Privacy Policy
K2 SERVICES ("we") is committed to protecting your personal data in accordance with EU Regulation 2016/679 (GDPR) of 27 April 2016 and the French Data Protection Act. The data controller is BOUALEM Mounir, K2 SERVICES, 18A Route de Genas, 69680 Chassieu, France.
1. Data Collected and Purposes
| Category | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Booking | Name, email, phone, journey addresses, date, flight number | Performance of the transport contract | Art. 6.1.b GDPR — Contract performance | 5 years (accounting obligation) |
| Payment | Payment data processed by Stripe — we store no card data | Secure payment processing | Art. 6.1.b GDPR — Contract performance | Not stored by us |
| Communication | Email, phone | Booking confirmation, day-before reminder, VAT receipt | Art. 6.1.b GDPR — Contract performance | 5 years |
| Analytics | Anonymised browsing data (Google Analytics 4) | Site improvement — only after consent | Art. 6.1.a GDPR — Consent | 13 months |
| Technical cookies | Cookie consent preference | Remembering your choice | Art. 6.1.f GDPR — Legitimate interest | 12 months |
2. Data Recipients
Your data is processed by the following sub-processors, solely for the purposes described:
- Stripe, Inc. Payment processing · United States (EU SCCs) stripe.com/privacy
- Brevo (Sendinblue) Email and SMS sending · France / EU brevo.com/legal/privacypolicy/
- Google LLC Analytics (GA4), Maps API · United States (DPF) policies.google.com/privacy
- Cloudflare, Inc. Website hosting · United States (DPF) cloudflare.com/privacypolicy/
Your data is never sold to third parties for commercial purposes.
3. Your Rights
Under the GDPR, you have the following rights regarding your data:
To exercise these rights, contact us by email: contact@transfert-aeroport-lyon.fr or by post: K2 SERVICES, 18A Route de Genas, 69680 Chassieu, France.
We commit to responding within one month. If you are not satisfied, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
4. Cookies
This website uses:
- ✓Essential technical cookies — to store your consent preference. No consent required (legitimate interest).
- ○Google Analytics 4 — anonymised audience measurement. Only set after your explicit consent. You can decline via the cookie banner.
Analytics data is retained for a maximum of 13 months and IP addresses are anonymised.
5. Security
We implement appropriate technical and organisational measures to protect your data: encrypted connections (TLS/HTTPS), restricted access to booking data, and no storage of payment card data (processed directly by Stripe in their PCI-DSS certified environment).
Last updated: April 2026. We reserve the right to update this policy at any time. The version published on this page is always the current version.