Privacy Policy
eb. is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the European General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is eb., a travel design studio founded by Emma Bonnefous. Registered in France under SIRET 853 793 479 00017, 77 rue Bayen, 75017 Paris.
For any question regarding this policy, contact hello@emmabonnefous.com.
2. What Data We Collect
When you submit an inquiry through our website, we collect the information you provide: your name, email address, phone number (optional), travel dates, party size, preferences, and any additional context you choose to share.
When you subscribe to our newsletter, we collect your email address.
We do not collect special categories of personal data (health, religion, political opinions, etc.).
3. Why We Collect It
We use your data to:
- Design a journey tailored to your request.
- Connect you with our licensed DMC partners in Greece, who operate the journey.
- Respond to your questions and keep you informed during the planning.
- Send occasional editorial updates if you have subscribed to the newsletter.
4. Legal Basis
We process your data on the following legal bases, as defined by Article 6 of the GDPR:
- Performance of a pre-contractual or contractual relationship when you request a journey.
- Your consent, when you subscribe to the newsletter.
- Our legitimate interest in responding to your inquiries and improving our services.
5. Who We Share It With
Your data is shared only with parties that are necessary to deliver the service you request:
- Our licensed DMC partners in Greece, who handle the operation of your journey.
- Our email and hosting providers, who process data on our behalf under data-processing agreements compliant with the GDPR.
We never sell or rent your personal data to third parties.
6. International Transfers
Our DMC partners are located in Greece, within the European Union. If, exceptionally, data is transferred outside the EU (for example to a specialized supplier), we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards to protect your data.
7. Retention
Inquiry data is retained for up to 3 years after our last exchange, to allow continuity of service. Newsletter data is retained until you unsubscribe. Invoicing data is retained for 10 years, as required by French accounting law.
8. Your Rights
Under the GDPR, you have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (right to be forgotten).
- Request portability of your data in a structured format.
- Restrict or object to the processing of your data.
- Withdraw your consent at any time, where consent is the legal basis.
To exercise any of these rights, contact hello@emmabonnefous.com. We respond within one month.
9. Cookies and Analytics
Our website uses essential cookies required for basic functionality. We may also use privacy-respecting analytics to understand how the site is used, without tracking individual visitors.
You can configure your browser to refuse cookies at any time.
10. Complaints
If you believe your rights have not been respected, you may file a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the data protection authority of your country of residence within the EU.
11. Changes to This Policy
We may update this policy from time to time. The current version is always available on this page, with the last updated date at the top.