Preya attaches essential importance to the protection of personal data and undertakes to ensure the confidentiality and security of the information collected via its website https://preya.fr, its mobile application and its digital tools.

This confidentiality policy explains how preya collects, uses and protects the personal data of users (customers, partner drivers and partner companies). It complies with the General Data Protection Regulations (GDPR) and French laws in force.

1. Identity of the controller

The controller of personal data is:

● Preya SAS

● Headquarters: 24 rue Garnier Pagès, 94100 Saint-Maur-des-Fossés, France

● SIREN: 952 019 370

● Contact email: helpdesk@preya.fr

2. Data collected

Preya collects different categories of personal data depending on the interaction with its services:

2.1. Data collected from customers

● Last name, first name

e-mail address

● Telephone number

● Support and destination address

● Payment information (via a secure service provider, Preya does not store bank details)

● Reservations history

● Site navigation data and application

2.2. Data collected from partner drivers

● Identity and contact information

● Professional documents (driving license, VTC card, insurance certificate, technical control)

● Vehicle information used

● real -time location data for the execution of journeys

2.3. Data collected from partner companies

● Social name

● Last name and first name of the interlocutors

● Professional contact details (email, telephone, address)

● History of exchanges and reservations

2.4. Automatically collected data

● IP address

● Type of device used

● Connection data and cookies

3. Amptitality and legal basis of treatment

The data collected by preya is used for the following purposes:

Treatment finality :

• Transport reserve management
• Creation and management of customer and drivers accounts
• Real -time journeys monitoring
• Billing and secure payment
• Sending information and notifications (reservation confirmation, reminders, updates)
• Customer support and complaints management
• Improvement of services and attendance analysis
• Compliance with legal and regulatory obligations
• Sending commercial and promotional offers (customers and partners)

Respectively for the following legal bases :

• Contract execution
• Contract execution
• Legitimate interest (optimal service)
• Contract execution
• Legitimate interest (customer service)
• Contract execution
• Legitimate interest (statistics, service optimization)
• Legal obligation
• User consent

Sending commercial and promotional offers (customers and partners)

User consent

4. Data recipients

The personal data collected is intended for Preya and, in some cases, for trusted third parties necessary for the provision of the service:

● Partner drivers: for the execution of journeys

● Payment providers (stripe): for secure transactions

● Site host (Hostinger): for the technical management of the platform

● Administrative or judicial authorities: in the event of a legal obligation

Preya never sells personal data to third parties for commercial purposes.

5. Data retention period

Personal data is kept according to the following periods:

Data type :

• Customer data (reservations, journeys, payments)
• Drivers (contracts, professional documents)
• Billing data
• Connection data and cookies

To respectively the following conservation durations :

• 5 years after the last interaction
• 5 years after the end of the collaboration
• 10 years (legal obligation)
• 13 months

6. Data security

Preya implements strict technical and organizational measures to protect data from any loss, alteration or unauthorized access:

● encryption of sensitive data

● Restricted access to information (only to authorized employees and service providers)

● Regular backups to prevent data loss

● Systems monitoring to detect possible intrusions

7. User rights

In accordance with the GDPR, users have the following rights on their personal data:

Right :

• Right of access
• Right of rectification
• Right to erasure
• Right to portability
• Right of opposition
• Right to limit

To respectively the following explanations :

• Get a copy of the data collected
• Correct inaccurate or incomplete information
• Request the deletion of data under conditions
• Receive your data in an usable format
• Oppose treatment (e.g. commercial prospecting)
• Request a temporary suspension of treatment

Exercise your rights: for any request relating to the exercise of the rights mentioned above, please contact: Email: helpdesk@preya.fr

Postal address: Preya, 24 rue Garnier Pagès, 94100 Saint-Maur-des-Fossés, France

Proof of identity may be requested for security reasons.

If the user considers that his rights are not respected, he can enter the CNIL (www.cnil.fr).

8. Cookies and follow -up technologies

Preya uses cookies for:

● Facilitate navigation and improve the user experience

● Analyze the site audience

● Personalize offers and advertisements

The user can manage or refuse cookies via the consent strip displayed on the site or by modifying the parameters of his browser.

9. Data transfers outside the EU

Preya strives to store and process data in Europe. However, some technical providers can be located outside the EU. In this case, contractual clauses in accordance with the GDPR are set up to guarantee an equivalent level of protection.

10. Changes in the Privacy Policy

Preya can update this privacy policy to comply with legal or technical developments. Any significant modification will be notified to users via the site and/or by email.

Last update: March 2025

11. Applicable law and award of jurisdiction

Any dispute in connection with the use of the preya site (https://preya.fr), the mobile application or any service offered by Ptendya is subject to French law.

Unless otherwise required legal provision, the exclusive jurisdiction of the competent courts of Créteil, the place of the preya headquarters, is made.