Star Tourism Services (hereinafter "STS") attaches great importance to protecting the personal data of its users and clients. This policy aims to inform you about how we collect, use, store and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
The personal data controller is:
Star Tourism Services (SASU)
40 rue Lauriston, 75116 Paris, France
SIRET 819 883 521 00018
Email : contact@startourismeservices.com
Téléphone : +33 6 98 98 33 11
2. Personal data collected
2.1 Identification data
- First and last name
- Email address
- Phone number
- Postal address (for invoicing if applicable)
2.2 Booking data
- Pickup date and time
- Pickup location and destination
- Selected vehicle
- Number of passengers and luggage
- Flight number (for airport transfers)
- Specific requests (child seat, etc.)
2.3 Payment data
Payment data (credit card numbers) is NEVER stored on our servers. It is processed directly by our secure payment provider (3D Secure).
2.4 Connection data
- IP address
- Browser type and operating system
- Pages visited and visit duration
3. Purposes of processing
Your personal data is collected and processed for the following purposes:
| PURPOSE | LEGAL BASIS |
|---|---|
| Booking management | Contract performance |
| Invoicing and accounting | Legal obligation |
| Booking-related communication | Contract performance |
| Responding to your requests (contact form) | Legitimate interest |
| Improving our services | Legitimate interest |
| Compliance with legal obligations (accounting retention) | Legal obligation |
4. Data recipients
Your personal data is intended for STS internal services (booking team, accounting, management) and, where applicable, our strictly necessary subcontractors:
- Website host: O2switch (France)
- Secure payment provider
- Transactional email provider
Your data is NEVER sold or transferred to third parties for commercial purposes.
5. Transfers outside the EU
No data transfer outside the European Union is carried out as part of our activity.
6. Retention period
Your personal data is retained for the following periods:
- Booking data: 3 years from the last service
- Accounting data (invoices): 10 years (legal obligation)
- Prospect data: 3 years from the last contact
- Technical cookies: 13 months maximum
Beyond these periods, your data is deleted or anonymized.
7. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right of rectification: correct inaccurate data
- Right to erasure: delete your data (subject to conditions)
- Right to restriction: limit the processing of your data
- Right to portability: receive your data in a structured format
- Right to object: object to processing on legitimate grounds
- Right to withdraw consent: at any time
To exercise these rights, contact us at: contact@startourismeservices.com
We undertake to respond to your request within one month.
8. CNIL complaint
If you consider that your rights are not respected, you can lodge a complaint with the CNIL:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy — TSA 80715
75334 PARIS CEDEX 07
www.cnil.fr
9. Security
STS implements all appropriate technical and organizational measures to ensure the security of your personal data, in particular:
- Secure hosting in France (O2switch)
- Encryption of communications (HTTPS/TLS)
- Restricted access to data by authorized personnel
- Regular backups
10. Cookies
Our site uses technical cookies necessary for its operation. For more information, see our Cookie Policy.
11. Policy updates
This privacy policy may be updated. Any modification will be published on this page with the update date.