Who processes your data?
The person responsible for the treatment is Bastien BOURGEOIS, individual contractor, SIREN 844 721 845, SIRET 844 721 845,00023, 71 rue de Versoix, 01210 Ferney-Voltaire, France. For any questions or requests relating to your data: contact@garaje.fr.
The information concerned
- Account: Last name, first name, e-mail address, telephone number, encrypted password and account status.
- Host Profile: contact details, address, necessary tax or professional information and audit status Stripe.
- listings: description, characteristics, address, geographical coordinates, availability, prices and photographs.
- Reservations: dates, amounts, status, payment references, cancellations, refunds and exchanges in the messaging.
- Technical data: IP address, security logs, device and information needed to operate the session.
- Hearing action: pages consulted, main actions, depth of reading, duration of engagement, traffic source, device type and steps from route to booking, associated with random visitor and session IDs and, when you are logged in, to the technical identifier of the account. Raw addresses, messages, e-mails and IP addresses are not included.
Garaje does not receive or retain the full number of your card or its cryptogram: this information is collected directly by Stripe.
Why are these data processed?
Who can receive the data?
The data are accessible to Garaje within the limits of need, as well as to essential providers: OVHcloud for hosting and sending transactional SMS messages, Cloudflare for the storage and dissemination of images, Stripe for payments, payments and regulatory audits, Google Maps Platform for the calculation and display of routes, and the messaging for transactional emails.
When a route is requested, Google receives the approximate geographic area of the garage, the chosen destination, the mode of travel and the scheduled schedule. The exact host address is not transmitted for this feature. See Google Privacy Policy.
The host and the traveller only receive the information necessary for the reservation and its execution. Data may also be transmitted to an authority when required by law. Stripe and Cloudflare may process certain information outside the European Economic Area, with the contractual guarantees provided by the GDPR.
How long are they kept?
- Account and profile: during the use of the service; after closure, only the elements still necessary for a legal obligation or for the defence of a right.
- Reservations, contracts, claims and associated messages: during the relationship, then in limited archiving according to the applicable legal deadlines.
- Accounting documents and information: 10 years when the law requires it.
- Password reset tokens: 30 minutes.
- Technical and safety logs: for the duration necessary for the safety of the service, or longer when an incident or obligation so requires.
- First-party audience measurement data: 13 months maximum.
Data may be retained longer when it is necessary to defend a right, to deal with a dispute or to comply with a legal obligation.
Protection of service
Garaje applies proportionate technical and organisational measures: restricted access, encrypted communications, hashed passwords, protected exact addresses and security logging.
The site uses cookies and storages necessary for authentication, security, reservation operation and internal audience measurement. This first-party measure uses random identifiers, respects the "Do Not Track" signal and is not used for advertising or inter-site tracking. Garaje does not use any third-party audience measurement tool. Google Maps can use the storage necessary to display the map and prevent abuse.
Exercise your rights
Request deletion of my Garaje account and data.
You can request access, rectification, erasure or portability of your data, as well as restriction of processing or opposition to processing based on legitimate interest. Write to contact@garaje.fr. Proof of identity may be requested only in the event of reasonable doubt.
You can also file a claim with the National Commission on Informatics and Freedoms (CNIL).
Your immediate choice
You can opt out of internal audience analytics at any time. This removes the analytics identifiers stored in your browser and prevents further events from being collected on this device.
Development of this policy
This policy can evolve with service or regulation. Its date of update is at the top of the page. Any significant changes will be reported to the users concerned.