This policy explains which personal data French Signature collects, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1Who is responsible
- Data controller
- French Signature Travel & Events, SASU, Péniche Black Swan, Port Debilly, 75016 Paris, France
- Contact for data questions
- tom@frenchsignature.com
- Data protection officer
- Tom Hofer
2What we collect
When you send us a request
Your name, company, job title, work email, phone number, country, and the details of the trip you are planning: group size, dates, places, budget and any message you write.
When we organise a trip
Guest names and contact details, travel details such as flights and arrival times, room preferences, and, when a venue requires it, identity document details.
Dietary and accessibility needs
This information can reveal health data. We only collect it with explicit consent, and we only share it with the hotels, restaurants and venues that need it.
On this website
Your experience shortlist and your language choice are stored in your own browser, not on our servers. See Cookies and browser storage.
3Why we use it
| Purpose | Legal basis |
|---|---|
| Reply to your request and prepare a proposal | Steps taken at your request before a contract (GDPR art. 6.1.b) |
| Organise and run your trip | Performance of the contract (art. 6.1.b) |
| Handle dietary and accessibility needs | Explicit consent (art. 9.2.a) |
| Invoicing, accounting and legal obligations | Legal obligation (art. 6.1.c) |
| Send occasional news to professional contacts | Legitimate interest, with an opt-out in every email (art. 6.1.f) |
4Who receives it
- Our team, only the people working on your request or trip.
- Suppliers needed for your trip: hotels, transport companies, restaurants, venues and guides.
- Service providers that host our website, email and customer files, bound by contract, including Vercel (website hosting and the request form) and Resend (which emails your request to our team).
- Authorities, only when the law requires it.
We never sell personal data.
5Transfers outside the EU
Most of our suppliers are in France. If a provider processes data outside the European Union, for example Vercel and Resend in the United States, we rely on an adequacy decision by the European Commission or on the EU standard contractual clauses.
6How long we keep it
| Data | Kept for |
|---|---|
| Requests that don't lead to a trip | 3 years after our last contact |
| Client and guest data | The duration of the trip, then 3 years |
| Dietary and accessibility information | Deleted 1 month after the trip |
| Invoices and accounting records | 10 years, as required by French law |
7Your rights
You can ask to access, correct or delete your data, to limit or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Under French law, you can also give instructions about what happens to your data after your death.
To exercise these rights, write to tom@frenchsignature.com. We reply within one month, and may ask you to confirm your identity.
8Complaints
If you think your rights have not been respected, you can complain to the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
9Security
Access to personal data is limited to the people who need it. Connections to this website are encrypted, and our suppliers and providers are bound by confidentiality obligations.
11Changes to this policy
We update this policy when our practices change. The date at the top of the page shows the latest version.