal data:

• Facebook: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. For persons residing outside the United States or Canada, the controller of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
• YouTube: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

Use of Google tools

The levoyageur.fr website uses several tools from the American Internet giant Google. This allows us to be more efficient, stay organised, grow our business and always be by your side.

Google Analytics

GP SAS uses a website analytics service provided by Google. Analytics uses methods that allow a detailed analysis of how visitors use the website. The service uses cookies — text files stored on the data subject’s computer — and transmits them to a Google server. This data is stored by Google in the United States. Where applicable, Google may pass on the personal data collected by this technique to third parties. The data analysed includes, among other things: the URL of the site (referrer) from which the system accessed another site, which individual pages of the website the user visited, how often and for how long.

Google uses this information to evaluate your use of the levoyageur.fr website, to compile reports on website activity and to provide additional services relating to the use of the web and the Internet. This data essentially enables us to optimise the levoyageur.fr website and to carry out a cost-benefit analysis of online advertising.

Google Maps

This service allows interactive maps to be displayed directly on the levoyageur.fr website for an optimised user experience. The site is thus more functional and attractive to visitors; this measure therefore represents a legitimate interest for GP SAS.

Google Tag Manager

The levoyageur.fr website uses the Google Tag Manager service. It allows tags to be administered via a dedicated platform and useful data to be collected for managing and improving our products and services. In computing and programming, a tag is a series of characters designed to automatically trigger the execution of an action by a computer program. Tags are mainly used to capture data.

Remarketing

Via the Google Ads platform, we create remarketing campaigns. Remarketing makes it possible to reach Internet users who have already interacted with the levoyageur.fr website, whether on desktop or mobile. This allows us to show advertisements to our visitors again when they browse Google or its partner websites. The advertising is displayed through the use of cookies. You can disable the storage of cookies by configuring your browser accordingly and/or object to data capture in connection with Google remarketing via the following link: www.google.com/policies/technologies/ads/.

Google Ads

Our services use Google Ads, Google’s online advertising platform. Google Ads places a cookie on your computer (a “conversion cookie”) if you reach our website via a Google advertisement. These cookies are only valid for 30 days and cannot identify you personally. The information collected using the conversion tracking cookie is used to compile conversion statistics for Google Ads customers, who learn the number of users who clicked on their advertisement and were directed to a page with a conversion tracking tag.

Google privacy policy

Google’s privacy policy contains further information on the purpose and scope of data collection and processing by Google. You will also find information there about your rights and the settings available to protect your privacy: policies.google.com/privacy. You can also contact Google at the following address: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Contact by email

You can send us requests by email via the contact page of our website. If you send us requests for information, we store the details provided (email address, subject of your email, content of your message and date of contact), including the contact details you have entered (surname, first name, address and telephone number where applicable) in order to process your request and in case of follow-up exchanges. We do not pass on this data without your consent. The email address you have entered remains in our software until you ask us to delete it or you withdraw your consent to its storage.

Purpose and legal basis of processing

The legal bases for the data processing operations we carry out are set out below:

• Compliance with a legal obligation to which our company is subject, for example compliance with tax obligations (Art. 6(1)(c) GDPR).
• Protection of the vital interests of the data subject or of another natural person — for example, if a visitor were injured while visiting one of our branches and their name, age, social security number or other vital information had to be passed on to a doctor, hospital or other third party (Art. 6(1)(d) GDPR).
• Processing operations necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing operations are particularly permissible because they are specifically mentioned in European legislation, which considers that a legitimate interest may exist where the data subject is a client of the controller (Recital 47, second sentence, GDPR; Art. 6(1)(f) GDPR).
• The conduct of our business activities for the benefit of all our employees, customers and shareholders: administration of customer relationships, optimisation of our vehicle fleet and services, improvement of the user experience, information about our products and new developments, handling of customer feedback, improvement of promotions and benefits, management of disputes and accidents (Art. 6(1)(f) GDPR).

Outside the cases above, our company bases the processing of personal data on Art. 6(1)(a) GDPR, and we request consent for each specific purpose.

Retention period of personal data

The retention period of your personal data varies according to the purpose for which it was collected:

• Permanent, contact and contractual data is kept beyond the business relationship, with selective archiving.
• Telephone conversations with our customer support are not recorded.

Recipients of personal data

Internal transmission

GP SAS transmits your data internally to various specialised departments in order to comply with its legal and contractual obligations. Personal data is only transmitted or disclosed to the extent necessary, in compliance with the applicable data protection requirements.

Transmission within the Group

GP SAS is a subsidiary of Groupe Pilote, a company located in France operating at European level. GP SAS may share information about data subjects with other Groupe Pilote entities within the framework provided for by this policy.

Transmission to third parties

Le Voyageur may transmit personal data to specific third parties in order to make the corresponding services or applications available. These third parties provide external services. They only process the data according to our instructions and are prohibited from using it for their own commercial purposes.

Transfer to a third country or to an international organisation

GP SAS may transfer personal data to recipients located in countries outside the European Economic Area (EEA) for the purposes mentioned above. Such transmission only takes place to fulfil our contractual and legal obligations or on the basis of your consent. The transfer conditions are protected in accordance with the regulations in force concerning the protection of personal data.

Rights of data subjects

You can exercise any right described in this section by contacting the data protection officer, designated as competent by this privacy policy.

Right of access

European directives and regulations grant the person concerned by the processing of their personal data the right to obtain, free of charge, from the controller, information on the personal data collected concerning them, the purpose of the processing, the categories of data concerned, the recipients or categories of recipients to whom the data has been disclosed, the retention periods, as well as a copy of this information. To exercise this right of access, please contact dpo@groupe-pilote.com

Right to confirmation

European directives and regulations grant the data subject the right to obtain from the controller confirmation as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact the data protection officer at any time.

Right to rectification

You have the right to ask us to correct inaccurate or incomplete personal information concerning you. If a data subject wishes to exercise this right to rectification or to have their incomplete data completed, they may contact the data protection officer at any time. We will endeavour to update your personal data as quickly as possible.

Right to erasure

In accordance with European directives and regulations, the data subject has the right to obtain from the controller the erasure, as soon as possible, of personal data concerning them where one of the following grounds applies and insofar as the processing is not required:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• The data subject withdraws the consent on which the processing is based in accordance with Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
• The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
• The personal data has been unlawfully processed.
• The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.

If one of the above points applies and a data subject wishes to have personal data stored by GP SAS erased, they may contact the data protection officer at any time. They will ensure that the request is acted upon immediately. Please note that we may retain certain information about you where the law requires us to do so or where we have a legitimate reason to do so.

Right to restriction of processing

The data subject has the right to obtain from the data protection officer the restriction of the processing of personal data where one of the following applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the data.
• The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
• The controller no longer needs the personal data for the purposes of the processing, but it is still required by the data subject for the establishment, exercise or defence of legal claims.
• The data subject has objected to the processing pursuant to Art. 21(1) GDPR, pending verification of whether the legitimate grounds pursued override those of the data subject.

Right to data portability

The data subject also has the right to data portability, i.e. the right to receive the personal data they have provided in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller. When exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject also has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.

Right to object

In accordance with European directives and regulations, every data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data. From that moment, GP SAS no longer processes the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. The data subject also has the right to object to the processing of their personal data for direct marketing purposes.

Right to lodge a complaint

The data subject has the right to lodge a complaint concerning the processing of personal data with the data protection officer or with a supervisory authority.

Withdrawal of your consent to data processing

In accordance with European directives and regulations, every data subject has the right to withdraw their consent to the processing of their personal data at any time. If the data subject wishes to exercise their right to withdraw consent, they may contact dpo@groupe-pilote.com at any time.

As a responsible company, we refrain from automated decision-making and profiling.