This policy explains which personal data French Signature collects, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1Who is responsible
- Data controller
- French Signature Travel & Events, SASU, Péniche Black Swan, Port Debilly, 75016 Paris, France
- Contact for data questions
- live@frenchsignature.com
- Data protection officer
- Tom Hofer
2What we collect
When you send us a request
Your name, company, job title, work email, phone number, country, and the details of the event you are planning: group size, dates, places, budget and any message you write.
When we organise an event
Guest names and contact details, travel details such as flights and arrival times, room preferences, and, when a venue requires it, identity document details.
Dietary and accessibility needs
This information can reveal health data. We only collect it with explicit consent, and we only share it with the hotels, restaurants and venues that need it.
On this website
Your experience shortlist and your language choice are stored in your own browser, not on our servers. We also count visits and measure how fast pages load, with anonymous statistics and without cookies. See Cookies and browser storage.
3Why we use it
| Purpose | Legal basis |
|---|---|
| Reply to your request and prepare a proposal | Steps taken at your request before a contract (GDPR art. 6.1.b) |
| Organise and run your event | Performance of the contract (art. 6.1.b) |
| Handle dietary and accessibility needs | Explicit consent (art. 9.2.a) |
| Invoicing, accounting and legal obligations | Legal obligation (art. 6.1.c) |
| Send occasional news to professional contacts | Legitimate interest, with an opt-out in every email (art. 6.1.f) |
| Count visits, see which pages are used and measure how fast they load, to improve the website | Legitimate interest (art. 6.1.f) |
4Who receives it
- Our team, only the people working on your request or event.
- Suppliers needed for your event: hotels, transport companies, restaurants, venues and guides.
- Service providers that host our website, email and customer files, bound by contract, including Vercel (website hosting, visit and speed statistics, and the request form), Resend (which emails your request to our team) and Supabase (which keeps your request in our client database).
- Authorities, only when the law requires it.
We never sell personal data.
5Transfers outside the EU
Most of our suppliers are in France. If a provider processes data outside the European Union, for example Vercel and Resend in the United States, we rely on an adequacy decision by the European Commission or on the EU standard contractual clauses. Our client database, hosted by Supabase, is stored in the EU (Paris).
6How long we keep it
| Data | Kept for |
|---|---|
| Requests that don't lead to an event | 3 years after our last contact |
| Client and guest data | The duration of the event, then 3 years |
| Dietary and accessibility information | Deleted 1 month after the event |
| Invoices and accounting records | 10 years, as required by French law |
| Visit and speed statistics | Anonymous, aggregated figures only; the daily visitor code used to count visits is discarded after 24 hours |
7Your rights
You can ask to access, correct or delete your data, to limit or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Under French law, you can also give instructions about what happens to your data after your death.
To exercise these rights, write to live@frenchsignature.com. We reply within one month, and may ask you to confirm your identity.
8Complaints
If you think your rights have not been respected, you can complain to the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
9Security
Access to personal data is limited to the people who need it. Connections to this website are encrypted, and our suppliers and providers are bound by confidentiality obligations.
To protect the request form from spam, our host counts how many requests are sent from the same internet (IP) address and blocks repeated sending. These counts are kept for 10 minutes at most.
11Changes to this policy
We update this policy when our practices change. The date at the top of the page shows the latest version.
Questions about this page?Write to live@frenchsignature.com and we'll reply within one month at the latest.