Privacy Policy
This policy explains what we do with your personal data when you use this site or book with Wings of Paris. We follow the European General Data Protection Regulation (GDPR) and French data protection law.
1. Who is responsible
The data controller is Adel Laoubi, trading as Wings of Paris, whose details are in the Legal Notice. We pass your booking details to the carrier AUTOCARS MELYA, which needs them to carry out your trip and which also protects them under the GDPR. Contact for any privacy question: [email protected].
2. Data we collect
- Booking request: name, phone number, email, pick-up date and time, addresses, flight or train number, number of passengers and bags, service chosen.
- Children (optional): number of child seats and the ages and weights you tell us, only to prepare the right seats.
- Messages you send us by WhatsApp, email or phone.
- Payment: handled by our payment provider. We receive the payment status, never your full card number.
- Technical data: like any website, our host processes your IP address and browser information to deliver the pages and keep the site secure.
This site currently uses no advertising or analytics cookies and no trackers.
3. Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Answer your request, prepare and carry out your transfer or tour, contact you about it | Performing a contract or steps you ask for before one |
| Invoicing, accounting, legal transport obligations | Legal obligation |
| Handling complaints and protecting ourselves in a dispute | Our legitimate interest |
| Contacting you about your request, as you agreed on the form | Your consent |
We do not sell your data and we do not send marketing emails unless you ask for them.
4. Who receives your data
- Our team, the carrier AUTOCARS MELYA and its chauffeurs, only what they need for your trip.
- WhatsApp (Meta): when you send your request, the form opens WhatsApp with your details written in a message. You send it yourself, and WhatsApp then handles it under its own privacy policy.
- IGN Géoplateforme (France, Base Adresse Nationale): when you type an address, the text you type is sent to this French public geocoding service to suggest official addresses. Your IP address is visible to that service.
- Photon / Komoot (Germany): when you type an address, the text you type is sent to the Photon service, which uses OpenStreetMap data, to suggest places. Your IP address is visible to that service. Do not type personal details in the address fields.
- Cloudflare: hosts and secures the site.
- Airwallex, the payment provider used by the carrier AUTOCARS MELYA to collect payments, when you pay.
- Authorities when the law requires it.
Some of these providers are in the United States. Where data leaves the European Economic Area, it relies on the legal safeguards those providers offer, such as the EU-US Data Privacy Framework or standard contractual clauses.
5. How long we keep it
- Booking requests that do not become a booking: 12 months.
- Bookings and invoices: 10 years, as required for accounting records.
- Children's ages and weights: deleted 30 days after the trip.
6. Your rights
You can ask us to access, correct, delete or export your data, to limit or object to its use, and to withdraw your consent at any time. Write to [email protected]. We answer within one month. You can also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of the country where you live.
7. Security
The site is delivered over an encrypted connection (HTTPS), and we limit access to your data to the people who need it.
8. Changes
We may update this policy. The date at the top shows the latest version.