Privacy policy

Updated on

This policy explains what personal data FJ13 collects when you ask for a quote or book a private driver on alsace-tours.com, why FJ13 needs it, who else handles it, and how long it is kept. It also explains your rights under the European General Data Protection Regulation (GDPR) and how to use them.

Who is responsible for your data

The data controller is FJ13, a private transport company with driver based in Entzheim, France. For any question about your data, write to contact@FJ13.fr.

  • Legal name and form: FJ13, SASU
  • SIREN: 852 611 474
  • Registered address: see the terms of sale

Data collected

FJ13 collects only what you type into the quote and booking forms, or send by email or phone:

  • Your name.
  • Your email address.
  • Your phone number.
  • Your hotel or pick-up address.
  • Your travel dates and times.
  • The number of passengers, and the age of children if you ask for child seats.
  • Your message, including any mobility needs you choose to share.
  • Payment status. Your card details go directly to the payment provider, and FJ13 never sees or stores your full card number.

Purposes and legal bases

FJ13 uses your data for the following purposes, each with its own legal basis under the GDPR:

  • To prepare your quote and answer your questions: steps taken at your request before a contract.
  • To carry out your booking (pick-up, itinerary, child seats, contact on the day): performance of the contract.
  • To take payment and issue invoices: performance of the contract, and legal obligation for accounting records.
  • To keep accounting and tax records: legal obligation under French law.
  • To protect the site against abuse and fraud: FJ13's legitimate interest.

Service providers

FJ13 uses a small number of service providers to run the site. They process your data only on FJ13's instructions and only for the purposes above. FJ13 does not sell or rent your data.

  • Supabase: hosts the database that stores quote and booking requests.
  • Stripe: processes your payment through the secure payment link. If Stripe is unavailable, FJ13 may use SumUp, myPOS, Square or Qonto instead, only for that payment.
  • Resend: sends the emails linked to your quote and booking.
  • Vercel: hosts the website, and keeps technical logs such as IP addresses for security.
  • Plausible Analytics: counts visits to the website without cookies and without storing IP addresses or other personal data.
  • Your driver: if a partner driver carries out your service, FJ13 shares with that driver only what is needed on the day (your name, phone number, pick-up point and itinerary).

Transfers outside the European Union

Some of these providers are based outside the European Union, or may process data there. Supabase, Stripe, Resend and Vercel all cover these transfers with the European Commission's standard contractual clauses in their data processing agreements. Stripe and Resend are also certified under the EU-US Data Privacy Framework.

Retention

FJ13 keeps your data only as long as needed:

  • Quote requests that do not lead to a booking: 12 months.
  • Booking data: 10 years after the service.
  • Invoices and accounting records: 10 years, as required by French law (French Commercial Code, article L123-22).
  • Server logs: kept by Vercel for a short, limited period set by its hosting plan, then no longer available.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. To use any of these rights, write to contact@FJ13.fr. FJ13 may ask you to confirm your identity and will reply within one month.

Some data cannot be deleted before the end of its legal retention period, such as invoices. In that case FJ13 keeps it only for that legal purpose.

If you think your data is not handled properly, you can file a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertes), at www.cnil.fr, or with the data protection authority in your own country.

Cookies

alsace-tours.com sets no advertising cookies and no tracking cookies for third-party advertisers. Visits are measured with Plausible Analytics, which uses no cookies and does not identify you: it counts pages viewed, the referring site, the country and the device type, and all visitor data is processed and stored in the European Union. Because nothing is stored on your device, no consent banner is needed.

When you pay, the payment page, operated by Stripe or by the backup provider, may use its own essential cookies for security and to prevent fraud.

Marketing emails

FJ13 sends no newsletters and no marketing emails. You only receive messages about your quote or booking. You can always ask FJ13 to stop sending you anything other than messages about your booking.

Changes to this policy

If FJ13 changes this policy, the new version is published on this page with a new update date.