Last updated: 05/06/2026

Privacy policy – Personal data

1. Purpose of this policy

The purpose of this privacy policy is to inform users of the website vtc-balma.com (hereinafter the company) about how their personal data may be collected and processed when they use the site’s contact form. The site vtc-balma.com is a showcase site. It does not offer account creation, no online store, no online payment and no automatic ride booking. Information about cookies is presented in a separate page: Cookie Policy.

2. Data controller

The data controller is: VTC-balma For any questions regarding the protection of personal data, the user may contact the company at the following address: consent@vtc-balma.com

3. Personal data collected

The personal data collected via the site are only those voluntarily transmitted by the user through the contact form. Depending on the form fields, the data concerned can be:
  • first and last name
  • e-mail address
  • telephone number
  • message content
  • information possibly provided by the user in their request.
  • The user is asked not to transmit sensitive data or unnecessary information in the contact form.

    4. Purposes of the processing

    Personal data collected via the contact form is used only for:
    • respond to a request for information
    • process a contact request;
    • discuss with the user about a possible VTC service
    • follow up on the request
    • prevent misuse or fraudulent use of the form
    • comply, where applicable, with the applicable legal obligations.
    The data is not used to create a customer account, make an online payment, automate a reservation or send a newsletter, unless specifically requested or agreed by the user.

    5. Legal basis of the processing

    The processing of personal data is based, as appropriate, on:
    • the legitimate interest of the company to respond to requests received via its website
    • the execution of pre-contractual measures when the request concerns a potential VTC service;
    • compliance with a legal obligation when certain data must be retained in accordance with the applicable regulations.

    6. Mandatory or optional nature of the data

    The fields indicated as mandatory in the form are necessary to allow the company to respond to the user’s request. If the user does not provide the necessary information, the company may not be able to process their request correctly.

    7. Data shelf life

    The data transmitted via the contact form is retained for the duration necessary to process the request. For a simple contact or information request, the data may be kept for a maximum of 12 months from the last exchange, unless requested to delete the user or otherwise required by law. If the request gives rise to a contractual relationship or a service, certain information may be kept for longer only when necessary to comply with applicable legal, accounting or administrative obligations. The CNIL recalls that data must be kept only for the duration necessary for the purpose of processing.

    8. Data recipients

    The personal data collected is intended solely for the company. They may also be accessible, within the limits of their missions, to technical service providers necessary for the operation of the site, in particular the host or the service provider responsible for the maintenance of the site. Personal data is not sold, rented or passed on to third parties for commercial purposes. They may, however, be communicated to an administrative or judicial authority if the law so requires. The recipient of your data within the meaning of Art. 13 (1) (e) GDPR is Usercentrics GmbH. In the context of processing requests, the website transmits personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, in its capacity as subcontractor. Consent data includes: date and time of visit or consent/refusal, as well as device information. The processing of this data is carried out in order to comply with legal obligations (obligation to provide proof pursuant to Article 7(1) GDPR) and the documentation associated with consents, and therefore on the basis of Article 6(1)(c) GDPR.
    Data is stored locally for one year within the EU. For more information on how the data is used, please consult
    the page https://usercentrics.com/privacy-policy/.

    9. Data security

    The company implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or destruction. However, since the Internet is not a completely secure environment, the company cannot guarantee absolute security when transmitting information via the site.

    10. User rights

    In accordance with the GDPR and the applicable regulations on personal data protection, the user has the following rights in particular:
    • right of access to their data
    • right to rectify inaccurate or incomplete data
    • right to erasure of data, where applicable
    • droit à la limitation du traitement
    • right to object to processing, where applicable
    • right to data portability, where applicable.
    To exercise their rights, users can contact the company at the following address: consent@vtc-balma.com The company may request proof of identity if this is necessary to verify the applicant’s identity. The CNIL specifies that the data controller must explain to individuals how to exercise their rights and has, in principle, a period of one month to respond to requests.

    11. Complaint to the CNIL

    If the user believes that his rights are not respected or that the processing of his personal data is not in accordance with applicable regulations, he may file a complaint with the CNIL.

    12. Cookies

    Cookies and other trackers used on the site are the subject of a dedicated page: Cookie Policy.

    13. Modification of this policy

    This privacy policy may be modified at any time to take into account the evolution of the site, business activity or applicable regulations.
    The applicable version is that published on the website on the date of consultation by the user.