Privacy policy
This is an English translation provided for convenience. Only the French version of this document is legally binding.
This policy describes the data the site collects, what is done with it and the rights you hold over that data.
Data controller
- Data controller
- BS - VTC (SASU), 92 Allée de la Grande Bastide Cazaulx, 13012 Marseille
- Contact for exercising your rights
- salem_massoud@yahoo.fr
Data collected
The site only collects the information you enter voluntarily in the booking and contact forms:
- First name and surname
- Email address
- Telephone number
- Pick-up and drop-off addresses, date and time of the journey
- Number of passengers and items of luggage
- The free text of your message
No user account is created. No payment is taken on the site, so no bank details are processed.
Purpose and legal basis
This information is used solely to answer your journey request or your message: to check availability, prepare a quote and organise the journey. The legal basis is your consent, together with the performance of pre-contractual steps taken at your request.
Consent is obtained differently depending on the form used. The contact form has a mandatory tick box: until it is ticked, the message is not sent. The booking form, which is limited to the information needed for a quote, has no tick box: consent follows from submitting the form, with an explicit statement recalling what the information will be used for and linking to this policy shown in the same place as the send button.
Your contact details are never sold, rented out or used for marketing.
Recipients
Requests are sent by email to the BS-VTC driver alone. The message passes through the email sending provider chosen by the operator, which acts as a processor.
- Email sending provider
- Brevo (brevo.com)
- Site host
- Railway Corp
Transfers outside the European Union
The forms offer suggestions as you type the pick-up and drop-off addresses. The text you type in those fields is sent by the site server to an address search service, which returns a list of suggestions.
That call is made by the server, not by your browser: the service queried receives neither your IP address, nor your name, nor your telephone number, nor any other information from the form. Only the characters typed in the address field are passed to it, with no identifier that would allow it to recognise you.
The service used by default is Photon, an address search engine based on the open data of OpenStreetMap and operated by the company komoot, established in Germany. No other third party service receives any information from the forms.
If the operator replaces this service with a provider established outside the European Union, this policy will have to be updated and the safeguards covering that transfer will have to be set out here: an adequacy decision of the European Commission or standard contractual clauses.
Data security
The site keeps no client file and no client database. The information entered in the forms is sent to the driver by email and then kept in his mailbox. No profile, no browsing history and no bank details are recorded by the site.
The operator puts in place reasonable measures intended to preserve the confidentiality of your information:
- The site is published over an encrypted connection (HTTPS), so that information sent from the forms does not travel in the clear
- Requests are sent to the driver alone, to an inbox protected by a personal password
- Collection is limited to the information genuinely useful for organising the journey
- The software components of the site are updated regularly
No arrangement offers absolute security. In the event of a data breach likely to create a risk to your rights and freedoms, the operator informs the CNIL and, where the rules require it, the people concerned, on the terms laid down by the RGPD.
Your rights
You have a right of access, rectification, erasure, restriction and objection in respect of your data, as well as the right to withdraw your consent at any time. These rights are exercised with the data controller named above.
To exercise these rights, you will be asked to prove your identity. You will receive a reply within one month of your request being received, a period the RGPD allows to be extended by two months if the request is complex. If the reply does not satisfy you, you may refer the matter to the CNIL on the terms set out below.
Complaint to the CNIL
If, after contacting the data controller, you consider that your rights over your data are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French supervisory authority for the protection of personal data.
- Postal address
- CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- Telephone
- 01 53 73 22 22
- Website
- www.cnil.fr
The complaint can be filed online from the CNIL website. It costs nothing and deprives you of no remedy before the courts.