Controller
The controller of your personal data is ETB CONSEIL, a French single-shareholder simplified joint-stock company (SASU) with share capital of €500, registered with the Nanterre Trade and Companies Register under number 995 034 477 (SIRET 995 034 477 00019), whose registered office is at 33 villa Chaptal, 92300 Levallois-Perret, France, trading as SAYONA.
For any question about your data: contact@sayona.fr.
Data we collect
When you send a journey request: identity and contact details (first and last name, email, WhatsApp number, country of residence), travel details (destination, dates, travellers, budget, preferences), and any information you choose to share, such as dietary needs, allergies or accessibility needs.
When you write to us: your name, email, optional phone number and message.
When you use your private space: your sign-in email, your journey and the exchanges about it.
When you pay: the amount, date and status of the payment. Card details are entered on Stripe's secure page; we never see or store your card number.
Why we use it, and on what legal basis
To answer your request and prepare a proposal: steps taken at your request before a contract.
To design and follow your journey, manage payments and stay in touch before and during your stay: performance of the contract.
To keep invoices and accounting records: legal obligation.
Health-related information you choose to share (allergies, dietary or accessibility needs) is used only to adapt your journey, with your explicit consent, which you may withdraw at any time.
Who receives it
The SAYONA. team, on a need-to-know basis.
Our technical providers, acting on our instructions: Supabase Inc. (database and authentication; data hosted in the European Union), Netlify, Inc. (hosting, United States), Resend (email delivery), Stripe Payments Europe Ltd. (payments, Ireland). When we talk with you on WhatsApp, your messages pass through WhatsApp, operated by Meta Platforms Ireland Limited. When a concierge prepares an itinerary draft with the help of artificial intelligence, the journey details needed may be processed by Anthropic, PBC (United States); no payment data is shared, and every draft is reviewed by a concierge.
Providers you ask us to contact (hotels, restaurants, drivers, guides) receive only what your booking requires.
Where data leaves the European Union, these providers state in their contractual terms that the transfer is covered by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
Requests that do not lead to a journey: 3 years after our last exchange.
Client files: for the duration of our relationship, then 5 years (limitation period).
Invoices and accounting records: 10 years (legal obligation).
Sign-in cookie and browser storage: see the Cookies page.
Your rights
You may access, correct or delete your data, object to or restrict its use, ask for portability and withdraw your consent at any time, by writing to contact@sayona.fr. We answer within one month.
You may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the authority of your country of residence.