Privacy policy

Last updated June 2024.

The protection of personal data is of the utmost importance to Extime Travel, which
wishes to explain clearly and transparently how and why it collects, processes, stores
and uses Users' personal data.

This privacy policy also sets out the rights and control tools available to Users
regarding their personal data.

This privacy policy (hereinafter the "Privacy Policy") is provided by CITYVISION SAS
(hereinafter the "Company"), whose registered office is at 194 rue de Rivoli, 75001
Paris, registered with the Paris Trade and Companies Register under number 421 197 005,
with intra-Community VAT number FR60 421 197 005.

The Company's telephone number is +33 1 44 55 60 00 and its email address is
booking@extimetravel.com.

The publication director is Karl GREMILLET.

The Company publishes the website www.tourism.paris (hereinafter the "Site"), which
it makes available to users (hereinafter the "Users").

The Site is hosted by ANIL INFORMATION SYSTEMS.

On the Site, the Company offers Users tourism services — in particular excursions,
tours, sightseeing, leisure activities and gastronomic or cultural discovery
(hereinafter the "Services"). In order to provide these Services, the Company is
registered with Atout France under number IM075120024, holds a financial guarantee with
APST (15 avenue Carnot, 75017 Paris) and general civil liability insurance with MMA
IARD, 14 boulevard Marie et Alexandre Oyon, 72030 Le Mans Cedex.

What information does the Company collect from its Users?

To enable Users to order Services on the Site and to contact the Company, the
Company, acting as data controller, must collect identifying data relating to Users, in
particular the following personal data:

• surname and first name;
• email address;
• home address;
• hotel location;
• additional addresses (for invoicing where applicable) — optional;
• landline and mobile telephone number — optional;
• the chosen language for the Services — optional.

Users are informed that if they do not wish to provide the personal data requested,
the Company will not be able to fulfil their order.

Personal data of minors on the Site

The Site may only be used by persons aged eighteen or over.

How and why is Users' personal data used?

The Company uses Users' personal data for the following purposes:

With which third parties does the Company share Users' personal data?

Users' personal data is processed by the Company and by the processors supporting the
Company's activity, namely the tour operators and the Site's host, ANIL INFORMATION
SYSTEMS. The servers on which Users' personal data is stored are located in France. The
Company does not carry out any international transfers of Users' personal data.

The Company may also disclose personal data in order to cooperate with administrative
and judicial authorities.

What are Users' rights?

Users benefit from a number of rights, summarised below:

• Right of access: the right to be informed of and to request
  access to the personal data processed by the Company.
• Right of rectification: the right to ask the Company to amend or
  update personal data where it is inaccurate or incomplete.
• Right to erasure: the right to ask the Company to delete personal
  data permanently.
• Right to restriction: the right to ask the Company to stop
  temporarily the processing of all or part of the personal data.
• Right to object: the right to refuse the processing of personal
  data at any time, and the right to refuse the processing of personal data for
  marketing purposes.
• Right to withdraw consent: the right to withdraw consent to the
  processing of personal data at any time, by a means as simple as that used to
  obtain the User's consent.
• Right to data portability: the right to request a copy of the
  personal data in electronic format, and the right to request the transmission of
  that personal data for use by a third-party service.
• Right to give post-mortem instructions: Users may give the
  Company instructions regarding the retention, erasure and communication of their
  personal data after their death. In the absence of such instructions, the Company
  will grant the requests of heirs as exhaustively set out in Article 40-1, III of
  the French Data Protection Act.

How can Users exercise their rights?

To exercise the rights set out above, and for any question relating to the processing
of personal data, Users may contact the Company at dataprotection@extimetravel.com, by
telephone on +33 1 44 55 60 00, or by post at: CITYVISION — Data Protection Officer,
194 rue de Rivoli, 75001 Paris, France.

So that the Company can handle the request as quickly as possible, Users may state in
their request its purpose and the context in which their personal data was collected by
the Company.

How does the Company secure Users' personal data?

The Company takes care to secure Users' personal data by implementing appropriate
technical and organisational measures to ensure a level of security suited to the risk,
such as the pseudonymisation and encryption of Users' personal data, any means enabling
the ongoing confidentiality, integrity, availability and resilience of processing
systems and services to be guaranteed, any means enabling the availability of and access
to Users' personal data to be restored, as well as a procedure for regularly testing,
analysing and evaluating the effectiveness of the technical and organisational measures
in place.

How long is Users' personal data kept?

Users' personal data is kept only for as long as is necessary to fulfil the purpose
for which the Company holds it, in order to meet Users' needs or to comply with its
legal obligations.

To determine the retention period for personal data, the Company applies the
following criteria:

• where Services have been ordered, personal data is kept for the duration of the
  contractual relationship and for the applicable statutory limitation periods;
• the User data collected may also be used for commercial prospecting purposes and
  is kept for three years after collection or after the last contact with the
  User;
• where a User makes a request to the Company, the personal data will be kept for as
  long as is necessary to handle the request;
• where cookies are placed on the User's device, the personal data is kept for the
  lifetime of the session identification cookies and for any period defined in
  accordance with applicable regulations; the maximum retention period for cookies
  is 13 months from their first placement on the User's device, as is the period of
  validity of the User's consent to their use. The lifetime of cookies is not
  extended at each visit. The User's consent must therefore be renewed at the end of
  that period;
• banking data (where applicable) is kept for a maximum of 13 months.

At the end of the periods mentioned above, the personal data will be deleted or the
Company will anonymise it.

Links on the Company's Site to third-party sites

In order to improve the quality of the Services, the Company may include on the Site
links to third-party sites. These sites have a privacy policy that is different from and
independent of the Company's. Users are invited to consult the privacy policy of the
third-party sites they visit.

Users' right to lodge a complaint with the CNIL

In the event of a complaint, Users may contact the CNIL, the authority with
competence for personal data protection in France, at: 3 Place de Fontenoy, 75007 Paris,
telephone +33 1 53 73 22 22.

Right to register on the telephone marketing opt-out list

Bloctel is a free service allowing a telephone number to be registered in order to
opt out of telephone marketing. Registration is available at bloctel.gouv.fr.

Which cookies and trackers does the Company use on the Site, and how can Users
object to them?

When browsing on the Site, the Company uses the following
trackers:

In accordance with Decision no. 2019-093 of 4 July 2019 adopting guidelines on the
application of Article 82 of the French Act of 6 January 1978 as amended to read and
write operations on a user's device (in particular cookies and other trackers), the
Company informs Users that trackers record certain information which is stored in the
memory of their computer equipment. This information is used to improve the use and
operation of the Site, but also to understand how the Site is used by Users, as well as
the tools and services the Company makes available to them. These trackers do not
contain personal information about Users. Consequently, no processing of personal data
is carried out on the basis of these trackers.

On first connecting to the Site, a notice informs the User of the use of trackers and
invites them to accept, by purpose, the use of those trackers. Accepting or refusing the
use of trackers has no effect on the User's browsing.

The notice includes in particular:

• the identity of the data controller or controllers;
• the precise purposes of the trackers used;
• the possibility of withdrawing consent at any time.

To guarantee the User's free, informed and unambiguous consent, the banner will not
disappear until they have continued browsing.

Save with the User's prior consent, trackers will not be placed or read:

• if the User visits the Site (the home page or directly another page) and does not
  continue browsing: a mere absence of action cannot be treated as an expression of
  will;
• or if the User clicks on the link in the banner allowing them to configure cookies
  and, where applicable, refuses the placing of cookies.

Users may choose to disable trackers at any time. Their browser can be configured to
notify them of the trackers placed on their device and to ask whether to accept
them.

The configuration of each browser differs. It is described in the browser's help
menu, which will show Users how to change their cookie preferences.

Firefox

• Click the menu button and select "Options".
• Select the "Privacy" panel.
• Set the "History" menu to "Use custom settings for history".
• Uncheck "Accept cookies".
• All changes are saved automatically.

Internet Explorer

• Click the Tools button, then "Internet Options".
• Click the "Privacy" tab, then under "Settings" move the slider up to block all
  cookies or down to allow all cookies, then click OK.

Google Chrome

• Select the Chrome menu icon.
• Select "Settings".
• At the bottom of the page, select "Show advanced settings".
• In the "Privacy" section, select "Content settings".
• Select "Block sites from setting any data".
• Select OK.

Safari

• Go to "Settings" > "Safari" > "Privacy" > "Cookies and website
  data".

Changes to our Privacy Policy

This Privacy Policy may be amended. The Company therefore advises Users to consult
this page of the Site regularly. In the event of a significant change to the Privacy
Policy, the Company will notify Users of those changes.