Privacy

This policy describes how Ωmen Cab collects and uses the personal data needed for its chauffeured transport business, its website, its CRM and its relationships with clients, passengers, partner chauffeurs and referral partners.

1. Data controller

The data controller is the Ωmen Cab entity identified in the website's Legal notice. Requests relating to personal data may be sent to the contact details published by Ωmen Cab.

2. Data that may be collected

Depending on the relationship with Ωmen Cab, the data processed may include: identity, contact details, company and billing information; booking information and mission history; pick-up and destination locations, dates and times; useful information about passengers, flights and luggage; service preferences and operational notes; exchanges with Ωmen Cab; payment and billing information to the extent necessary for the service; chauffeur and vehicle data, professional documents and information needed to manage the partnership; and the technical data essential to the operation and security of the website.

3. Geolocation and mission tracking

When dispatch and tracking features are used, the chauffeur's location data may be processed during the mission in order to organise the pick-up, report on the progress of the journey, secure operations and monitor the service. Its use must remain limited to the intended operational purposes.

4. Purposes

Data is used in particular to respond to requests, establish and carry out bookings, organise missions, communicate with the client and the chauffeur, manage business accounts, handle invoicing and accounting, manage complaints, improve the service, ensure the security of our tools and comply with legal and regulatory obligations.

5. Legal bases

Depending on the processing concerned, Ωmen Cab relies on the performance of a contract or pre-contractual measures, compliance with a legal obligation, its legitimate interest where compatible with individuals' rights, or consent where required.

6. Recipients and service providers

Data is accessible only to the people who need it for their tasks. It may be passed on to the chauffeur performing the service and to the technical, payment, invoicing, hosting, communication or management providers needed to run the service, within the limits of their tasks. Some data may also be disclosed where required by law.

7. Retention

Ωmen Cab keeps data for a period proportionate to its purpose, then deletes it or archives it where regulations require longer retention, in particular for accounting, tax and contractual documents or those needed to defend legal rights. Detailed retention periods are defined in the internal record of processing activities for each category of data.

8. Security

Ωmen Cab implements appropriate organisational and technical measures to limit unauthorised access, loss, alteration or disclosure of data. Access to the dispatch, chauffeur and partner areas must be individual and protected.

9. Your rights

Under the conditions set out in the GDPR and applicable law, any data subject may request access to their personal data, its rectification, its erasure where applicable, the restriction of processing, object to certain processing and exercise their right to data portability where the conditions are met. They may also withdraw their consent where processing is based on it.

10. Right of access and copy of data

A person may ask Ωmen Cab to confirm whether data concerning them is being processed and to receive a copy of it together with the information required by law. Ωmen Cab verifies the requester's identity proportionately where necessary and replies within the applicable legal deadline. The export may include the relevant data held in the CRM, the history of bookings and missions, invoicing and the other systems used by Ωmen Cab.

11. Rectification, erasure and restriction

A request for erasure does not automatically delete all information: some data may have to be kept because of a legal, accounting or tax obligation, or where it is needed to establish, exercise or defend legal claims. In that case, its use is limited to the purpose justifying its retention.

12. GDPR requests

Requests must make it possible to identify the person and the right they wish to exercise. Ωmen Cab keeps an internal log of requests in order to process them: date received, nature of the request, any identity check, deadline, actions taken and date of reply.

13. Complaint to the CNIL

If, after contacting Ωmen Cab, a person considers that their rights have not been respected, they may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL).

14. Processors and data outside the CRM

A request to exercise rights may concern data held in several tools, not only in the Ωmen Cab CRM. When processing a request, the relevant data held in booking, invoicing and messaging systems or by the providers concerned is therefore taken into account where required by law.

15. Updates to this policy

This policy may change to reflect changes to Ωmen Cab's services, tools or regulations. The version published on the website is the version in force.