Cookie policy

1. What is a cookie?

1.1 Definition

A cookie (also called "connection token" or "tracker") is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It contains data in key/value pairs (session identifier, preferences, visit timestamp, etc.).

1.2 How they work

On every HTTP(S) request to our server, your browser automatically sends back the cookies associated with the domain being visited. This allows the server to "recognise" a visitor from one page to the next without re-authentication.

Cookies can be read/written server-side (during request processing) or client-side (via JavaScript in the browser).

1.3 Lifespan

Per CNIL guidelines, the retention period of consent-based cookies does not exceed 13 months from initial placement.

1.4 First-party vs third-party

1.5 Other tracking technologies

Beyond HTTP cookies: - localStorage / sessionStorage: browser-side storage, not automatically transmitted to the server - Tracking pixels: transparent 1×1 images - Fingerprinting: device identification by its characteristics (not used on this Site)

This policy covers HTTP cookies and any similar technology.

2. Why do we use cookies?

2.1 Technical operation of the Site

Certain cookies are strictly essential: without them, browsing is degraded or impossible. They are used to:

• keep your session active;
• secure forms (CSRF protection);
• remember your preferences (language, etc.);
• operate the Webflow platform.

These cookies are exempt from consent (Article 82 of the French Data Protection Act, CNIL guidelines).

2.2 Audience measurement

Analytics cookies (Google Analytics 4) help us understand visitor behaviour and improve the Site. They require your prior consent.

2.3 Tag management (GTM)

Google Tag Manager conditionally deploys third-party scripts based on your consent.

2.4 Embedded third-party services

• WhatsApp widget (Meta / WhatsApp LLC): contact button
• Stripe: payment processing (cookies set only during payment)

3. Full list of cookies

3.1 Strictly necessary cookies

Legal basis: legitimate interest + ePrivacy exemption (Article 82 of the French Data Protection Act).

3.2 Analytics cookies — Google Analytics 4

Issuer: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Legal basis: consent (Article 6.1.a GDPR). Transfer outside the EU: United States — Google LLC participates in the EU-US Data Privacy Framework. Policy: https://policies.google.com/privacy

3.3 Tag management cookies — Google Tag Manager

GTM is a container: it does not set its own tracking cookies, but can trigger other scripts (GA4) that do. Consent is configured to ensure no analytics cookies load before agreement.

Legal basis: legitimate interest for GTM itself; consent for triggered tags.

3.4 Payment cookies — Stripe

Issuer: Stripe Payments Europe Ltd, Dublin, Ireland. Legal basis: contract performance (Article 6.1.b GDPR). Policy: https://stripe.com/fr/privacy

Stripe sets cookies only when you make a payment on the booking page. These cookies are strictly necessary for payment security (fraud detection, 3D-Secure authentication) and are exempt from consent on the basis of contract performance.

3.5 Third-party cookies — WhatsApp (widget)

The WhatsApp button opens a window to WhatsApp Web / the WhatsApp app. No cookies are set until you click the button. Once on WhatsApp, their own cookies apply per their policy: https://www.whatsapp.com/legal/privacy-policy

4. Legal bases

4.1 Consent (Article 6.1.a GDPR)

Consent is required for audience analytics cookies (Google Analytics, analytical GTM). Per CNIL guidelines, this consent must be:

• Freely given: no disadvantage if refused
• Informed: clear purpose of each cookie
• Specific: per distinct purpose
• Unambiguous: clear affirmative act (no pre-ticked boxes)
• Revocable: withdrawal as easy as giving

Consent is collected via our cookie banner. Its validity period is 6 months, after which you will be asked again.

4.2 Legitimate interest + ePrivacy exemption

Strictly necessary cookies are exempt from consent (Article 82 of the French Data Protection Act).

4.3 Summary

5. How to manage and refuse cookies?

5.1 Via our consent banner

On your first visit to the Site, a cookie management banner is displayed. You can:

• Accept all: allow all cookies (technical + analytics)
• Refuse all: allow only strictly necessary cookies
• Customise: accept or refuse each category independently

Your choice is remembered for 6 months. You can change your preferences at any time by clicking "Manage my cookies" at the bottom of each page.

5.2 Via your browser settings

🌐 Google Chrome

1. Menu ⋮ (3 points) → Settings
2. Privacy and security → Cookies and other site data
3. Direct link: chrome://settings/cookies

🦊 Mozilla Firefox

1. Menu ☰ → Settings
2. Privacy and security → Enhanced tracking protection
3. Direct link: about:preferences#privacy

🧭 Apple Safari (macOS)

1. Safari → Preferences (or Settings)
2. Privacy tab
3. Prevent cross-site tracking

🧭 Apple Safari (iOS / iPadOS)

1. Settings → Safari
2. Privacy and security → Empêcher le pistage sur plusieurs sites

🔷 Microsoft Edge

1. Menu ⋯ → Settings
2. Cookies and site permissions
3. Direct link: edge://settings/content/cookies

5.3 Via Google Analytics opt-out

Browser add-on disabling GA across all websites:

👉 https://tools.google.com/dlpage/gaoptout

5.4 Via Google settings

• My Ad Center : https://myadcenter.google.com
• Privacy settings : https://myaccount.google.com/data-and-privacy

5.5 Via industry opt-out platforms

• Your Online Choices : https://www.youronlinechoices.com/fr/
• Network Advertising Initiative : https://optout.networkadvertising.org/
• Digital Advertising Alliance : https://optout.aboutads.info/

6. Impact of refusal

6.1 Refusing strictly necessary cookies

Not possible via the banner (essential for operation). If you manually delete them via your browser:

• Forms cannot be submitted (CSRF protection disabled)
• Preferences lost on every visit
• Potential malfunctions

6.2 Refusing analytics cookies (Google Analytics)

No impact on your browsing experience. All Site features remain accessible. The only consequence: your visit will not be counted in our statistics.

6.3 Refusing payment cookies

Payment cannot be processed without Stripe cookies (3D-Secure). You can alternatively pay for the ride by bank transfer or cash with the driver.

7. Cookies and personal data

7.1 Relationship with the privacy policy

Data collected via cookies may constitute personal data within the meaning of the GDPR (IP address, unique browser identifier, etc.). Processing is governed by our Privacy policy.

7.2 Your rights

On the data collected via cookies, you have the following rights:

To exercise these rights: contact@vtc-bordeaux-chauffeur.fr (see section 9).

7.3 Transfers outside the EU

Some third-party cookies (Google Analytics, GTM) involve data transfers to the United States, governed by:

• The EU-US Data Privacy Framework (adequacy decision of 10 July 2023)
• The Standard Contractual Clauses (SCCs) from the European Commission

More information: https://policies.google.com/privacy/frameworks

7.4 Retention period

Data collected via GA4 is retained for a maximum of 14 months (configured in the GA4 property). Beyond that, it is automatically deleted or irreversibly aggregated.

8. Updates

This policy may be amended to:

• Reflect the addition/removal of cookies
• Incorporate legislative changes (GDPR, CNIL, ePrivacy)
• Updates to third-party services (Google, Webflow, Stripe)
• Corrections or improvements

In case of substantial changes:

• New consent banner on your next visit
• Email notification if you are a customer (where applicable)

Update date at the top of the document. Version history available upon request.

9. Contact

For any question on this cookie policy, the exercise of your rights, or any complaint:

Data controller: VTCBORDEAUX (SAS, share capital €100, Bordeaux Trade Register, SIREN 924 992 605, SIRET 924 992 605 00015) — 9 Quai des Mouettes, 33290 Parempuyre, France — VAT FR81 924 992 605. President: Adrien Moreno.

10. Complaint to the CNIL

If, after contacting us, you believe your rights have not been respected:

• Online : https://www.cnil.fr/fr/plaintes
• By post: CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
• By phone : 01 53 73 22 22

Cookie policy drafted in accordance with the GDPR (EU Regulation 2016/679), French Act no. 78-17 of 6 January 1978 as amended, and CNIL guidelines (Deliberation no. 2020-091 of 17 September 2020, updated 2022).

© 2026 VTCBORDEAUX (SAS, SIREN 924 992 605, Bordeaux Trade Register) — VTC Bordeaux Chauffeur — All rights reserved.