Privacy policy
Cash Paris takes the security and confidentiality of your personal data very seriously, particularly with regard to the French Data Protection Act No. 78-17 of January 6, 1978 and the EU Regulation 2016/679 of April 27, 2016, known as the GDPR (the “Applicable Legislation”).
We have strict internal procedures regarding the storage, access, and disclosure of your data. Cash Paris is committed to protecting your privacy. This privacy policy explains how we use the data we collect about you, how you can let us know that you prefer to restrict the use of this data, and the procedures we implement to safeguard your privacy.
Who processes your personal data?
CASH PARIS TAX REFUND, a general partnership with a share capital of €400,000, whose registered office is located at 3 Place de Londres, 93290 Tremblay-en-France, registered with the Bobigny Trade and Companies Register under number 848 140 752 (hereinafter “we,” “our,” “us,” or “Cash Paris”), provides a tax refund service in Paris airports (the “Services”).
Cash Paris may process your personal data as a data controller or as a data processor in the course of providing its Services and through its website https://www.cash-paris.com
What personal data do we collect and how do we use it?
Customer relationship management (contract management, general accounting, customer relationship follow-up)
- Role: Data controller
- Data: Name, surname, email address, telephone number, company, financial details
- Legal basis: Performance of a contract
Provision of Services
- Role: Data processor
- Data: Name, surname, address, phone number, email address, date of birth, passport number, financial information
- Legal basis: N/A
Video surveillance
- Role: Data controller
- Data: Visitors and employees in the premises are filmed by the surveillance system
- Legal basis: Legitimate interest
Facial recognition (validate tax refund forms, verify passport holder identity, cross-check information between passport and refund forms)
- Role: Data controller
- Data: Identification data (name, surname, photo, nationality, passport number, signature); Biometric data (real-time photo); Purchase-related data (form number and kiosk number)
- Legal basis: Consent
Responding to rights requests
- Role: Data controller
- Data: Name, surname, contact details, proof of identity (if necessary)
- Legal basis: Legal obligation
How long is your personal data retained?
Customer relationship management: Contract duration + 5 years
Accounting data: 10 years
Data relating to the provision of services: Upon request for deletion by the Data Controller OR contract duration + 5 years
Video surveillance: 1 month. In case of an incident related to the security of people or property, footage may be extracted and stored separately until procedures are completed, accessible only to authorized personnel.
Facial recognition: Duration of the validation process or until the process is stopped, then 3 months
Responding to rights requests: Proof of identity deleted immediately after verification; Other data: 5 years
With whom is your data shared?
We may disclose your personal data to our partners and subcontractors insofar as necessary for the management of the website and the provision of Services.
Surveillance footage may be viewed, in the event of an incident, by authorized personnel of Cash Paris (security staff and management) and by law enforcement authorities. Maintenance personnel may also access footage solely for that purpose.
We ensure that our partners and subcontractors process your personal data in compliance with the Applicable Legislation.
We may also transfer your personal data to competent authorities where required by law, or to external advisors in the event of a dispute.
In the course of processing, your personal data may be transferred outside the European Union. In such cases, we ensure that the partner or subcontractor provides sufficient guarantees in accordance with the Applicable Legislation (notably by entering into European Commission standard contractual clauses).
If our business is transferred or merged with another company, your data may be transferred to the new owners of the business.
How do we protect your personal data?
We take appropriate technical and organizational measures to ensure a level of security adapted to the risks associated with your personal data. We ensure that data is not accidentally or unlawfully destroyed, lost, altered, disclosed without authorization, or accessed without authorization.
Measures include:
- Data hosted on secure servers
- Data encryption
- Password policy
Although we are committed to protecting your personal data, you acknowledge that the use of the Internet carries inherent risks (hacking, phishing, etc.).
Our Cookie Policy
What is a cookie?
A cookie is a small text file downloaded to your computer when you visit certain websites or applications. It enables recognition of a user’s device, helps navigation, enables certain features, and provides information to website owners.
Cookies used on the website:
On www.cash-paris.com/fr/, we collect data to compile traffic statistics.
Opposition to cookies and trackers is managed by placing a refusal cookie. This applies only to the device on which you object. If you connect on another device or delete cookies, you will need to set preferences again.
Cookies have a maximum validity of 13 months.
Data collected: Trackers use a digital ID (cookie ID or mobile ID) to re-identify you. Depending on processing, additional data (e.g., browsing history, IP address) may be linked.
Cookies placed: Only audience measurement cookies (Google Analytics) are used to analyze visitor behavior and improve content.
How to block/delete cookies: Consent is requested for non-essential cookies. Browsers allow blocking/deleting cookies. Guidance can be found in your browser Help or at www.allaboutcookies.org.
Note: Deleting or blocking cookies may prevent access to certain services.
What are your rights?
You may request access to, verification of, correction of, or deletion of your data, as well as portability of your data. You may also object to or restrict processing and set instructions for your data after your death.
To exercise your rights, contact the Data Protection Officer (DPO):
- By email: dpd@cash-paris.com
- By post: Data Protection Officer, Cash Paris, 3 Place de Londres, 93290 Tremblay-en-France
Requests must specify which data you wish to access, correct, delete, restrict, or transfer.
Cash Paris may retain certain data if required or permitted by law, if legitimate reasons exist, or for legal claims.
We may request further information/proof of identity.
You may also file a complaint with the French Data Protection Authority (CNIL, www.cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07).
Amendments to the Privacy Policy
If our Privacy Policy is modified, we will specify the changes on this page and may publish notifications on other pages of the website, so that you are always informed about the data we collect and how we use it.