Last updated: May 2025
Privacy Policy
vitecamion attaches great importance to the protection of your personal data. This policy describes what data we collect, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR – EU 2016/679).
1. Data Controller
The data controller is vitecamion, [RAISON_SOCIALE], [FORME_JURIDIQUE], registered at [ADRESSE_SIEGE_SOCIAL], [CODE_POSTAL] [VILLE], France. Contact: info@vitecamion.com.
2. Data Collected and Purposes
We collect the following personal data: (a) Booking data – name, email address, phone number – collected when you submit a booking request, necessary for the performance of the rental contract. (b) Payment data – processed exclusively by our payment partner Stripe; vitecamion does not store your card details. (c) GPS / location data – recorded during active rental sessions to ensure vehicle security and verify the rental period, on the basis of legitimate interest. (d) Invoice data – name, email, and transaction details retained for accounting and legal compliance. (e) Technical data – session cookie necessary for site authentication.
3. Legal Basis for Processing
Depending on the processing activity: contractual necessity (booking fulfilment); legal obligation (invoice retention for 10 years under French accounting law); legitimate interest (vehicle tracking, fraud prevention); consent (any optional communications you have opted into).
4. Retention Periods
Booking and invoicing data: 5 years after the last interaction, or 10 years when required by accounting rules. GPS tracking data: deleted within 24 hours of the rental period ending. Session cookies: expire after a maximum of 5 days. Data related to cancelled or unconfirmed bookings: deleted after 90 days.
5. Recipients of Your Data
Your data may be shared with the following sub-processors, each bound by GDPR-compliant data processing agreements: Stripe Inc. (payment processing, US – covered by Standard Contractual Clauses); Google Cloud (invoice PDF storage, EU region); email delivery provider (transactional email). We never sell your personal data.
6. International Transfers
Stripe Inc. is established in the United States. Transfers are covered by Standard Contractual Clauses approved by the European Commission. Google Cloud storage is configured to remain within the EU. No other international transfers are performed.
7. Your Rights
Under GDPR you have the right to: access your data, request rectification or erasure, object to processing, request restriction of processing, and receive your data in a portable format. To exercise any right, email info@vitecamion.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
8. Data Security
We implement appropriate technical and organisational measures to protect your data: HTTPS/TLS encryption in transit, access controls on all systems, HTTPONLY session cookies. No method of transmission over the Internet is 100% secure; we will notify you promptly in the event of a breach affecting your rights.
9. Cookies
We use one essential session cookie (vitecamion_auth) that is strictly necessary for authentication. No advertising or profiling cookies are used. Our payment partner Stripe may set its own cookies during checkout; please refer to Stripe's privacy policy for details.
10. Changes to This Policy
We may update this policy when our practices change. We will indicate the revision date at the top of the page. For significant changes we will notify you by email if we hold your address.
11. Contact
For any privacy-related question or to exercise your rights, contact us at: info@vitecamion.com — or by post at: vitecamion, [ADRESSE_SIEGE_SOCIAL], [CODE_POSTAL] [VILLE], France.