Privacy policy

1. Who processes your data

The data controller is:

Controller

SAIA Digital FZE

Contact

contact@bookcab.fr

EU representative

Rejeb Zorgani — ZR CONSULTING, 20 avenue Pierre Lefaucheux, 92100 Boulogne-Billancourt, France

Data protection officer

No appointment required: the processing falls under none of the cases listed in article 37 GDPR.

2. What this site collects

The site collects one thing: the email address you willingly enter in the waiting-list form. Nothing else is asked, and no account is created.

Three technical items accompany it: the display language at sign-up, so we write to you in your language; the timestamp of your consent, which serves as its proof; and a fingerprint of your IP address.

That fingerprint deserves an explanation. Your IP address is never stored: it is put through a one-way function with a secret, then truncated. The result only serves to count sign-ups coming from one source, to stop a bot registering thousands of addresses. It cannot be turned back into your IP address, nor used to recognise you elsewhere.

3. Cookies and audience measurement

By default, this site sets no cookies and loads no third-party resources: no measurement tool when you arrive, no ad network, no remote fonts, no social buttons.

With your consent — given through the banner, and only there — we enable Google Analytics 4 (Google Ireland Limited), which sets audience measurement cookies (_ga and _ga_*) to tell us which pages are read and whether the waiting list converts. Until you choose, or if you decline, nothing loads: no script, no ping, no cookie.

Your choice — consent or refusal — is remembered in your browser's local storage for six months; that storage is necessary to honour your decision itself. You can change it at any time with the button at the bottom of this page: measurement cookies are then deleted and the banner will ask again.

Google Analytics involves a transfer to Google LLC (United States), covered by the EU–US Data Privacy Framework, under which Google is certified. See also section 7.

Tool

Google Analytics 4

Legal basis

Consent (art. 6.1.a GDPR)

Cookies

_ga, _ga_* — 13 months at most

Withdrawal

Any time, button at the bottom of the page

4. Why, and on what basis

Your address is used to tell you when the application opens, and for nothing else. No prospecting for a third-party service, no resale, no commercial sharing.

The legal basis is your consent. It is collected in two steps: you enter your address, then you confirm by clicking the link sent to you. Until that second step, your address is passed to no tool and is deleted automatically when the link expires.

You can withdraw your consent at any time, through the unsubscribe link in our emails or by writing to contact@bookcab.fr. Withdrawing is as simple as signing up.

5. Who else has access

No data is sold or transferred. Three technical providers are involved, each for a specific function and under a processing agreement:

Brevo

Email delivery and mailing-list management. French company, data hosted in the European Union.

Supabase

Waiting-list database and sign-up processing. Project hosted in Ireland (eu-west-1).

Amazon Web Services

Hosting of the site files. No personal data is stored there.

6. For how long

An unconfirmed sign-up is deleted automatically when the confirmation link expires, twenty-four hours after it was created.

A confirmed sign-up is kept until you unsubscribe, and at the latest three years after our last contact — in line with the French data protection authority's guidance on prospecting.

The proof of your consent (date and time) is kept for the same period: it is what lets us demonstrate that you did agree.

7. Transfers outside the European Union

The publisher is established in the United Arab Emirates. The processing remains subject to the GDPR under its article 3(2), since it targets people located in the European Union.

Data is hosted within the European Union: the waiting-list database in Ireland, the site files in Ireland, email delivery in France. None is stored outside the Union.

The publisher accesses it remotely from the United Arab Emirates to administer it. Under guidelines 05/2021 of the European Data Protection Board, a controller accessing its own data does not constitute a transfer within the meaning of chapter V: there is no separate recipient. The processing remains fully subject to the GDPR.

Should a recipient established outside the Union ever be involved, that transfer would be covered by the European Commission's standard contractual clauses, and this document updated before it went live.

8. Your rights

The GDPR gives you rights of access, rectification, erasure, restriction of processing, objection, and portability. You can exercise them by writing to contact@bookcab.fr; you will receive a reply within one month.

If that reply does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.

9. The Android application

The mobile application is a separate processing operation, with its own terms accepted at sign-up. Two points are worth knowing now.

Analysing an offer happens entirely on your phone. The screenshot is read then destroyed at once: neither the image nor the recognised text is kept or transmitted. Only fare, distance and verdict are written to your history.

No network call takes place in computing the verdict. That is not a convenience choice: it is what makes a sub-two-second answer possible, and what guarantees the content of your screen never leaves the device.

10. Contact us

For any question about this document or your data: contact@bookcab.fr.