Privacy policy

Data controller

LUTETIA, 59 rue de Ponthieu, 75008 Paris, France. For any question about your data: [email protected].

Data we collect

When you use the request form: name, email address, phone number, intended service and destination, dates, number of guests, indicative budget if you share it, message and preferred contact method.

When you contact us by WhatsApp, email or phone: whatever information you choose to share.

Technical data: your IP address is used temporarily for site security and to limit abusive submissions. Audience measurement is only enabled with your consent.

We never ask for payment details or identity documents through this site.

Purposes and legal bases

Answering your request and preparing a service: pre-contractual steps taken at your request (Article 6(1)(b) GDPR).

Delivering agreed services: performance of a contract (Article 6(1)(b)).

Keeping the site secure and preventing abuse: legitimate interest (Article 6(1)(f)).

Measuring site audience: your consent (Article 6(1)(a)), which you may withdraw at any time.

Meeting accounting and tax obligations: legal obligation (Article 6(1)(c)).

Recipients

Your data is intended for the Lutetia team. It is shared with the partners who carry out your request (aircraft operators, owners, drivers, restaurants…) only to the extent strictly necessary.

Technical processors: website hosting (OVH SAS, France), delivery of form emails (our transactional email provider), audience measurement (Google Ireland Limited, only if you accept), WhatsApp messaging (WhatsApp Ireland Limited) if you choose that channel.

Your data is never sold or rented.

Transfers outside the European Union

Some processors may handle data in the United States. Such transfers are governed by the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

Retention

Requests that did not lead to a service: three years from the last contact.

Clients: for the duration of the relationship, then five years under the statutory limitation period.

Accounting records: ten years.

Your cookie choice: six months.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw consent at any time, and to set instructions for your data after your death.

To exercise these rights, write to [email protected]. We reply within one month.

If you believe your rights have not been respected, you may lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Security

Exchanges with the site are encrypted (HTTPS). Access to data is limited to those who need it to serve you. A non-disclosure agreement can be signed at your request.