Privacy Policy
Last updated: 4 March 2026
ParisTours is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act.
1. Data Controller
- Company
- ParisTours
- Address
- XX Rue XXXXX, 75000 Paris, France
- DPO Contact
- rgpd@paristours.net
2. Data Collected
- •Identity (name, email, phone number)
- •Booking data (routes, passengers, preferences)
- •Payment data (processed exclusively by Stripe — we store no card details)
- •Connection data (IP address, logs)
- •Cookies (with your consent)
3. Purposes of Processing
- •Managing bookings and customer accounts
- •Processing payments and issuing invoices
- •Service-related communications (confirmations, reminders)
- •Service improvement and anonymised analytics
- •Compliance with legal obligations (accounting, tax)
4. Legal Basis
Contract performance
Booking, invoicing
Legal obligation
Accounting records (5 years)
Legitimate interest
Service improvement
Consent
Marketing cookies, promotional communications
5. Retention Period
Account data3 years after last activity
Bookings & invoices5 years (legal requirement)
Connection logs1 year
Cookie consents1 year
6. Your Rights
Access
Rectification
Erasure
Portability
Objection
Restriction
To exercise these rights, contact us at rgpd@paristours.net. You also have the right to lodge a complaint with the CNIL (cnil.fr).
7. Cookies
Please refer to our Cookie Policy.
8. Sub-processors
StripePaymentsUSA — EU standard contractual clauses
VercelHostingUSA — EU standard contractual clauses
GoogleMappingUSA — EU standard contractual clauses
ResendTransactional emailsUSA