Privacy Policy
Last updated: February 26, 2026
Data Controller : EIRL Stéphane MATHURIN (SSINT VTC)
Email : contact@ssint.fr
SIRET : 524 473 741 00014
1. Data Collected
| Category | Data | Purpose |
|---|---|---|
| Identity | Name, first name, title | Booking management, invoicing |
| Contact | Email, phone | Confirmation, notifications, support |
| Address | Postal address | Invoicing, client profile |
| Trip | Pick-up and destination addresses | Service execution |
| Payment | Transaction reference (no card data) | Invoicing — data processed by Stripe/PayPal |
| Account | Email, password (hashed), language, profile photo | Secure client area |
| Professional | Company, SIRET, VAT No. (optional) | Professional invoicing |
| Technical | IP address, user-agent, connection logs | Security, fraud prevention |
2. Legal Basis for Processing
- Contract performance: data necessary to fulfill your booking (art. 6.1.b GDPR)
- Legal obligation: invoice retention for 10 years (art. 6.1.c GDPR)
- Legitimate interest: site security, fraud prevention (art. 6.1.f GDPR)
- Consent: non-essential cookies, if applicable (art. 6.1.a GDPR)
3. Retention Period
| Data type | Duration |
|---|---|
| Active client account data | Duration of the commercial relationship |
| Inactive client data | 3 years after the last booking |
| Invoices and billing data | 10 years (legal obligation) |
| Connection / security logs | 1 year |
| Booking data | 5 years (civil prescription) |
4. Data Recipients
Your data is processed by SSINT VTC only. It may be shared with the following processors:
- Stripe — stripe.com/privacy
- PayPal — paypal.com/privacy
- Brevo — brevo.com/privacy
- IONOS — Serveurs UE
- Google Maps API — Adresses de trajets uniquement
No data is sold or transmitted to third parties for commercial or advertising purposes.
5. Your Rights (GDPR)
In accordance with GDPR (EU 2016/679) and French Data Protection law, you have the following rights:
- Right of access: obtain a copy of your data
- Right of rectification: correct inaccurate data
- Right to erasure: delete your data (subject to legal obligations)
- Right to data portability: receive your data in a structured format
- Right to object: object to certain processing
- Right to restriction: temporarily restrict processing
To exercise your rights, contact: contact@ssint.fr. Response time: maximum 30 days.
If unsatisfied with the response, you may lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
6. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| PHP Session | Maintaining connection to the client area | Session (deleted on close) |
| siteLanguage | Remembering chosen language | 1 year |
No advertising, tracking or profiling cookies are placed. These technical cookies do not require prior consent.
7. Data Security
- HTTPS (TLS) connection across the entire site
- Passwords hashed (bcrypt)
- Administration access password-protected
- Sensitive files protected (.env, SQL, PDF)
- Activity logs and suspicious login detection
- Regular backups on secure NAS (encrypted WebDAV)
8. Transfers Outside the EU
Some of our processors (Stripe, PayPal, Google) may process data outside the European Union. These transfers are governed by appropriate safeguards (EU Commission standard contractual clauses).
9. Modifications
This policy may be updated at any time. The version in force is the one published on this page with its update date.
10. Contact
Stéphane MATHURIN — SSINT VTC
Email : contact@ssint.fr
Tél : 06 89 79 66 83
16b Chemin de Beldou, 31790 Saint-Jory, France