Privacy Policy – Airiane Solutions

WHAT DATA WE COLLECT

We collect and use personal data in our B2B2C operations as follows:

 

B2B Data (Business Contacts)

• Types: Names, job titles, business email addresses, phone numbers, and billing details.
• Sources: Collected directly from you via contracts, business cards, forms, or professional interactions (e.g., business trade shows), or from third parties (e.g., LinkedIn, public business directories).

 

B2C Data (End-Users/Travelers)

• Types: Names, email addresses, booking details (e.g., flight reservations via Aéroports Voyages), IP addresses, device information, behavioral data (e.g., search history on our platforms), and location data (e.g., via mobile apps with GPS tracking).
• Sources: Collected directly from travelers through our booking engines, mobile apps, or website, or indirectly via our B2B clients (e.g., airports using our Airport Affiliation or Data Management Platform).

HOW WE USE YOUR DATA

We process personal data for the following purposes, with lawful bases under GDPR (Article 6):

B2B Purposes

• Contract Fulfillment (Contractual Necessity, Article 6(1)(b)): To manage client relationships, deliver services (e.g., Airport Media, Booking Engines, or Flight Schedules Management), and process payments.
• Business Communication (Legitimate Interests, Article 6(1)(f)): To respond to inquiries, provide support, or maintain partnerships with airports, airlines, tourism boards, or any business linked to public air transportation.
• B2B Marketing (Legitimate Interests, Article 6(1)(f)): To send targeted marketing emails, event invitations, or industry updates to business contacts, with an opt-out option (Article 21). We rely on legitimate interests for B2B marketing, as permitted by GDPR Recital 47, after a balancing test.
• Legal Compliance (Legal Obligation, Article 6(1)(c)): To meet tax, accounting, or regulatory requirements.

 

B2C Purposes

• Service Delivery (Contractual Necessity, Article 6(1)(b)): To provide booking services, flight schedules, or travel information and updates via web platforms or mobile apps.
• Marketing and Personalization (Consent or Legitimate Interests, Article 6(1)(a) or (f)): To send promotional offers or personalized content (e.g., based on search history), with consent where required (e.g., for electronic marketing under the ePrivacy Directive).
• Analytics and Improvement (Legitimate Interests, Article 6(1)(f)): To analyze user behavior (e.g., via Web Analytics or Airport Data Management Platform) to enhance services or promote routes.

DATA SHARING

We may share personal data with:

• Service Providers: Third parties, such as Scaleway cloud hosting services, Brevo CRM platforms, or Google and Matomo analytics providers, under GDPR-compliant data processing agreements (Article 28).
• B2B Clients: Airports or airlines may receive traveler data (e.g., booking details) to fulfill services via our platforms (e.g., Airport Affiliation).
• Business Partners: For collaborative projects (e.g., tourism boards for route promotion), only with consent or under contractual necessity.
• Legal Authorities: Where required by law, court order, or to protect our legal rights or those of third parties. 
  

We do not sell personal data.

INTERNATIONAL DATA TRANSFERS

We may transfer personal data outside the European Union (EU) or European Economic Area (EEA) where required for service delivery (e.g., when using partners such as global analytics providers).
In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries recognized as providing adequate protection.

DATA RETENTION

We retain personal data only as long as necessary for the purposes described:

• B2B Data: Client contact details and contract data are retained for the duration of our business relationship and up to 6 years to comply with French tax and accounting laws.
• B2C Data: Traveler data (e.g., booking details) is retained for 3 years after the last interaction, unless required longer for legal purposes.
• Marketing Data: Until you opt out or the data is no longer relevant.
• Website Data: Cookies and analytics data are retained for 13 months.

We securely delete or anonymize data when no longer needed.