1. Who is responsible for your personal data?
The controller is SASU IZIPIZI TRVL, a French société par actions simplifiée unipersonnelle (SASU), registered office at 13 C chemin du Levant, 01210 Ferney-Voltaire, France; SIREN 102 725 454; RCS Bourg-en-Bresse.
Contact: [email protected], +33 7 68 58 57 64.
2. What data do we collect?
Depending on your interaction with us, we may process:
- Identity and contact details: name, email, telephone number and, where necessary, billing details.
- Booking and journey details: pickup/drop-off locations, date and time, airport or station, flight/train number and schedule, passenger count, luggage and ski/snowboard details, child-seat requests and information needed to coordinate the transfer.
- Payment and transaction details: payment status, amount, currency, payment method and transaction reference. Online card details are handled by the payment provider; we do not intend to store full card numbers or security codes.
- Communications: quote requests, emails/messages, customer-service enquiries and complaints, including information you choose to provide.
- Website/device data: IP address, browser/device information, pages visited, security logs, and cookie or similar-tracker choices, subject to your settings and consent.
- Optional arrangements: accessibility or other needs you ask us to accommodate. Please do not send sensitive medical information unless genuinely necessary to arrange the transfer.
We receive information from you, the person booking on your behalf, and the tools that support our website, booking and payment services. If you provide another passenger’s information, please ensure they know and can read this Policy.
3. Why do we use data, and what is the legal basis?
|Purpose |Legal basis |
|------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------|
|Answer enquiries, check availability and prepare a quote |Steps requested before a contract; legitimate interests in responding to business enquiries |
|Confirm and perform a booking, coordinate the driver/pickup and send service updates|Performance of the contract |
|Take/reconcile payments, process refunds and issue invoices |Contract and legal obligations |
|Handle complaints, claims and legal requests |Legal obligations and legitimate interests in establishing, exercising or defending legal claims|
|Protect the website and prevent misuse or fraud |Legitimate interests and, where applicable, legal obligations |
|Send optional marketing |Consent where required; otherwise the applicable legal basis, with a simple way to object |
|Use non-essential analytics or advertising trackers |Prior consent where required by law |
You may choose not to provide information marked as necessary in the booking process. We may then be unable to quote, confirm or provide the transfer.
4. Who may receive your data?
Only data needed for the relevant purpose may be shared with authorised GO IZIPIZI staff and your assigned driver; service providers supporting hosting, booking/dispatch, email/communications, payment processing, accounting and IT/security; professional advisers, insurers, banks and payment providers; public authorities where legally required; and a consumer mediator where an eligible dispute is submitted.
Providers to confirm before publication:
- website host: Mozello SIA
- booking/dispatch system: Mozello SIA
- online payment provider: Stripe, Inc. (SIREN: 812 425 882)
- email provider: Google LLC
- analytics/advertising tools: Google LLC & Meta Platforms, Inc.
- maps or embedded-content providers: Google LLC & Youtube LLC.
We do not sell personal data.
5. International transfers
Some providers may process data outside the European Economic Area. Where this occurs, we use a transfer mechanism recognised by applicable data-protection law, such as an adequacy decision or appropriate contractual safeguards. Further information is available on request.
6. How long do we keep data?
We keep data only as long as needed for its purpose, then delete it or restrict access unless a longer period is required or permitted by law.
- Enquiries that do not become bookings: for the response and follow-up; if retained for marketing, no longer than three years from collection or your last contact, unless you object earlier.
- Booking and service records: while needed to manage the transfer, customer service and related claims; selected records may then be archived for applicable limitation and legal periods.
- Invoices and accounting records: for the statutory retention period. French business guidance generally specifies ten years for accounting supporting documents, including invoices.
- Marketing preferences/suppression records: as needed to honour your choices and demonstrate compliance.
- Website/security logs and cookie choices: according to actual system settings and applicable rules.
Access to archived records is restricted. Exact periods depend on record type and applicable requirements.
7. Your rights
Subject to applicable law, you may request access, correction, erasure or restriction; receive data you provided in a portable format where that right applies; object to processing based on legitimate interests, including direct marketing; and withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing carried out before it.
Contact [email protected]. We may ask for information to verify your identity and aim to respond within one month, subject to lawful extensions. You may complain to the French supervisory authority, CNIL (Commission nationale de l’informatique et des libertés), at cnil.fr.
8. Cookies and similar technologies
The website may use technologies essential for security, page functionality or a service you request. Analytics, advertising, social-media or embedded-content trackers may require prior consent. You can accept or refuse optional trackers through the cookie banner and later change your choice via cookie settings. Refusing optional trackers should be as easy as accepting them. Details of technologies actually used, their purposes and retention periods will be shown in Cookie Policy or settings panel.
Before publication: inspect the live website and booking journey, list actual cookies/trackers and ensure trackers requiring consent do not load before consent.
9. Security
We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration or disclosure. Access is limited to people and providers who need the data for their role. No transmission or storage method can be guaranteed completely secure.
10. Children
Bookings are generally made by an adult. The booking adult may provide the minimum information needed to arrange transport for accompanying children, such as the number of children and child-seat requirements. We do not knowingly use children’s data for marketing.
11. Third-party links and embedded services
Our website may link to third-party sites or include maps, payment, booking or other embedded services. Those providers may process data under their own privacy notices.
For example:
- Stripe Inc
- Youtube LLC
- Google LLC
12. Changes
We may update this Policy when our services, data practices or legal requirements change. The current version and update date will appear on this page.