Privacy policy
Last updated
This document describes what PACO does with your personal data. It is written to be read: what we collect, why, for how long, and what you can require of us.
1. Who is responsible
The data controller is PACO, a French simplified joint-stock company, RCS Paris 108 372 970, 27 boulevard des Italiens, 75002 Paris, France. For any question about your data: contact@pacomobility.com.
2. What we collect
- To book
- each passenger's first and last name, a contact email address, and a phone number. Nothing else: no date of birth, no title, no postal address.
- To pay
- your card details are entered with our payment provider and never pass through our servers. We keep only the transaction reference and its amount.
- For your account
- your email address, and the first name, last name and phone number you choose to add.
- In the mobile app
- if you allow notifications, a technical device identifier used to tell you about a change to your trip; it is erased as soon as the device can no longer receive them, for instance once the app is deleted. Your tickets, recent searches and the travellers from your previous purchases are kept on your phone so you don't have to type them again: they are not sent to us. If you save a card, it is stored by our payment provider, never by PACO, and you can remove it from your account. The app contains no advertising and no tracking tools.
- Automatically
- our servers' technical logs — IP address, timestamp, page requested — needed to run and secure the service.
We collect no sensitive data, and we never ask for identity documents in order to book.
3. Why, and on what basis
- Performing your booking
- issuing the ticket, sending it to you, allowing boarding, handling after-sales. Basis: performance of the contract.
- Keeping our accounts
- retaining a record of sales and payments. Basis: a legal obligation.
- Keeping the service secure
- preventing fraud and abuse. Basis: our legitimate interest.
- Sending you offers
- only if you asked for them. Basis: your consent, which you may withdraw at any time.
Booking a ticket is not consent to marketing: they are two separate acts, and the corresponding box is never pre-ticked.
4. Who receives it
Your data is not sold, rented or traded. It is passed only to the providers needed to deliver the service, who act on our instructions:
- Stripe
- encaissement des paiements par carte — hosted in: Union européenne / États-Unis.
- Brevo
- envoi des e-mails de confirmation et des liens de connexion — hosted in: Union européenne.
- Neon
- hébergement de la base de données des réservations — hosted in: Union européenne.
- Vercel
- hébergement applicatif et journaux techniques — hosted in: Union européenne / États-Unis.
- Wiremind (PAXONE)
- inventaire et émission des titres de transport — hosted in: Union européenne.
- Expo
- acheminement des notifications de l'application mobile — hosted in: États-Unis.
The carrier operating your journey receives the passengers' names and the booking reference, which it needs in order to check boarding.
Where a provider processes data outside the European Union, the transfer is covered by the European Commission's standard contractual clauses.
5. For how long
- Bookings and accounting records
- ten years, as the law requires.
- Customer record and account
- three years after your last journey or last contact, then deleted.
- Marketing consent
- until withdrawn, and three years after the last contact.
- Technical logs
- twelve months at most.
Deleting your account does not erase past bookings: they are detached from your record but kept for accounting purposes, as the law requires.
6. Your rights
- Access the data we hold about you, and obtain a copy of it.
- Have it corrected if it is inaccurate.
- Ask for it to be erased, subject to what we must keep.
- Object to processing based on our legitimate interest.
- Withdraw your consent to marketing, at any time and without giving a reason.
- Ask for your data to be ported.
Write to contact@pacomobility.com from the address concerned. We answer within one month. If our answer does not satisfy you, you may complain to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr.
7. Deleting your account
You can delete your PACO account at any time, without giving a reason.
- From the PACO app
- open the “Account” tab, sign in with the code sent to you by email, then tap “Delete my account” and “Delete permanently”. Deletion is immediate.
- Without the app
- write to contact@pacomobility.com from your account's email address, asking for its deletion. We carry it out within one month at most.
What is erased: your customer record (name, phone number, email address, marketing consent) and your contact in our email tool.
What is kept: your past bookings, detached from your record, for ten years for accounting as the law requires; and your vouchers, which remain usable with their code until they expire. An upcoming trip can no longer be cancelled from the app once your account is deleted: write to us for that.
9. Security
Traffic is encrypted. Access to production data is restricted. The tokens that open a session or a booking are signed and stored in cookies that the page's JavaScript cannot read.
No measure is absolute. In the event of a data breach likely to result in a high risk to you, we will inform you, and the CNIL, within the required time.
10. Changes
This policy may change. The update date appears at the top of the page. We will flag any substantial change.
Only the French version of this document is authoritative. This translation is provided for information.