Privacy Policy

The operator of Tictactrip's website, who is also the "data controller" in terms of data protection legislation, is the company Tictactrip itself. Tictactrip SAS is registered with the Trade and Companies Register in France under number 822 961 652. The registered office of Tictactrip is located at 22 rue Popincourt, 75011 Paris. You can contact us at any time at the email address: contact@tictactrip.eu for any questions and information related or unrelated to data management and your personal data. We want to inform you that our processing of personal data complies with the General Data Protection Regulation (GDPR).

What type of data can we collect?

Data and information generated automatically by users

On the Tictactrip website, we collect data and other information that is automatically generated by your web browser each time you visit our site. This information includes: - IP address, - URLs of the sites visited before coming to our website (referring website), - The browser used, - Date and time of your visit, - The time you spend on the Tictactrip site, - Browser language, - Operating system, - Access device used, - URLs of the pages visited on our site. This data is stored for a period of two years, after which it is automatically and permanently deleted.

Data you provide to us

The Tictactrip application is an alternative for you to access Tictactrip's offers and services. In this app, we record, process, and use data in the same way as on the Tictactrip website, for the same purposes and on the same legal basis. The content of our privacy policy applies accordingly. Additionally, we record the data and information you provide us when using our site, related to your travel planning: - In the case of booking a trip on our site, we ask for various information and personal data such as: your name, phone number, email address, billing address, payment method, information about your discount cards, and your credit card information to process the payment. In this case, we will never ask for information other than what is necessary to complete the booking process with our transport providers. Without this data, we will not be able to process your reservation. Credit card information is transmitted directly to the payment provider, and we do not store it. Your personal data related to the reservation is stored in our database for a period of 10 years. We then retain information required by commercial and tax law for legal retention periods, most often ten years after the reservation and contract conclusion. - In case you create a personal account on the Tictactrip website with an account created on our site, this data will be stored to facilitate your future bookings. This data will remain recorded as long as you have an open user account on our Tictactrip site. In the event you decide to delete your account, your associated personal data will be immediately deleted as well. However, potential booking data and basic data (e.g., name, address) are retained as stated above. - If you contact us by email or if you make a customer support request, the data you provide us (for example: name, email, phone number) will be used to respond to you. Your customer contact and support requests are recorded for a duration of 5 years from the date of our team's response. Commercial and tax rights require us to keep this correspondence between you and us for legal retention periods, which is generally 6 years.

Marketing emails and newsletters

Si vous êtes abonné à notre newsletter, soit en vous y étant expressément inscrit sur notre site, soit suite à votre accord donné à la suite d’une réservation sur notre site, nous vous enverrons une newsletter et des emails marketing, de la publicité, des offres promotionnelles et services complémentaires (hébergement, déplacement…), ainsi que des informations sur Tictactrip. Vous pouvez vous désinscrire de la newsletter et de notre liste d’email en indiquant que vous souhaitez retirer votre consentement à tout moment. Pour ce faire, dans chacun de nos emails se trouve un lien « désabonnement ». Dans le cadre de votre retrait de consentement concernant la réception d’emails gratuits de la part de Tictactrip, vos coordonnées seront immédiatement supprimées, sauf si vous possédez un compte utilisateur sur notre site, ou que vous avez effectué et effectuerez potentiellement des réservations sur notre site (voir ci-dessus).

Management and use of cookies

We use cookies, like most website operators today, which are deposited on your browser once you visit our Tictactrip site. Cookies are actually small .txt files that are stored on your browser, whether you're using a browser or a mobile device, after your visit to various websites. These cookies do not contain any personal data. Indeed, some cookies that we use are automatically deleted at the end of your session on our site, in other words, when you leave our site. These are commonly referred to as "session cookies". Additionally, other cookies remain stored on your device and allow us, or our business partners, to recognize your browser during your future visits to our site. These are commonly called "persistent cookies." These cookies do not contain any personal data. Some of the cookies we use are deleted again at the end of the session, meaning when you close your browser (these are called session cookies). Other cookies remain stored on your device and allow us, or our business partners, to recognize your browser during subsequent visits (persistent cookies). Our use of cookies allows us to collect useful information about our customers' usage on the Tictactrip site. As a result, we can provide a more intuitive and easy access to our website and its various services. The different purposes of our use of cookies are: - To record your user settings, especially for the language and currency used on our site. - To ensure a smooth transition between our site's result pages and your search queries. - To monitor the performance and proper functioning of our systems (there is no user data evaluation) - To track the statistics of our site through web analytics service providers. This way, we can perform "retargeting" and track conversions using cookies as well (see above). On the Tictactrip site, if you are led to click on a link that redirects you to the website of one of our providers (for example, in the case of booking tickets that are not handled on the Tictactrip site), it becomes possible for other websites to store cookies on your browser. In this context, we have no control over the cookies and other data collected, and we cannot accept any responsibility in this case.

Retargeting, customer re-targeting

On the Tictactrip website, we use "retargeting tags" to offer you targeted advertising linked to your interests on third-party websites. The "retargeting tag" is the name given to the JavaScript element placed in the source code of our website. When you visit a page on our site containing this tag, a retargeting provider (e.g. Google or Facebook) places a cookie on your browser and associates it with a target audience group that has the same interests as you. The targeted advertising provider then uses cookies to gather data about your interests and consumer profile: for example, the pages you visit on Tictactrip, and search queries such as Paris-Lyon. To do this, it will assign you a pseudonym corresponding to a "typical profile". Using this information, the "retargeting provider" will display advertisements targeted to you and based on your interests as defined following your visits to third-party websites. However, no direct personal identification data is stored or transmitted by anyone to anyone. Nor will "consumer profiles" be merged with your personal data. The targeted advertising provider may potentially identify you and track your visits to our website.

Web analytics and statistics - Google Analytics

On our Tictactrip website, we use Google Analytics, which is a web analytics service provided by Google LLC. Google uses cookies (see above), which are stored once again on your browser and allow us to analyze how you use our website (Business Data Responsibility). The information generated by Google's usage cookies, including for current users (on the site at the same time as the analysis) but without a defined IP address (it will be truncated, see just after), is transmitted to a Google server in the United States and stored there. We have activated "IP anonymization"; your IP address will be truncated by Google within a member state of the European Union or the European Economic Area to prevent data leakage outside the European Union. In addition, Google may provide this data to third parties if required by law or if these third parties process this data on behalf of Google. The IP address sent by your browser to Google Analytics will not be combined with other Google data. It is useful for you to know that you can choose to prevent the installation of cookies on your browser by changing its settings. However, please note that this prohibition of cookie installation may prevent the proper functioning of various Tictactrip services on our site. Also, you can prevent the collection of your cookie and usage data (including IP address) by Google by downloading and using the browser plugin available here: https://tools.google.com/dlpage/gaoptout. Personal data associated with cookies, such as user identifiers (User-ID) and advertising identifiers (DoubleClick cookies and others, for example), will be automatically deleted after 14 months. The same applies to all these different points with the use of Google Tag Manager, another tool from Google. Our use of Google Analytics complies with the agreements between the data protection regulations of the French state and Google. Here is additional information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://marketingplatform.google.com/about/analytics/terms/en/ Privacy policy: https://policies.google.com/privacy Google is further bound by the European data protection EU-US: https://www.privacyshield.gov/EU-US-Framework

Plugins for social networks

Seul le blog de Tictactrip possède ce type de service. Les fournisseurs de médias sociaux nomment ces service : des plugins sociaux. Pour que vous puissiez utiliser ce type de service et réagir sur les réseaux sociaux à nos blogposts, nous utilisons la solution nommée « 2-click ». Si vous vous rendez sur le blog Tictactrip, aucune donnée personnelle ne sera transférée au fournisseur du plugin. Vous reconnaitrez le fournisseur du plugin par le logo du bouton. Grâce à ce même bouton, vous pourrez communiquer directement avec le fournisseur. Si vous cliquez sur ce bouton et activez par la suite le plugin, le fournisseur aura dès lors accès aux informations de page visitée sur notre site web. Cela signifie que les informations mentionnées plus haut seront transmises à ce fournisseur. Si vous disposez d’un compte sur le réseau social dont il est question et que vous êtes connecté, le fournisseur pourra lier votre visite sur notre blog à votre interaction avec le plugin social (exemple : si vous cliquez sur le bouton « J’aime »), à votre compte utilisateur sur le réseau en question (dans cet exemple il s’agirait de votre compte Facebook). Nous n’avons aucun contrôle et aucune influence sur les données récoltées et traitées par la suite par le fournisseur du plugin et nous ne connaissons pas l’envergure de l’étendue des traitements de données, les objectifs et les conditions de conservation et suppression de ces données qu’en fait le fournisseur du plugin.

Who has access to your data?

Now, we will focus on the transmission of your personal data to understand who has access to it after your use and/or reservation on the Tictactrip website! We know it's important to you, and we prioritize it here!

Data transmission for bookings

To transport providers

Tictactrip is primarily a bus, train, and carpool comparator. Therefore, initially, we did not have the ability to offer integrated payment directly on the site. Today, we offer integrated payment, but we are not qualified to issue your transport tickets ourselves. We must go through our transport providers and book your seat with them. For this reason, it is necessary and even obligatory that we transmit to these partner providers (bus companies, train companies, and carpooling companies) your required personal data and only the data required, we prefer to emphasize. We will never provide them with your personal data that they do not need to book a trip. Once these necessary personal data are transmitted, the transport provider will issue your ticket, and we will send it to you. These transport providers are then third parties who are responsible for the processing of your personal data (as if you had directly booked your tickets on their sites) and will process your data in accordance with their own privacy policies. For some countries such as Russia, Ukraine, or Poland, reservations are processed by our service partner: Amadeus IT Group SA (Salvador de Madariaga 1, Madrid 28027, Spain) and its affiliated companies. For this type of transactions, we are required to transmit your reservation data to Amadeus, and once again, only this essential data for the reservation itself, which it subsequently processes under its own responsibility in accordance with its own privacy and data protection policy. https://amadeus.com/fr/politiques/amadeus-et-le-rgpd This data transfer requires your consent to be given to us for each booking process, in accordance with Art. 6(1)(a) GDPR.

To payment providers

Your payment details (credit card information) for bookings you make directly on the Tictactrip site are processed by a trusted Internet payment processor, which will in turn transmit this data directly to the relevant credit card company. To ensure that the credit card is used legitimately and to prevent potential cases of fraud, encrypted credit card information is transferred to a payment security service, external to Tictactrip, for verification purposes. This information may include additional personal data. All data concerning credit cards following a reservation on our site is processed by high quality and trusted Internet payment processors. All data concerning your credit card information is encrypted (in most cases using SSL protocol) before being transmitted to the payment processor. This prevents any risk. Under no circumstances will your data be passed on to payment solution providers.

Data transmission to service providers

To some extent, we may engage third-party service providers, especially for technical, business, legal, and tax-related needs. It may also potentially involve web hosting providers, a network of providers for caching and content creation, analytics and statistics solutions providers, providers to assist us in managing support requests, CRM system providers, centralized management of newsletters, and email marketing services (see "Email Marketing and Newsletters" above), spam and fraud prevention solutions, as well as service providers for information technology (IT) and development services. All these various providers receive personal data only in the execution of their services, for us and on our behalf. They are bound by the contract between them and us not to use personal data for other purposes.

Data transmission outside the EU

The various data processing activities mentioned earlier may potentially involve the transmission of data to recipients located outside the European Union. Of course, this foreign data transmission is done in accordance with privacy regulations; see this link: https://www.privacyshield.gov/welcome. Additionally, this transmission is also based on the European Union's standard contractual clauses; see here: https://ec.europa.eu/info/law/law-topic/data-protection_en. Your personal information may also be transferred to transport providers located in countries outside the European Union, where the journey is planned (although we only process European countries). Tictactrip, however, cannot provide additional information on the data protection offered by these third countries. No adequacy decision, in accordance with Article 45(3) GDPR, or appropriate safeguards, in accordance with Article 46 GDPR, are required for these data transfers. However, there are two cases where this is necessary: - For the performance of a contract between you and Tictactrip, or even in the context of pre-contractual measures taken at your request (Article 49(1)(b), GDPR). - For the conclusion or performance of a contract concluded in your own interest between Tictactrip and a natural or legal person third party (Article 49(1)(c), GDPR).

What is the purpose of our use of your data and on what legal basis do we do it?

We process your data in accordance with the following legal bases.

Article 6, 1a of the General Data Protection Regulation

In order to send you marketing emails and information about Tictactrip: our new features, major advances and promotional offers (discounted travel, offers from partner transport companies, etc.). Also, the transfer of certain data for some bookings to our partner Amadeus (see above).

Article 6, 1b of the GDPR

Article 6, 1c of the GDPR

This article focuses on legal obligations such as complying with data retention deadlines required by tax or commercial law, and complying with data disclosure obligations based on a binding court decision or legal order.

Article 6, 1f of the GDPR

This article is based on our legitimate interests, and its purposes are: - To improve our website by adapting it to your needs, - To prevent, detect, process, and investigate fraud, bugs, incidents, or illegal activities of all kinds, and by reducing the risks of such events occurring, - To perform internal analyses and quality checks of services, - To protect the security of our network and information, - To analyze and create statistics on the origin of our user traffic, the use of our website, and the transition from our site to those of our service partners, - To serve our billing with our transport and service partners, as well as our internal accounting, - To personalize your experience on our site and our offers, - And finally, to display ads that best match your interests.

User rights on their personal data, right to complain, and right to object

We have already mentioned above the right to withdraw your consent regarding the use and processing of your personal data. If applicable, you also have the right to request access (Article 15 GDPR), deletion (Article 17 GDPR), or rectification (Article 16 GDPR) of the personal data we hold. Furthermore, you have the right to restrict our processing of this data (Article 18 GDPR), the right to object to these processes (Article 21 GDPR), or the right to data portability (Article 20 GDPR). You have the right to object to all possible data processing described on this page of our privacy policy, which is based on Article 6(1)(f) GDPR and based on reasons related to your particular situation according to Article 21(1) GDPR. As we process your personal data in accordance with Article 6(1)(f) GDPR for marketing purposes, you have the right to object to this data processing without having to provide any specific explanation or reason.