Privacy Policy
In accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act.
Data Controller
The data controller for personal data collected on this website is:
Company: Soumaoro Signature (SASU)
Controller: Cheick Soumaoro
Address: 8 rue Saint-Exupéry, 35300 Fougères
Email : contact@soumaorosignature.fr
Data Collected
We collect the following data depending on how you interact with the website:
Booking and quote
First name, last name, email, phone, departure and arrival address, trip date and time, special notes.
Account creation
First name, last name, email, password (encrypted), phone, company (optional), date of birth (optional), address (optional).
Waiting list
Email, first name (optional), phone (optional).
Contact form
First name, last name, email, phone (optional), subject, message content.
Sali assistant and WhatsApp
The text of your messages and what they contain (first name, addresses, dates); on WhatsApp, your number and profile name.
Phone calls
Calling number, voice and transcript of the conversation with the assistant, recorded voicemail if you leave one. Calls to the assistant are recorded; you can refuse.
Trip
Flight or train number, passenger name if not the client, notes useful for the ride (preferences, luggage).
Reviews
Rating and comment left after a ride.
Navigation
IP address, pages visited, visit duration, traffic source (via Google Analytics), language preferences, anonymous visitor identifier (conversion journey, with your consent).
Purposes of Processing
Contract performance
Booking processing, trip confirmation and tracking, invoicing.
Art. 6(1)(b) GDPR: performance of contract
Communication
Sending confirmation emails, reminders, follow-ups and booking-related information.
Art. 6(1)(b) GDPR: performance of contract
Loyalty programme
Tracking ride count for loyalty discount attribution.
Art. 6(1)(b) GDPR: performance of contract
Service improvement
Analysis of visit statistics to optimise the website and services offered.
Art. 6(1)(f) GDPR: legitimate interest
Analytics cookies
Audience measurement via Google Analytics, only with your consent.
Art. 6(1)(a) GDPR: consent
Conversion measurement
Anonymous tracking of the visit journey (visit, price request, waiting list, booking, review), no identifying data, only with your consent.
Art. 6(1)(a) GDPR: consent
Sali assistant
Answering your questions, calculating a price, preparing the booking form (on the website and WhatsApp, the assistant books nothing itself); on the phone, once bookings open, taking a ride paid through a payment link sent by text message.
Art. 6(1)(b) GDPR: pre-contractual steps
Call recording
Reviewing what the assistant understood on the phone (address, date, time) and correcting its mistakes. You can object by saying so during the call, or afterwards by writing to contact@soumaorosignature.fr with your number and the time of the call: the recording is then deleted.
Art. 6(1)(f) GDPR: legitimate interest
Website security
Limiting the number of requests per visitor (ss_cid cookie) and reporting technical errors (Sentry, no cookie).
Art. 6(1)(f) GDPR: legitimate interest
Legal obligations
Retention of billing data in accordance with accounting and tax obligations.
Art. 6(1)(c) GDPR: legal obligation
Retention Periods
Data Sharing
Your data is never sold. To provide the service, it is passed on, each for what concerns it, to the following providers, who process it on our behalf:
All data passing through the website
Bookings, quotes, accounts, messages, waiting list
Name, email, amount; the card is entered at Stripe
Email, name, message content
Phone number, text message content, voice and call transcripts
Phone number, profile name, messages
Written or spoken messages and what they contain (name, phone, addresses, dates)
Voice and call transcripts
Addresses entered, name and phone in the ride calendar, browsing (Analytics)
Error, page, browser; no cookies or passwords
Emails exchanged with you
Flight number, without your name
Copy of the database (bookings, accounts, messages), kept 30 days
Outside the European Union, transfers rely on the safeguards provided by these providers: the European Commission's Standard Contractual Clauses (implementing decision 2021/914) or the EU-US Data Privacy Framework.
Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
Right of access
Obtain a copy of your data
Right to rectification
Correct your inaccurate data
Right to erasure
Request deletion of your data
Right to object
Object to certain processing
Right to portability
Receive your data in a readable format
Right to restriction
Restrict the processing of your data
To exercise your rights, contact us at contact@soumaorosignature.fr. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the CNIL (French Data Protection Authority), cnil.fr.
Cookies
This website uses the following types of cookies:
Technical cookies
RequiredRequired for the website to function, cannot be refused: ss_consent (your cookie choice, 13 months), ss_cid (random identifier that limits requests per visitor, 12 months; used for conversion measurement only with your consent). If you sign in to your account, its session is kept in your browser storage.
Analytics cookies
OptionalGoogle Analytics (_ga, 13 months), audience measurement. Set only if you accept; you can change your mind with « Manage my cookies » at the bottom of every page.
Conversion measurement cookies
OptionalAnonymous tracking of the journey (visit, price request, waiting list, booking, review), no identifying data, and ss_partner (90 days) if you arrive through a partner link. Only if you accept.
Error reporting
RequiredNo cookie: when a page crashes, Sentry receives the error, the page and the browser. Without your consent, nothing else; with it, performance measurements too.
Automated Decision-Making and Profiling
Soumaoro Signature does not use any automated decision-making or profiling system within the meaning of Article 22 of the GDPR. No decision producing a legal effect or significantly affecting you is made solely by automated means.
The price is calculated automatically, with the same published rules for everyone (distance, time, day, public holidays, loyalty discount based on the number of rides already taken), then paid online. If you dispute it, write to us: Cheick reviews it himself.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration: HTTPS encryption, password hashing, restricted data access, secure tokens.
Card payments are processed exclusively by Stripe, PCI-DSS Level 1 certified. No banking data passes through or is stored on our servers.
Last updated: September 2026