Privacy policy
Last updated: October 30, 2026
Protecting your personal data matters to us. This policy explains what data we collect, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).
Data controller
The data controller is GroupTrippers, [À compléter : adresse du siège social]. For any question about your data, contact us at contact@grouptrippers.com.
Data collected
When you book: identity, contact details, date of birth, gender and nationality of each traveler, billing information and payment history. Card details are processed exclusively by Stripe and are never stored by us.
For trips including a domestic flight: surname and given names as shown on the passport, number, expiry date, issuing country and a copy of the passport. This data is encrypted, stored in a private space and accessible only to authorised staff. It is deleted 30 days after the trip ends.
We also collect the data you send us through the custom trip, referral and newsletter sign-up forms.
Purposes
Your data is used to manage your booking and payments, organise the trip (transport, accommodation, domestic flights), send you trip-related information and reminders, answer your requests, run the referral programme and, if you have agreed, send you our newsletter.
Legal bases
Processing related to the booking and the trip is based on the performance of the contract. Keeping accounting records is a legal obligation. The newsletter is based on your consent, which you can withdraw at any time. The referral programme and improving our services are based on our legitimate interest.
Retention periods
Booking data is kept for 3 years after the end of the trip, then archived for as long as accounting obligations require (10 years). Passport data is deleted 30 days after the trip ends. Data from custom trip requests that did not lead to a booking is kept for 3 years after the last contact. Newsletter data is kept until you unsubscribe.
Recipients
Your data is accessible to the GroupTrippers team and shared, strictly as needed, with our providers: Stripe (payments), Resend (emails and newsletter), our host [À compléter : hébergeur, raison sociale et adresse], and airlines and local partners for organising the trip.
As some trips take place outside the European Union, the data needed to organise them may be transferred to the destination countries. These transfers are limited to what is essential to perform the trip.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions on what happens to it after your death. To exercise these rights, write to us at contact@grouptrippers.com specifying your request.
Contact and complaints
For any question about this policy, contact us at contact@grouptrippers.com or on +33 6 26 87 31 20. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Any questions? Write to us at contact@grouptrippers.com
