PREYA places the utmost importance on the protection of personal data and is committed to ensuring the confidentiality and security of information collected via its website https://preya.fr, its mobile application and its digital tools.

This privacy policy explains how PREYA collects, uses, and protects the personal data of its users (customers, partner drivers, and partner companies). It complies with the General Data Protection Regulation (GDPR) and applicable French law.

1. Identity of the Data Controller

The person responsible for processing personal data is:

● PREYA SAS

● Head office: 24 rue Garnier Pagès, 94100 Saint-Maur-des-Fossés, France

● SIREN: 952 019 370

● Contact email: helpdesk@preya.fr

2. Data collected

PREYA collects different categories of personal data depending on the interaction with its services:

2.1. Data collected from customers

● Name, first name

e-mail address

● Phone number

● Pick-up and destination address

● Payment information (via a secure service provider, PREYA does not store bank details)

● Booking history

● Browsing data on the site and the application

2.2. Data collected from partner drivers

● Identity and contact information

● Professional documents (driving license, VTC card, insurance certificate, technical inspection)

● Information on the vehicle used

● Real-time location data for route execution

2.3. Data collected from partner companies

● Company name

● Name and first name of the interlocutors

● Professional contact details (email, telephone, address)

● History of exchanges and reservations

2.4. Data collected automatically

● IP address

● Type of device used

● Connection data and cookies

3. Purposes and Legal Basis of Processing

The data collected by PREYA is used for the following purposes:

Purpose of processing :

• Transport reservation management
• Creation and management of customer and driver accounts
• Real-time journey tracking
• Secure billing and payment
• Sending information and notifications (booking confirmation, reminders, updates)
• Customer support and complaints management
• Improvement of services and traffic analysis
• Compliance with legal and regulatory obligations
• Sending commercial and promotional offers (customers and partners)

Respectively for the following legal bases :

• Execution of the contract
• Execution of the contract
• Legitimate interest (optimal service)
• Execution of the contract
• Legitimate interest (customer service)
• Execution of the contract
• Legitimate interest (statistics, service optimization)
• Legal obligation
• User Consent

Sending commercial and promotional offers (customers and partners)

User Consent

4. Recipients of Data

The personal data collected is intended for PREYA and, in certain cases, for trusted third parties strictly necessary for the provision of the service:

● Partner drivers: for the execution of journeys

● Payment providers (Stripe): for secure transactions

● Site host (Hostinger): for the technical management of the platform

● Administrative or judicial authorities: in the event of a legal obligation

PREYA never resells personal data to third parties for commercial purposes.

5. Data Retention Period

Personal data is kept for the following periods:

Data type :

• Customer data (reservations, journeys, payments)
• Driver data (contracts, professional documents)
• Billing data
• Connection data and cookies

For the following retention periods respectively :

• 5 years after the last interaction
• 5 years after the end of the collaboration
• 10 years (legal obligation)
• 13 months

6. Data Security

PREYA implements strict technical and organizational measures to protect data against loss, alteration or unauthorized access:

● Encryption of sensitive data

● Restricted access to information (only to authorized employees and service providers)

● Regular backups to prevent data loss

● Monitoring of systems to detect possible intrusions

7. User Rights

In accordance with the GDPR, users have the following rights over their personal data:

Right :

• Right of access
• Right of rectification
• Right to erasure
• Right to portability
• Right to object
• Right to limitation

For the following explanations respectively :

• Obtain a copy of the data collected
• Correct inaccurate or incomplete information
• Request deletion of data under conditions
• Receive your data in a usable format
• Object to processing (e.g. commercial prospecting)
• Request a temporary suspension of treatment

Exercising your rights: For any request relating to the exercise of the rights mentioned above, please contact: Email: helpdesk@preya.fr

Postal address: PREYA, 24 rue Garnier Pagès, 94100 Saint-Maur-des-Fossés, France

Proof of identity may be requested for security reasons.

If the user believes that his rights are not respected, he can contact the CNIL (www.cnil.fr).

8. Cookies and Tracking Technologies

PREYA uses cookies to:

● Facilitate navigation and improve user experience

● Analyze the site's audience

● Personalize offers and advertisements

The user can manage or refuse cookies via the consent banner displayed on the site or by modifying their browser settings.

9. Data Transfers Outside the EU

PREYA strives to store and process data in Europe. However, some technical service providers may be located outside the EU. In this case, GDPR-compliant contractual clauses are in place to ensure an equivalent level of protection.

10. Changes to the Privacy Policy

PREYA may update this privacy policy to comply with legal or technical developments. Any significant changes will be notified to users via the website and/or by email.

Last updated: March 2025

11. Applicable Law and Jurisdiction

Any dispute relating to the use of the PREYA website (https://preya.fr), the mobile application or any service offered by PREYA is subject to French law.

Unless otherwise required by law, exclusive jurisdiction is granted to the competent courts of Créteil, location of PREYA's registered office.