Data controller
Doudou Lubaki Nsungu, sole trader (Lubaki Driver), SIRET 909 993 883 00018. Contact: [To be completed]
Data collected
- Booking: first name, last name, email, phone, departure and arrival addresses, date and time, number of passengers and bags, flight or train number (optional), special requests, proposed price (optional).
- Customer account (optional): first name, last name, email, phone, password (stored only in encrypted form).
- Contact form: name, email, message.
- Security: IP address and an activity log (logins, bookings), to protect the website against abuse.
Purposes and legal basis
- Processing your booking and contacting you about it: performance of a contract.
- Issuing and keeping invoices: legal obligation.
- Protecting the website and preventing fraud: legitimate interest.
Your data is never sold or used for advertising.
Who receives your data
- The driver, Doudou Lubaki Nsungu, only.
- Base Adresse Nationale (French government address service): the text of the addresses you type, for suggestions.
- OpenRouteService (HeiGIT, Germany, European Union), route calculation service: the GPS coordinates of departure and arrival, without your name, to calculate the distance.
- Google (Gmail): sending of confirmation emails. Google may process this data outside the European Union, with the safeguards provided by the GDPR.
Retention period
- Bookings and messages: 3 years after the ride or the last contact, then automatically deleted.
- Customer accounts: deleted after 3 years without a login, or at any time at your request (“Delete my account” button).
- Invoices: 10 years (accounting obligation).
- Security logs: 1 year.
Cookies
The website uses only a session cookie, which is essential to keep you logged in and to secure forms. No advertising or analytics cookies are used, so no consent is requested.
Your rights
You may request access to your data, its correction, its deletion, its portability, or object to its processing, by writing to: [To be completed]. We respond within one month at most.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (cnil.fr).
Security
Encrypted passwords, restricted administrator access, daily backups, and protection against common attacks.