Last updated: August 2026. Policy compliant with the GDPR (EU Regulation 2016/679). Fields in brackets [ ] must be completed.
1. Data controller
The data controller is [Legal name], [Legal form] with share capital of [amount] €, registered office at [Full address], registered in [City] under number [Registration no.].
Contact: [contact@tachycab.com]
Data Protection Officer (DPO): [Name / contact details, or "Not appointed at this time"].
2. Data collected
Depending on your use of the Site, we may collect the following categories of data:
| Category | Data | When collected |
|---|---|---|
| User account | Name or pseudonym, email address, password (hashed), profile photo (optional) | Registration / login |
| Browsing | IP address, browser type, pages viewed, visit duration, cookies | Site browsing |
| Forms | Message content, email address, name | Contact, newsletter, author application |
| Newsletter | Email address | Subscription |
| Comments | Pseudonym, comment content, date | Comment publication |
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Service delivery and account management | Contract performance (Art. 6.1.b) |
| Newsletter and commercial communications | Consent (Art. 6.1.a) |
| Audience measurement and site improvement | Legitimate interest / Consent (Art. 6.1.f / 6.1.a) |
| Comment moderation | Legitimate interest (Art. 6.1.f) |
| Compliance with legal obligations (invoicing, tax) | Legal obligation (Art. 6.1.c) |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) |
4. Data recipients
Your data is intended for:
- Authorised staff of [Legal name] (editorial, technical, administration).
- Our technical processors, bound by confidentiality: host (IONOS), emailing solution, audience measurement tool (Google Analytics).
- Administrative or judicial authorities if required by law.
We never sell your data to third parties.
5. Transfers outside the EU
Some processors (e.g. Google) may be located in the United States. Transfers are governed by the European Commission's Standard Contractual Clauses or the Data Privacy Framework (DPF).
6. Retention periods
| Data | Period |
|---|---|
| User account | Account duration + 3 years after last login |
| Browsing data / cookies | 13 months maximum |
| Newsletter | Until unsubscription + 3 years |
| Comments | Published while the article is online; deleted on request |
| Contact forms | 3 years after last exchange |
| Invoicing data | 10 years (accounting obligation) |
7. Cookies
The Site uses the following types of cookies:
| Type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Site operation (session, security, preferences) | Not required |
| Audience measurement | Traffic statistics (Google Analytics) | Required |
| Preferences | Remembering your choices (language, dark mode) | Required |
You can manage your preferences at any time via the cookie banner or your browser settings. Refusing non-essential cookies does not prevent browsing the Site.
8. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access (Art. 15): obtain a copy of your data.
- Right to rectification (Art. 16): correct inaccurate data.
- Right to erasure (Art. 17): request deletion of your data.
- Right to restriction (Art. 18): restrict processing.
- Right to object (Art. 21): object to processing on legitimate grounds.
- Right to portability (Art. 20): receive your data in a structured format.
- Right to withdraw consent at any time (for consent-based processing).
To exercise your rights: [contact@tachycab.com] (response within 30 days).
You may also lodge a complaint with your supervisory authority (in France: CNIL — www.cnil.fr).
9. Security
We implement appropriate technical and organisational measures: password hashing (bcrypt), HTTPS/TLS connection, restricted data access, regular backups, access logging. In the event of a data breach likely to result in a high risk, we will inform you as soon as possible (Art. 34 GDPR).
10. Policy changes
This policy may be amended at any time. The applicable version is the one in force at the time of your visit. We recommend consulting it regularly.