Protecting your data
Who processes your data
Navia Mobility is the data controller for the information you enter when making a booking. Contact: admin@naviamobility.fr.
Why, and on what legal basis
Your first name, last name, email address and phone number are used to establish and perform your rental contract: identifying you at pickup, reaching you if anything unexpected comes up, and issuing the contractual documents. The legal basis is the performance of a contract, or steps taken at your request prior to entering into one (Art. 6(1)(b) GDPR).
Your date of birth is used solely to check the age condition of the rental — our terms reserve it for people aged 18 or over on the booking date (article 5). We ask for the date, never an identity document, and we keep no copy of one.
Your postal address is used to establish the rental contract and, where applicable, for the return of the equipment or for debt recovery (articles 7 and 11.2). We ask for the address, never a proof of residence. Both are attached to the booking concerned, not to a permanent customer record: they end with it, and a later booking does not reuse them. The legal basis for both is the performance of a contract (Art. 6(1)(b) GDPR).
You may leave us a free-text comment when booking. It is optional, it is used solely to prepare your rental (arrival time, a useful detail), and its legal basis is the performance of a contract (Art. 6(1)(b) GDPR). It is attached to the booking concerned and ends with it. It is read by Navia and passed on, including by email, to the rental partner who owns the vehicle you hire, so that they can prepare your rental. The copy received by email is kept by that partner for as long as needed to prepare your rental. Please do not write any banking or health data in it.
After payment we ask two optional questions (how you heard about us, and what brings you here). They help people find us, their legal basis is our legitimate interest (Art. 6(1)(f) GDPR), and not answering changes nothing: not your booking, not the service, not the price.
Your entries are kept in this tab for the time of your booking, so you do not have to type them again: they are not sent to us and disappear when you close it.
None of this data is used for advertising purposes, and none of it is ever sold.
Who else has access
Stripe processes the payment. Your card details are entered directly with Stripe and are neither passed through nor stored by Navia Mobility: we never see any of them. We only keep the amount, the date and the technical reference of the payment.
Our hosting is located in the European Union.
How long we keep your data
- Booking never completed (payment not finalised): 3 years from our last contact with you, in line with the commercial records framework of the CNIL, the French data protection authority.
- Completed booking, acceptance of the general rental terms and contractual documents: 5 years, the standard limitation period under French law (Article 2224 of the French Civil Code).
- Payment records: 10 years, as accounting documents (Article L123-22 of the French Commercial Code).
Your rights
You may request access to your data, ask for it to be corrected or erased, request that its processing be restricted, object to that processing, and request its portability — by writing to admin@naviamobility.fr. Erasure cannot apply to data the law requires us to keep (accounting documents, proof of contract) before the retention period stated above has expired.
You may also lodge a complaint with the CNIL (www.cnil.fr).