1. Who We Are — Data Controller
The data controller responsible for your personal information is:
Lyon Airport Transfer
[Legal entity: SARL / Company Name]
SIRET: [XXXXXXXXXXXXXXXXX]
Address: Lyon, Auvergne-Rhône-Alpes, France
Email: booking@lyonairporttransfer.com
Phone: +33 6 23 24 68 45
2. What Personal Data We Collect
We collect the following categories of personal data:
2.1 Booking Data
- Full name and title
- Email address
- Phone number (mobile and/or landline)
- Pickup and destination addresses
- Flight number and scheduled arrival/departure time
- Number of passengers and luggage
- Child seat requirements
- Payment information (processed by Stripe — we do not store card numbers)
2.2 Communication Data
- Messages sent via our contact form
- Email correspondence
- WhatsApp / SMS messages
2.3 Technical Data
- IP address and browser type (via standard web server logs)
- Pages visited and time spent on site (via Google Analytics)
- Cookie identifiers (see Section 7)
3. How We Use Your Data
We use your personal data for the following purposes:
- To fulfil your booking — assigning a driver, confirming pickup details, monitoring your flight
- To communicate with you — booking confirmations, driver details, journey reminders, receipt/invoice
- To process payment — via Stripe's secure payment infrastructure
- To improve our service — analysing anonymised usage data to enhance website experience
- To comply with legal obligations — accounting records, tax obligations, Private Chauffeur regulatory requirements
- To respond to enquiries — answering your questions and processing complaints
We never sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing (GDPR Article 6)
- Contract performance (Art. 6.1.b) — processing necessary to execute your booking contract
- Legal obligation (Art. 6.1.c) — accounting, tax, and Private Chauffeur regulatory compliance
- Legitimate interests (Art. 6.1.f) — fraud prevention, service improvement, security
- Consent (Art. 6.1.a) — where you have explicitly opted in (e.g. newsletter)
5. Data Retention Periods
- Booking records: 5 years (French commercial law requirement)
- Accounting and invoice data: 10 years (French tax law)
- Contact form messages: 3 years from last contact
- Website analytics: 26 months (Google Analytics default, anonymised)
- Marketing consent: Until you withdraw consent
6. Who We Share Your Data With
We share your data only with the following trusted service providers, under strict data processing agreements:
- Stripe Inc. — payment processing (PCI DSS Level 1 certified)
- Google LLC — Google Analytics (anonymised web traffic analysis)
- Your assigned driver — name and phone number only, for journey coordination
- Email service provider — to send booking confirmations
None of these parties are authorised to use your data for their own purposes beyond the specified service.
7. Cookies & Tracking Technologies
Our website uses the following types of cookies:
- Strictly necessary cookies — essential for the booking process to function. Cannot be disabled.
- Analytics cookies — Google Analytics to understand how visitors use the site. Can be disabled via our Cookie Preferences page.
- Functional cookies — remembering your language and currency preferences.
We do not use advertising, tracking, or profiling cookies. You can manage your cookie preferences at any time: Cookie Preferences →
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure (“right to be forgotten”) — request deletion of your data (subject to legal retention obligations)
- Right to restriction — request we limit processing of your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, contact us at booking@lyonairporttransfer.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- HTTPS encryption across the entire website (TLS 1.3)
- Stripe PCI DSS Level 1 payment processing — we never store card numbers
- Access controls limiting staff access to personal data
- Regular security reviews and software updates
10. Contact & Complaints
For any questions about this Privacy Policy or to exercise your rights, contact our Data Protection Officer:
Email: booking@lyonairporttransfer.com
Phone: +33 6 23 24 68 45
If you are not satisfied with our response, you have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l’Informatique et des Libertés)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
