Privacy policy

Last updated: 8 November 2026

Mistral VTC takes the protection of your personal data seriously. This page explains what data we collect on the website www.mistralvtc.com, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. In the event of any discrepancy, the French version prevails.

1. Data controller

SASU Mistral VTC (SIREN 850 528 985), 149 avenue du Maine, 75014 Paris, France, represented by its President, Mr Abdelhamid El Haissoufi. Contact for any question about your data: contact@mistralvtc.com – +33 1 84 80 76 21.

2. Data collected

  • Online booking and quotes: first and last name, phone number, email, pick-up and drop-off addresses, date and time, flight or train number, number of passengers and pieces of luggage, comments, billing details for business customers.
  • Online payment: payments are processed directly by our secure payment providers (Stripe, WooPayments, PayPal, SumUp). Mistral VTC never has access to your card numbers.
  • Contact forms: name, phone number, email and the content of your message.
  • WhatsApp, email, phone: the information you voluntarily send us to organise your journey.
  • Browsing data: technical cookies needed for the site to work and, only with your consent, audience measurement and advertising cookies (see our cookie policy: www.mistralvtc.com/en/cookie-policy/).
  • Where your visit comes from: for the duration of your visit and only in your browser (session storage, no cookie), the site keeps the source of your visit (for example a search engine, a Google ad, an AI assistant, a link from another site or direct access) and the first page viewed. This information is attached to your quote or booking request so that we know how our customers find us; it is not passed on to any third party.
  • Journey and vehicle location data: when the vehicle is equipped with a geolocation system, for the safety of passengers and the proper performance of the journey.

3. Purposes and legal bases

  • Handling your bookings and quote requests, organising the journey and keeping you informed: performance of the contract or pre-contractual measures.
  • Collecting payment and preventing fraud: performance of the contract and legitimate interest.
  • Invoicing and accounting: legal obligation.
  • Answering your messages and managing the customer relationship: legitimate interest.
  • Passenger safety and journey records (location data): legitimate interest.
  • Audience measurement and measuring the effectiveness of our ads (Google Analytics, Google Ads): consent, which you can withdraw at any time via the “Manage consent” link.

We never sell your data and do not send you marketing without your consent.

4. Recipients

Your data is intended for Mistral VTC and, for the information strictly needed for the journey (name, phone number, addresses, times), for the chauffeur carrying out your journey, including a partner chauffeur. Our main processors are: Hostinger International Ltd (website hosting, servers located in France), Google Ireland Ltd (Google Workspace email), Stripe, WooPayments, PayPal and SumUp (payment), Invoice Simple (quotes and invoices), Ringover (telephony), Google Ireland Ltd (Google Maps for route calculation in the booking module, and Google Analytics and Google Ads if you accept them) and WhatsApp / Meta if you choose to contact us through that channel. Some of these providers may transfer data outside the European Union under appropriate safeguards (European Commission standard contractual clauses, Data Privacy Framework).

5. Retention periods

  • Quote requests and messages not followed by a booking: 3 years from the last contact.
  • Customer data (completed bookings): 5 years after the end of the business relationship.
  • Invoices and accounting records: 10 years (legal obligation).
  • Journey and location data: 1 year maximum.
  • Audience measurement and advertising cookies: 13 months maximum; your consent choice is kept for 6 months.

6. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to give instructions on what happens to your data after your death. To exercise these rights, write to contact@mistralvtc.com stating your request. We reply within one month.

If you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.

7. Security

The site is served over HTTPS, payments are processed by PCI-DSS certified providers and access to data is limited to the people who need it to handle your request.

Last updated: 8 November 2026