I. Introduction
Welcome to CABVY and CABVY Business, operated by CABVY (“we”, “our” or “us”). This privacy policy governs the collection, processing and protection of your personal information in accordance with the strict data protection laws applicable in France, including the General Data Protection Regulation (GDPR) and the French Data Protection Law (Informatics and Freedoms Act). Please review this Privacy Policy carefully to fully understand our procedures and practices regarding your personal information. Your use of the VTC (Tourist Vehicle with Driver) application signifies your consent to our data processing procedures. If you disagree with any aspect of this policy, we ask that you please refrain from using the VTC application.
II. Manager information
At CABVY, we attach great importance to preserving the confidentiality of your personal data. Our goal is to provide you with a smooth and secure mobility experience while uncompromisingly respecting your privacy. With this in mind, in order to improve our services in a personalized manner, we may need to analyze your travel patterns. Rest assured that the confidentiality and security of your information are essential elements for us.
We are fully committed to respecting French and European data protection regulations. We strictly comply with the French law of 1978 relating to data processing, files and freedoms, as well as the European regulation of April 27, 2016, commonly known as GDPR. This policy aims to inform you about our personal data processing practices. As data controller, CABVY is registered in the Trade Register and
des Sociétés de Paris en France, under number 913 172 979, and assumes full responsibility for this Privacy Policy.
By using our mobile applications and our CABVY and CABVY Business services, you expressly accept the terms of this Privacy Policy. Please note that this Policy does not cover the practices of entities over which we have neither control nor ownership, nor individuals that we do not employ or manage.
III. What we collect
We may collect and process the following categories of personal information about you:
Contact Information: This includes your name, email address, telephone number and postal address.
Profile Information: We may collect your username, profile picture, and other details that you provide when setting up your VTC account.
Transaction information: We keep records of your trips, payments and other transactions made through the VTC application.
Location Information: When you enable location services on your device, we may collect precise location data.
Usage Information: We collect data about your interactions with the VTC app, including your preferences and settings.
Communication Information: Records of your interactions with us, including customer support requests, comments or reviews.
Identification Information: Where required by law for verification purposes, we may request government-issued identification documents, driver's licenses or other forms of identification.
Sensitive Information: We do not knowingly collect or process sensitive personal information (for example, racial or ethnic origin, religious beliefs, sexual orientation and health data) unless required by applicable law and with your explicit consent.
IV. Purposes and legal grounds for processing
At CABVY, we process your personal data in strict compliance with current French legislation, in particular the law of January 6, 1978 relating to data processing, files and freedoms, as well as the European regulation of April 27, 2016 on the protection of personal data (GDPR). We collect and process your data for the following purposes :
-
User account management : We use your personal data to create and manage your user account on our platform. The information collected includes your name, email address, telephone number and any other information necessary to manage your account.
Provision of services: We use your personal data to provide you with our services connecting passengers and transport providers. This includes booking management, trip tracking, billing, and any necessary customer support.
Communication with users : We use your personal data to send you important information regarding your account, your reservations or any changes to our services. We may also use your contact details to send you newsletters or promotional offers, with your explicit consent.
Improving our services: We use your personal data to analyze the use of our platform, understand user preferences and improve our services. This may include the use of cookies or other tracking technologies to collect information about your browsing and behavior on our site.
The legal bases we rely on to process your personal data are:
-
User consent : When you create a user account or use our services, you consent to the processing of your personal data for the purposes described above.
-
Performance of a contract : The processing of your personal data is necessary for the performance of the contract between you and CABVY for the use of our services.
-
Compliance with a legal obligation : We may also process your personal data to comply with our legal obligations, such as billing or maintaining accounting records.
-
Legitimate interests : We may process your personal data to pursue our legitimate interests, such as the security of our platform, the prevention of fraud or the improvement of our services, to the extent that these interests are not overridden by your rights and fundamental freedoms.
-
Data security : Your personal data is secured and encrypted using an SSL (Secure Sockets Layer) connection to guarantee the confidentiality and integrity of your information during transmission on our platform.
CABVY is committed to guaranteeing the confidentiality, integrity and security of your personal data. If you have any questions or concerns regarding our use of your personal data, please do not hesitate to contact us at the address provided in our Privacy Policy.
V. Collected data retention policy
We are committed to storing and using your personal information responsibly and transparently. The retention period of your data will be determined based on our legal obligations, the need to keep your account active, the execution of our agreements, the resolution of disputes, and in accordance with applicable legal and regulatory provisions.
-
Personal data of users :
Users' personal data are kept for the period necessary to achieve the purposes for which they were collected. This includes managing user accounts, providing services, communicating with users and improving our services. Once these purposes are achieved and the legal retention period has expired, the personal data is permanently deleted.
-
Duration of retention of user data :
Users' personal data are kept for the duration of their contractual relationship with CABVY, as well as for a subsequent period necessary to comply with legal obligations or to resolve possible disputes. In the absence of an active contractual relationship, personal data is retained for a maximum period of thirty days (30), after which it is securely deleted.
-
User rights :
Users have the right to request access, rectification or deletion of their personal data at any time, as well as to limit or object to their processing. However, we may retain user data following a deletion request, in accordance with legal or regulatory requirements, or for reasons set out in this statement.
-
Deleting data :
If personal data is deleted, it is securely deleted from our systems within a maximum of 30 days following receipt of the deletion request via our mobile applications.
We are committed to respecting the privacy of our users and to processing their personal data responsibly and in accordance with current legislation.
VI. Parties receiving collected information
CABVY attaches great importance to the protection of the personal data of our users. In accordance with current French and European legislation, we inform you of the parties likely to receive the information collected via our platform :
-
Service providers :
In the course of providing our services, certain information collected may be communicated to third party service providers. These service providers are subject to strict contractual obligations and are only authorized to use your personal data for the specific purpose for which it was communicated to them.
-
Legal and regulatory authorities :
We may be required to disclose your personal information in response to a legal or regulatory request, such as a subpoena, court order, or a request from a governmental authority.
-
Commercial Partners :
In order to provide you with promotional offers or additional services, we may share your data with carefully selected business partners. In this case, we always obtain your prior consent before sharing your personal information.
-
International transfers :
Your personal data may be transferred to countries outside the European Economic Area (EEA) for the purposes described in this policy. In such cases, we ensure that appropriate security measures are in place to ensure that your data is protected.
-
Our team :
This includes members of our staff responsible for the day-to-day management of our services. We also collaborate with oversight bodies such as auditors, as well as third-party partners who provide us with essential services to ensure the proper functioning of our platform. These partners may include analytics service providers, hosting providers, online communications providers and other technical providers necessary for our business.
At CABVY, we are committed to ensuring the confidentiality and security of your personal data.
VII. Rights of the individuals concerned over their data
At CABVY, we strictly comply with French legislation, in particular Law No. 78-17 of January 6, 1978 relating to computing, files and freedoms, as well as the General Data Protection Regulations (GDPR) of the European Union. In accordance with these regulations, we recognize and respect the following rights of those affected by the processing of their personal data:
-
Right of access (Article 15 GDPR) :
You have the right to obtain from us confirmation that personal data concerning you is or is not being processed, as well as access to this data and certain related information.
-
Right of rectification (Article 16 GDPR) :
You have the right to request the rectification of your inaccurate or incomplete personal data without undue delay.
-
Right to erasure (Article 17 GDPR) :
You have the right to have your personal data erased in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.
-
Right to limitation of data processing (Article 18 GDPR) :
You have the right to obtain restriction of the processing of your personal data in certain situations, for example when you contest the accuracy of the data or when the processing is unlawful.
-
Right to data portability (Article 20 GDPR) :
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit it to another controller.
-
Right to object to processing (Article 21 GDPR) :
You have the right to object, at any time, for reasons relating to your particular situation, to the processing of your personal data, unless legitimate and compelling reasons prevail.
-
Right to withdraw consent (Article 7 GDPR) :
If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
-
Refusal of certain requests :
However, please note that in certain circumstances we may be legally required to refuse your request to exercise these rights. If this is the case, we will provide you with a detailed explanation of the reasons for this refusal.
-
How to exercise your rights :
To exercise your rights or for any questions regarding the processing of your personal data at CABVY, please contact us at the following email address: assistance@cabvy.app.
We are committed to responding to your requests as quickly as possible.
and in accordance with current legislation.
VIII. Cookie management and analysis tools
Our commitment to privacy and transparency is reflected in the use of third-party analytics tools on our mobile and web platforms, which strictly comply with current regulations. These tools, such as cookies and web beacons, collect standard information about online activity in order to compile statistical reports on the use of our application and services. We use this data to monitor performance and continually improve our platform, but do not collect personally identifiable information or associate it with individual users.
The privacy and protection of our users' data is our top priority.
IX. Transparency and clarity in communications
We strive to ensure transparent and understandable communication with our users regarding how we process their personal data.
Here is how we guarantee this transparency:
-
Advertising policy :
We inform you of the presence of online advertisements and the sharing of aggregated and anonymous information with our advertising partners. However, no personally identifiable data is shared.
-
Third Party Partnerships :
We sometimes work with third-party partners to personalize ads and collect data about your activity. However, these partners only have access to anonymized information and cannot identify you.
-
Email Marketing :
If you subscribe to our newsletters, your email address will be treated confidentially and will not be shared with third parties without your consent.
You can unsubscribe at any time.
-
Push notifications :
The push notifications we send are based on a unique identifier for your device, thereby preserving your privacy. You have full control over receiving these notifications through your device settings.
-
External links :
We sometimes include links to external resources, but we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal information.
X. Data transfer process
We diligently manage any data transfer to ensure compliance with privacy laws. Although international transfers may take place, including to countries outside the European Union (EU), we ensure that each transfer complies with security and data protection standards. You can find specific details in our privacy policy. Your privacy is our top priority, and we ensure that your data is treated with the greatest care and in compliance with current legislation.
XI. Information security measures
Information security is a key priority for us at CABVY. We have implemented advanced protocols to ensure the protection of your data. These measures include state-of-the-art encryption, rigorous access controls and regular audits. Our servers are hosted in secure, industry-standard facilities. Although we take every precaution, it is important to note that no method of transmission over the Internet is completely secure.
XII. Consent
As part of our legal consent policy, we inform our users that the use of our mobile applications "CABVY" and "CABVY Business" automatically implies acceptance of the legal and confidentiality conditions stipulated therein. This acceptance is necessary to access our services. We ensure that these conditions are clear, accessible and comply with current data protection legislation. Any user with reservations regarding these conditions is requested to refrain from using our services. At CABVY, we value transparency and respect for our users' choices regarding legal consent.
XIII. Modifications and changes
As of March 10, 2024, this version of the Privacy Policy comes into effect. CABVY reserves the right to modify this policy at any time, with notification by various means. Changes will be effective immediately upon posting of the revised policy, unless otherwise noted. Your continued use of the Services following such changes will constitute your consent, unless otherwise indicated. We undertake to clearly inform you of any modification, in accordance with French data protection law.