Privacy policy
Last updated on 05/15/2026
This translation is provided for informational purposes only. Only the French version is legally binding in case of dispute.
In a nutshell
- ✓We only collect the data strictly required to process your booking (first name, last name, email, phone, dates and locker type).
- ✓Your data is never sold or shared with third parties for commercial purposes.
- ✓No analytics cookie is set without your explicit consent.
1. Data controller
The controller of the personal data collected on the website bagagerie-ajaccio.fr is:
SAS Corse Bagagerie
Société par Actions Simplifiée au capital de 1 500 €
Registered office: 27 Rue Paul Colonna d'Istria, 20900 Ajaccio, France
Email: contact@bagagerie-ajaccio.fr
2. Personal data collected
2.1 – Nature of the booking data
When booking a luggage storage locker on the website bagagerie-ajaccio.fr, the following personal data may be collected:
• Surname and first name
• Email address
• Telephone number
• Booking dates (start and end)
• Type of locker booked
2.2 – Mandatory nature
All this data is necessary for the proper performance of the booking contract. Refusal to provide this information makes it impossible to complete the booking.
2.3 – Audience measurement data (subject to consent)
If you have accepted audience measurement cookies, additional browsing data is collected via Google Analytics 4:
• Randomly generated pseudonymous identifier (Client ID), stored in a cookie
• IP address (used only for approximate country/region-level geolocation, then truncated)
• Device type, browser, operating system, language
• Pages visited and journey on the site
• Steps completed on the booking page
• Technical error codes encountered
No identifying data (surname, first name, email, telephone, address) is ever transmitted to Google Analytics. The details of this collection are specified in article 9.
3. Purposes of processing
The personal data collected is processed for the following purposes:
• Management and follow-up of locker bookings
• Communication relating to your booking (confirmation, reminders, modifications)
• Invoicing and accounting
• Handling of any complaints and after-sales service
• Compliance with legal and regulatory obligations
4. Legal basis for processing
The processing of your personal data is based on the following legal bases:
• Performance of the booking contract (article 6.1.b of the GDPR) for the management of your booking and related communication
• Compliance with legal obligations (article 6.1.c of the GDPR) for the retention of invoicing data
• Legitimate interest (article 6.1.f of the GDPR) for the handling of complaints and the improvement of our services
5. Recipients of the data
5.1 – Internal departments
The personal data collected is processed by the internal departments of SAS Corse Bagagerie authorised to handle it as part of their duties.
5.2 – Payment provider
Online payments are processed by our banking provider LCL, via a secure payment interface. No banking data (card number, security code, etc.) is collected or stored by us. LCL acts as a processor within the meaning of the GDPR and undertakes to ensure the security and confidentiality of your payment data.
5.3 – Audience measurement (subject to consent)
Subject to your consent, the browsing data referred to in article 2.3 is transmitted to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which acts as a processor within the meaning of the GDPR for the provision of the Google Analytics 4 service. No identifying data (surname, first name, email, telephone) is transmitted to it.
5.4 – No transfer to third parties
Your personal data is under no circumstances transferred, sold or rented to third parties for commercial or advertising purposes.
6. Retention period
Your personal data is kept for the following periods:
• Booking data (surname, first name, email, telephone, dates, locker type): 5 years from the end of the booking, in accordance with the legal obligations regarding the retention of accounting documents (article L123-22 of the French Commercial Code)
• Invoicing data: 10 years from the close of the accounting year, in accordance with tax obligations
Upon expiry of these periods, your data is irreversibly deleted or anonymised.
7. Your rights
7.1 – List of your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights over your personal data:
• Right of access: obtain confirmation that data concerning you is being processed and receive a copy
• Right of rectification: request the correction of inaccurate or incomplete data
• Right of erasure: request the deletion of your data in the cases provided for by the regulation
• Right to object: object to the processing of your data on legitimate grounds
• Right to restriction: request the suspension of the processing of your data
• Right to portability: receive your data in a structured and commonly used format
7.2 – Exercising your rights
To exercise any of these rights, you may send your request:
• By email: contact@bagagerie-ajaccio.fr
• By post: SAS Corse Bagagerie – 27 Rue Paul Colonna d'Istria, 20900 Ajaccio, France
Your request will be handled within a maximum period of 30 days from its receipt. Proof of identity may be requested in order to verify your identity.
7.3 – Complaint to the CNIL
If you consider that the processing of your personal data constitutes a violation of your rights, you may lodge a complaint with the French data protection authority (CNIL):
CNIL – 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
8. Data security
SAS Corse Bagagerie implements appropriate technical and organisational measures to ensure the security and confidentiality of your personal data, in particular to protect it against any unauthorised access, loss, alteration or disclosure.
The website bagagerie-ajaccio.fr uses the HTTPS protocol to secure data exchanges between your browser and our servers.
9. Cookies and trackers
9.1 – Strictly necessary cookies
The website bagagerie-ajaccio.fr uses cookies essential for its proper operation and for securing your booking: maintaining your session during the booking process, authentication, remembering your cookie choices, protection against attacks.
These cookies do not require your prior consent, in accordance with article 82 of the French Data Protection Act.
9.2 – Audience measurement cookies (Google Analytics 4)
Subject to your explicit consent, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how our site is used and improve it.
This tool allows us in particular to measure the number of visitors, identify the most consulted pages, understand where users encounter difficulties when navigating the site and during the booking process.
The data sent to Google Analytics is detailed in article 2.3. Your surname, first name, email address and telephone number are at no time transmitted.
9.3 – Google Consent Mode v2
Our site implements Google Consent Mode v2. This means that until you have accepted the audience measurement cookies:
• No analytics cookie is placed on your device
• No browsing data is sent to Google Analytics
• Advertising storage is explicitly refused
Your choice is stored locally on your device and applied to each of your visits.
9.4 – Managing your consent
On your first visit, a banner allows you to accept or refuse the placing of audience measurement cookies.
You may at any time modify your choices by clicking on the "Manage my cookies" button in the site footer.
Refusing analytics cookies has no impact on your ability to browse the site and make a booking.
9.5 – Cookie retention period
Audience measurement cookies (when accepted) have a maximum lifespan of 13 months, in accordance with the recommendations of the CNIL. After this period, your consent will be requested again.
10. Data transfer outside the EU
10.1 – Booking data
The personal data relating to your booking (surname, first name, email, telephone, dates, locker type) is hosted exclusively on servers located in France and is never transferred outside the European Union.
10.2 – Audience measurement data (subject to consent)
If you have accepted analytics cookies, the browsing data referred to in article 2.3 may be processed by Google on servers located outside the European Union, notably in the United States.
These transfers are governed by:
• The EU–US "Data Privacy Framework", under which Google LLC is certified by the US Department of Commerce
• The standard contractual clauses approved by the European Commission (decision 2021/914)
These mechanisms guarantee a level of data protection equivalent to that required by the GDPR. You may at any time refuse this processing by withdrawing your consent (see article 9.4).
11. Modification of the privacy policy
SAS Corse Bagagerie reserves the right to modify this privacy policy at any time. Any modification will be published on this page with an updated date. We invite you to consult this page regularly to take note of any modifications.
12. Governing law
This privacy policy is governed by French law, in particular by Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
Any dispute relating to the interpretation or execution of this policy shall be submitted to the jurisdiction of the French courts.
Contact
SAS Corse Bagagerie
Société par Actions Simplifiée au capital de 1 500 €
27 Rue Paul Colonna d'Istria, 20900 Ajaccio, France
Trade register : Ajaccio 994 797 454
SIRET : 994 797 454 00018
VAT : FR67994797454
Email : contact@bagagerie-ajaccio.fr