Legal information
Privacy policy
This policy describes the data used to process transport requests, organise journeys and secure access to related documents.
Data controller
AUDREY B. TAXI, operator of the Côte d’Azur Taxi service, is responsible for the processing described on this page. Personal data enquiries can be sent to contact@cote-dazur-taxi-nice.fr.
Data collected
The form may collect identity and contact details, dates, times, addresses, passenger and luggage numbers, vehicle type, options and operational information required for the journey.
For medical transport, no detailed health data is requested. Collection is limited to the transported person’s name where necessary, appointment time, transport voucher status, any relevant organisation and practical assistance requirements.
Purposes
- record, review, confirm and carry out the booking request;
- organise the schedule and assign a journey to a driver;
- provide the customer with an HTML summary and a PDF;
- generate a separate route sheet for the assigned driver;
- provide operational follow-up, security, abuse prevention and minimal auditing;
- comply with applicable legal, accounting and regulatory obligations.
Google Calendar and Google Sheets
Information strictly required to organise journeys may be synchronised with a private Google Calendar and private Google Sheets account owned by Côte d’Azur Taxi. These services assist planning and monitoring, while the site’s secure database remains the source of truth.
Diagnoses, medical conditions, social security numbers, consent records and confidential administrative notes are not transmitted.
Customer PDF and driver route sheet
The customer PDF includes only information about the relevant booking and its status. It contains no internal notes, integration errors or data concerning another customer.
The driver route sheet includes only journeys assigned to that driver and the operational information required. It excludes other drivers’ journeys, consent records and detailed medical information.
WhatsApp Business Platform
Where the driver has agreed and the integration is enabled, the route sheet may be sent through Meta’s official WhatsApp Business Cloud platform. Technical sent, delivered, read and failure statuses are retained for follow-up. No personal WhatsApp password is requested.
Public WhatsApp buttons open WhatsApp with a prepared message; sending remains under the user’s control.
Recipients and access
Access is limited to authorised Côte d’Azur Taxi staff, the assigned driver and technical providers required for hosting, Google services, document generation and, if enabled, WhatsApp Business. A customer can view only their own booking through a private, temporary access session.
Data is not sold or used for marketing without a separate legal basis.
Retention periods
The private session used to view a customer summary expires after 48 hours by default. Requests and operational correspondence are retained throughout the customer relationship and generally for up to three years after the last contact, unless another period is imposed by law or required to establish or defend a right.
Technical and audit logs are limited to the time required for security and incident follow-up. Documents subject to accounting or regulatory obligations follow the applicable statutory retention periods.
Security
Professional access is restricted to authorised accounts. Secret tokens are stored server-side, customer access tokens are hashed in the database, private routes are not cached by the PWA, and sensitive operations are protected by authorisation controls and minimal auditing without complete personal data in logs.
Your rights
Subject to applicable law, you may request access, correction, erasure, restriction or objection to processing, as well as portability where applicable. Contact: contact@cote-dazur-taxi-nice.fr.
You may also lodge a complaint with the CNIL, the French data protection authority.
