隐私政策与 Cookie
最后更新：2026 年 10 月 4 日，符合《通用数据保护条例》（GDPR，欧盟第 2016/679 号条例）
出于法律准确性的考虑，本隐私政策正文以英文提供；数据保存期限表（第 4 节）已译为中文。如有争议，以法文版本为准。
Table of Contents
1. Data Controller
The data controller for personal data collected via the website onyxdriveparis.fr is:
EasyMoveVan (Trade name: Onyx Drive Paris), Individual Enterprise (VTC), SIREN 510 489 966
Cormeilles-en-Parisis, 95240, France
Email: contact@onyxdriveparis.fr
Phone: +33 6 02 56 56 80
Given the volume and nature of the processed data (transport bookings, no large-scale processing of sensitive data), Onyx Drive Paris is not legally obligated to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR.
2. Data Collected and Purposes
a) Booking Form
When booking on the site, we collect:
| Data | Purpose | Mandatory |
|---|---|---|
| Full Name | Passenger identification, meet and greet, confirmation email | Yes |
| Phone number | Coordination on the day, contact in case of incident | Yes |
| Email address | Sending booking confirmation and invoice | Yes |
| Addresses (pickup/drop-off) | Execution of the transport service | Yes |
| Date and time of journey | Service planning | Yes |
| Number of passengers | Vehicle capacity verification | Yes |
| Number of luggage items | Application of potential luggage supplement | Yes |
| Flight number | Flight tracking, adjustment in case of delay | No |
| Child seat request | Vehicle preparation | No |
b) Newsletter (Voluntary Subscription)
If you opt-in after booking, we collect your name and email to occasionally send you news and offers. This subscription is optional and not checked by default. You can unsubscribe at any time via the link in each email.
c) Analytics and Audience Measurement
With your consent, we use Google Tag Manager and Google Analytics 4 (GA4) to measure site audience. This data is collected in an aggregated and anonymized way.
3. Legal Basis for Processing
- Performance of a contract (Art. 6.1.b GDPR): Processing of booking data necessary for the transport service.
- Legitimate interest (Art. 6.1.f GDPR): Site security, fraud prevention, service improvement.
- Legal obligation (Art. 6.1.c GDPR): Retention of billing data for 10 years (tax and accounting obligations).
- Consent (Art. 6.1.a GDPR): Analytics cookies and newsletter subscription.
4. Retention Period
| 类别 | 保存期限 | 法律依据 |
|---|---|---|
| 预订数据（姓名、联系方式、行程） | 自最后一次服务起 3 年 | 民事诉讼时效（《法国民法典》第 2224 条） |
| 司机 GPS 位置（行程当天的临时定位） | 行程结束时（状态为“已完成”或“已取消”）自动删除 | 履行合同（GDPR 第 6 条第 1 款 b 项） |
| 作为担保登记的银行卡（Stripe，如选择此选项） | 行程结束 7 天后自动解除绑定（2026 年 10 月 4 日之前完成的预订为 72 小时），作为车上付款出现问题时的安全期限；预订取消时立即解除绑定，无论是在因未到场、逾期取消或付款问题而可能进行的扣款之前还是之后 | 履行合同（GDPR 第 6 条第 1 款 b 项） |
| 新闻通讯订阅（姓名、电子邮箱） | 直至退订 | 同意（GDPR 第 6 条第 1 款 a 项） |
| 开票及付款数据 | 自会计年度结束起 10 年 | 《法国商法典》第 L123-22 条 |
| 连接及安全日志 | 1 年 | 《法国邮政与电子通信法典》（CPCE）第 R10-13 条 |
| GA4 数据（受众统计） | 最长 14 个月 | CNIL（法国国家信息与自由委员会）建议 |
| Cookie 同意记录 | 6 个月 | CNIL 建议 |
5. Data Processors and Recipients
Onyx Drive Paris undertakes to never sell, rent, or transfer your data to third parties for commercial purposes. Your data may only be shared with the following technical processors strictly within the scope of the service:
Firebase / Google Cloud
Hosting and database
Google Maps Platform
Distance calculation
Google Analytics 4
Audience measurement
Zoho Mail
Email routing
Stripe
Payment processing (Pre-authorization)
Telegram
Internal booking notification to our team
Google Calendar
Internal ride scheduling
6. Transfers outside the EU
Some of our processors (Google LLC, Stripe Inc., Zoho) are based outside the EU. These transfers are governed by the EU-US Data Privacy Framework (decision 2023/1795) and Standard Contractual Clauses (SCCs).
Telegram (Telegram FZ-LLC): based outside the EU, not currently covered by the Data Privacy Framework or by signed Standard Contractual Clauses. Used only for a minimal internal booking notification to our team.
8. Loyalty and Referral Program
The "Club Onyx Privilège" program (loyalty and referrals, see onyxdriveparis.fr/fidelite) is processed separately from the booking data itself.
- Legal basis: consent (Art. 6.1.a GDPR) - joining the program and creating a loyalty profile results from a voluntary action by the client (scanning an in-car QR code, or earning points after a ride using the contact details already provided at booking).
- Data processed: phone number (profile identifier), name, email, number of completed rides, points balance, history of discount codes generated (with used/active status), number of referred contacts and ambassador tier reached.
- 推荐链接: 新的个人推荐链接使用随机代码，网址中不会显示您的电话号码。先前分享的含电话号码的旧链接仍可使用，请勿公开发布。
- Referees: when someone books through your link, their phone number is stored in your referrer profile only to prevent the same referee being credited twice - it is not shown in the referrer's interface beyond the referral count.
- Secure access: viewing your loyalty profile (name, email, history, active discount codes) on the dedicated page requires a one-time verification code sent by email to the address already on file, so that someone who only knows your phone number cannot view this information.
- Retention period: loyalty profile data is kept while the program remains active for the account concerned, and deleted on request (see Section 9, Your Rights) or after 3 years of inactivity (no ride, no referral) from the last point earned.
9. Your Rights
Under the GDPR (Art. 15 to 22), you have the right of access, rectification, erasure ("right to be forgotten"), restriction, objection, and data portability.
Exercise your rights
Send your request to contact@onyxdriveparis.fr.
10. Contact and Complaints
If you believe your rights are not respected, you can file a complaint with the French Data Protection Authority (CNIL) at www.cnil.fr.
For complete details, please refer to the French version of this Privacy Policy which serves as the legally binding document.