privacy policy

WHO WE ARE

The website http://travelais.com/ (including its online store and blog) is operated by: EI-Malwina Zbiciak, 6 bis Avenue Durante, 06000 Nice, France, email: hello@travelais.com, SIRET / Registration Number: 91411575300024. For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection laws, EI-Malwina Zbiciak is the Data Controller.

PERSONAL DATA WE COLLECT

We collect personal data directly provided by you, as well as data collected automatically when you browse our Website:

• E-commerce & Orders: Name, surname, billing address, shipping address, email address, phone number, VAT/Tax ID (if applicable), and payment details (processed securely via external payment providers).
• Account & Communication: Name, email address, message contents submitted via contact forms, live chat, or email.
• Newsletter & Marketing: Email address and communication preferences.
• Comments & User Content: Name/pseudonym, email address, IP address, and browser user agent string.
• Technical & Browsing Data (Cookies): IP address, browser type, device information, operating system, pages viewed, and referral URLs.

PURPOSES AND LEGAL BASES FOR PROCESSING

We process your personal data based on the following legal grounds under GDPR:

1. Execution of a Contract (Art. 6(1)(b) GDPR): To process orders, manage purchases, deliver digital or physical goods, process payments, and provide customer support.
2. Consent (Art. 6(1)(a) GDPR): For sending marketing newsletters, personalized advertisements, setting non-essential cookies, and publishing user comments. You may withdraw consent at any time.
3. Legitimate Interest (Art. 6(1)(f) GDPR): To prevent fraud, ensure website security, optimize performance, handle customer inquiries, and conduct analytics.
4. Legal Obligations (Art. 6(1)(c) GDPR): To comply with tax, accounting (French Code de Commerce), and statutory requirements.

RETENTION PERIOD

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Order and Transaction Records: Retained for 10 years to comply with French legal and tax retention requirements (Art. L123-22 Code de commerce).
• Customer Support Inquiries: Retained for up to 3 years from the date of final resolution.
• Marketing & Newsletter: Retained until you unsubscribe or after 3 years of continuous inactivity.
• Cookies & Tracking Data: Retained according to their specific lifespan, up to a maximum of 13 months for analytical cookies.

THIRD-PARTY SERVICE PROVIDERS AND DATA SHARING

We share personal data with trusted third-party service providers acting as Data Processors to operate our business:

• Payment Processors: (e.g., Stripe, PayPal) for secure transaction processing.
• Logistics & Shipping: Courier and postal services for order fulfillment.
• Hosting & IT Infrastructure: Website hosting, email servers, and cloud security providers.
• Marketing & Analytics:** Email platform tools, affiliate networks, and analytics services (e.g., Google Analytics).

INTERNATIONAL DATA TRANSFERS

When transferring data outside the European Economic Area (EEA) (e.g., to service providers based in the United States), we ensure that appropriate safeguards are implemented in compliance with Chapter V of the GDPR. These include:

• Transfers to countries deemed adequate by the European Commission.
• Adherence to the EU-U.S. Data Privacy Framework.
• Standard Contractual Clauses (SCCs) approved by the European Commission.

YOUR RIGHTS UNDER GDPR

Under European data protection laws, you possess the following rights regarding your personal data:

• Right of Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data where legally applicable.
• Right to Restrict Processing: Request limited processing under specific statutory conditions.
• Right to Data Portability: Request transfer of your data to another controller in a structured format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously granted consent at any time.

To exercise any of these rights, contact us at hello@travelais.com. We will respond within one month of receiving your request.

RIGHT TO LODGE A COMPLAINT

If you believe your personal data is processed in violation of privacy laws, you have the right to lodge a complaint with the French Supervisory Authority:
CNIL (Commission Nationale de l’Informatique et des Libertés) 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France Website: www.cnil.fr.

COOKIES AND TRACKING TECHNOLOGIES

We use functional, statistical, and marketing cookies. You can customize or withdraw your cookie consent at any time via the Cookie Management banner on our Website. For full details on the cookies we use, please refer to our dedicated Cookie Policy.

NOTICE FOR U.S. / CALIFORNIA RESIDENTS (CCPA/CPRA)

If you reside in California, you have specific rights under the California Consumer Privacy Act (CCPA/CPRA):

• Right to know what personal information is collected, disclosed, or sold.
• Right to opt-out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.
• Right to non-discrimination for exercising your privacy rights.

We do not sell personal information for monetary value. To exercise your rights under CCPA/CPRA, please contact hello@travelais.com.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy. Any modifications will be posted on this page with an updated “Last updated” date.