To ensure transparency regarding the use of Vialy’s services, this Privacy Policy explains what personal data we process and under what conditions. By visiting our website and using our services, you accept our Privacy Policy and the processing of your personal data.
1. Identification of the Data Controller
To provide the services of the Covoitile application, and in accordance with personal data protection regulations, we act as the data controller: Société Durable Énergie, a SAS with a share capital of €1,000, registered under number 929 334 241, with its registered office at 45 rue Alexis de Villeneuve, 97400 Saint-Denis, Réunion.
2. Personal Data Collected
We collect the following personal data: surname, first name, email address, phone number, date of birth, addresses, and driver's license number. We also collect location and timing data to validate trips and prevent fraud. To verify your identity, documents such as an ID card may be requested. Financial transactions, searches, trips, as well as product interactions, emails, and communications, are also recorded.
3. Purposes
The information collected is used to:
• Facilitate carpooling connections.
• Ensure trip safety.
• Handle customer service inquiries.
• Prevent fraud.
• Improve our services and personalize your experience.
• Manage payments and fund transfers.
• Confirm and manage trips and costs.
• Verify trips for payment and safety purposes.
• Participate in local carpooling programs involving data sharing.
• Report income in accordance with European regulations.
4. Data collected
1. Full name
2. Date of birth
3. Address
4. Country
5. Number of trips completed
6. Earnings amount
7. Bank details
8. Tax ID number
9. Place of birth
10. Vialy fees, taxes, and commissions
5. Legal compliance
This information is required to meet Covoitile’s legal obligations (Art. 6(1)(c) of the GDPR). If this data is not provided by the end of the year, we will be unable to fulfill our obligations, and your access to Covoitile will be restricted. Collected data is retained for five years following the relevant reporting period.
Covoitile collaborates with the *Registre de Preuve de Covoiturage* (Carpooling Proof Registry) to certify trips and facilitate carpooling incentives. We transmit information such as partially masked phone numbers, transit card numbers, amounts paid, and departure and arrival times and locations. This data processing supports a public service mission under the Mobility Orientation Law (*Loi d’Orientation des Mobilités*), and the data is sent to the *Incubateur de Services Numériques* (Digital Services Incubator). You may request access to, rectification of, or deletion of this data by contacting contact@covoiturage.beta.gouv.fr.
To enable eligibility for Energy Savings Certificate (*Certificats d’Économie d’Énergie*) bonuses, Covoitile collects strictly necessary data, such as: surname, first name, phone number, driver’s license, address, date and time of acceptance of terms and conditions, and banking details. This data is shared with our partner and the PNCEE. It is retained for nine years, in accordance with legal requirements, and cannot be deleted.
6. Legal basis
We process your personal data based on the following legal grounds:
You consent to the use of your personal data, but you may withdraw this consent at any time. We also use your data to provide the services you have requested or to respond to your inquiries. Furthermore, we are required by law to use your data in certain cases, such as for the payment of public grants or to combat fraud.
7. Recipients of personal data
We may disclose your personal data in the following circumstances:
Your personal data may be shared with our business partners—particularly for payment processing—and with third-party service providers for specific tasks. Additionally, we may disclose your data if necessary to comply with the law, protect our rights, or prevent fraud.
8. Your rights
You have the following rights regarding your personal data:
• Access: View your data and information about its processing.
• Rectification: Correct or complete your data.
• Erasure: Request the deletion of your data, subject to legal obligations.
• Restriction: Limit the processing of your data in certain cases.
• Objection: Object to the processing of your data.
• Portability: Obtain your data in a readable format and transfer it.
• Protection against automated decisions: Refuse decisions based solely on automated processing.
• Complaints: Lodge a complaint with the CNIL.
• Post-mortem directives: Provide instructions regarding your data after your death.
9. Regarding data collected in connection with the CEE bonus
Your data is processed by the Ministry of Energy to manage applications for energy savings certificates. Our partner may contact you to arrange on-site assessments. By signing, you consent to this processing. You have the right to access and correct your information and to object to its processing on legitimate grounds, in accordance with the Data Protection Act (Act No. 78-17 of January 6, 1978).
10. Updates to this Privacy Policy
This Privacy Policy may be revised to reflect the conditions under which your data is processed and to comply with legal developments. We encourage you to review it regularly to stay informed of any changes.