Privacy Policy
Supertripper Users

For the purposes of this privacy policy, “SUPERTRIPPER” refers to the company SMART CITYVEST, SAS with a share capital of 411,460.79 Euros, registered with the Paris Trade and Companies Register (RCS) under number 810 491 019, whose registered office is located at 6 rue des Bateliers, 92110 Clichy.

SUPERTRIPPER processes your personal data as part of providing its services.

In accordance with Law No. 78-17 of January 6, 1978, on Information Technology, Data Files and Civil Liberties, as amended (“LIL“) and Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data of April 27, 2016 (“GDPR“) – hereinafter collectively referred to as “Data Regulation” – this privacy policy aims to set out:

  • Who is responsible for processing the personal data collected and processed?
  • How your personal data is collected and processed
  • What rights data subjects have regarding this data;
  • To whom this data is transferred;
  • If applicable, the site’s “cookie” policy.

ARTICLE 1: SCOPE

This privacy policy applies to you if:

  • You use SUPERTRIPPER’s online resources (e.g., website, app, etc.) or offline resources (e.g., phone call, email, etc.) (hereinafter ““SUPERTRIPPER Resources””);
  • Your data is processed as part of contractual relationships with SUPERTRIPPER.

This privacy policy does not apply to your relationships with third parties to which SUPERTRIPPER Resources may refer (e.g., hotel travel partner, airline, etc.)

ARTICLE 2: SUPERTRIPPER'S COMMITMENTS

In accordance with the Data Regulation, SUPERTRIPPER commits to processing data subjects’ data in compliance with the following principles:

  • Legal basis, purpose, and transparency: personal data is processed for explicit, legitimate, and specified purposes – defined in this privacy policy;
  • Minimization of data collection and processing: only data necessary for the proper execution of SUPERTRIPPER’s objectives is collected;
  • Limited retention: data is retained for a limited period, of which the data subject is informed. When this information cannot be provided, the user is informed of the criteria used to determine the retention period;
  • Security: SUPERTRIPPER commits to ensuring the integrity and confidentiality of collected data from collection to processing – and particularly by monitoring for any potential and exceptional personal data breaches and by taking all protective and corrective measures following a breach, by informing the CNIL and, if applicable, the data subjects.
  • Transfer: In case of personal data transfer to third countries within the meaning of the Data Regulation, SUPERTRIPPER will implement adequate measures.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED BY SUPERTRIPPER

As part of its services, SUPERTRIPPER processes and collects the following personal data:

  • Identification data, e.g., name, first name, email address, landline or mobile phone number, company, passport number
  • Payment / billing data
  • Connection data, e.g., IP address and associated port, identifier number, identification number
  • Navigation data, e.g., cookies

ARTICLE 4: SUPERTRIPPER'S ROLE IN DATA PROCESSING

In accordance with the Data Regulation:

  • The data controller is the person responsible for determining the purposes and means of personal data processing;
  • The data processor is the person who processes personal data on behalf of the data controller.

As part of its services, SUPERTRIPPER acts as the data controller for data:

    • processed during the preparation or execution of business travel agreements concluded with its professional clients (companies), regarding the data of these companies’ employees,
    • of persons other than the aforementioned employees, visiting and/or requesting SUPERTRIPPER Resources (e.g., filling out a contact form, browsing the site, etc.);
    • processed as part of commercial prospecting activities;
    • processed as part of service improvement.

ARTICLE 5: DESCRIPTION OF PROCESSING ACTIVITIES

A table in French with three columns: Purpose, Legal Basis, and Retention Period. It lists the purposes of data processing, the legal bases (mainly GDPR articles), and the various retention periods, ranging from 1 to 10 years.

ARTICLE 6: DATA RECIPIENTS

The data is intended only for the following persons:

  • To SUPERTRIPPER staff members, specifically authorized and within the scope of their duties.
  • To SUPERTRIPPER’s business partners (e.g., airlines, railway companies, etc.) chosen by clients (and their employees) who have concluded a business travel agreement, as part of service execution. These business partners are third-party data controllers and the transmitted data is processed in accordance with the privacy policy of the relevant third-party recipient.
  • To SUPERTRIPPER’s technical service providers, within the scope of their duties (e.g., payment provider, website host, etc.). The website https://supertripper.com/ is hosted by AWS. The data collected and processed by the site is exclusively hosted and processed in France. The host can be contacted at this address: https://aws.amazon.com/fr/contact-us/
  • To persons authorized by law as third parties.

Data is not transferred to third countries within the meaning of the Data Regulation.

ARTICLE 7: SECURITY MEASURES

SUPERTRIPPER commits to taking all measures to ensure the security and confidentiality of personal data and implements technical and organizational measures to prevent them from being destroyed, altered, or disclosed to unauthorized third parties.

ARTICLE 8: DATA RIGHTS

In accordance with the Data Regulation, you have the following rights:

  • Right to withdraw your consent: when processing has been implemented on the legal basis of consent in accordance with the Data Regulation, you have the right to withdraw your consent at any time, without this withdrawal affecting the lawfulness of data processing carried out before such withdrawal.
  • Right of access: you have the right to access personal data that is subject to processing and, if applicable, to obtain a copy thereof.
  • Right to rectification: you have the right to obtain from the data controller the rectification of inaccurate personal data concerning you and/or to have them completed if they are incomplete.
  • Right to erasure: you may request the erasure of personal data concerning you without undue delay, unless the processing is based on a legal obligation to which the data controller is subject.
  • Right to restriction of processing: you may request that the processing of your personal data be restricted, so that the data controller may store this data, but cannot use or process it.
  • Right to data portability: you have the right to request from the data controller to receive personal data concerning you in a structured, commonly used, and machine-readable format (and/or the right to transmit this data to another data controller) provided that the processing is based on the performance of a contract, consent, or that the processing is carried out by automated means.
  • Right to object: when the processing of your personal data is based on a legitimate interest of the data controller, you may at any time object to the continued processing for reasons relating to your particular situation.
  • Right not to be subject to a decision based solely on automated processing: you have the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning you, or similarly significantly affects you.
  • Right to define the fate of personal data after death: you have the right to define your general directives regarding the retention, erasure, and communication of your personal data after your death.

For the data controller to grant the request, the user is required to provide: their first name(s) and last name(s) as well as their email address, and, if relevant, their account, personal space, or subscriber number.

To exercise your rights, you can contact the Data Protection Officer (DPO) at the following address: data@supertripper.com.

If you believe, after contacting us, that your rights are not being respected, you can lodge a complaint with the National Commission for Information Technology and Civil Liberties:

  • Online via the online complaint service;
  • By postal mail to the following address: CNIL – Service des Plaintes – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

ARTICLE 9: USE OF “COOKIE” FILES

The site may use “cookies”.

When browsing the site, cookies or other trackers may be placed on the user’s device (computer, mobile, tablet, etc.), subject to the choices expressed by the user.

A “cookie” is a small file (less than 4 KB) containing information related to the user’s browsing habits.

These files allow for the processing of statistics and traffic information, to facilitate navigation and improve the service for the user’s convenience.

9.1 - User's objection to the site's use of “cookies”

Certain so-called “essential” cookies are used for the operation and proper administration of the website, for the proper execution of services for users, as well as for retaining your consent to their placement (recording your cookie preferences). These purposes are required by our website and cannot be disabled.

“Non-essential” cookies for the site’s operation are only placed on the user’s device after obtaining their consent. The terms for obtaining consent are specified in the article “Obtaining Consent”, below.

Users may withdraw their consent to cookies at any time by clicking “Manage my cookies” at the bottom of each page on the website https://supertripper.com/.

The user can also send an email to SUPERTRIPPER, specifying the subject of their request, to the following email address: data@supertripper.com.

More generally, the user is informed that they can object to the recording of these “cookie” files by configuring their browser software.

For information, the user can find the steps to configure their browser software to object to the recording of “cookie” files at the following addresses:

If the user decides to disable “cookies”, they will still be able to browse the site. However, any site malfunction caused by this action cannot be attributed to the site editor.

9.2 - Description of the “cookies” used by the site

SUPERTRIPPER would like to inform the user that cookies may be used for the following purposes:

  • Matomo: Measures site audience
  • Albacross: Identifies visitors by IP address
  • Youtube: Displays videos on the site

Collected with consent, these cookies are stored for a maximum period of 6 (six) months.

After this period, the site will again ask the user for permission to store “cookies” on their device.

ARTICLE 10: COLLECTION OF CONSENT

For the processing of personal data based on consent, explicit consent will be requested via a banner, a form, or a dedicated checkbox, in accordance with the applicable Data Regulation.

  1. Consent to cookies is collected via a banner displayed during the user’s first visit. Users can manage their cookies at any time by clicking the “Manage my cookies” tab at the bottom of each page on the website https://supertripper.com/

ARTICLE 11: MANAGEMENT OF THE PRIVACY POLICY

This privacy policy can be viewed at any time at the following address:

SUPERTRIPPER reserves the right to modify it to ensure its compliance with current law.

By accessing and using SUPERTRIPPER Resources, any person acknowledges having read the privacy policy.

Therefore, all interested parties are encouraged to regularly consult this privacy policy to stay informed of the latest changes made to it.

Please note that the last update to this privacy policy occurred on:

  • June 6, 2025

In case of substantial modification to this policy, SUPERTRIPPER will make its best efforts to inform the concerned parties by any appropriate means.

ARTICLE 12: QUESTIONS ABOUT YOUR DATA?

If you have any questions regarding the protection of your personal data, you can contact us at data@supertripper.com.