Privacy Policy
Afrilia SAS places great importance on the protection of your personal data. This privacy policy describes how we collect, use, store and protect your data in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and Beninese law n°2009-09 on personal data protection.
1. Data Controller
Afrilia SAS
Registered office: Cotonou, Bénin
Email: contact@afrilia.net
2. Data Collected
We collect the following data:
- Identification data : name, surname, email, phone
- Booking data : travel dates, destinations, number of travelers, preferences
- Payment data : processed securely by Stripe (we do not store your banking data)
- Browsing data : cookies, IP address, browser type (with your consent)
3. Processing Purposes
- Management and monitoring of your bookings
- Sending confirmation and notification emails
- Improvement of our services and website
- Compliance with our legal and tax obligations
- Sending marketing communications (with your consent)
4. Legal Basis
- Contract execution : to process your bookings
- Consent : for cookies and marketing communications
- Legitimate interest : for site security and improvement
- Legal obligation : for tax and accounting data
5. Retention Period
- Account data: during registration + 3 years after last activity
- Booking data: 5 years (accounting obligations)
- Payment data: retained by Stripe according to its policy
- Cookies: maximum 13 months
6. Your Rights (GDPR)
In accordance with GDPR, you have the following rights:
- Right of access : obtain a copy of your data
- Right to rectification : correct inaccurate data
- Right to erasure : request deletion of your data
- Right to portability : receive your data in a structured format
- Right to object : object to the processing of your data
- Right to withdraw consent : withdraw your consent at any time
To exercise your rights, send an email to contact@afrilia.net with a copy of your ID. We will respond within 30 days.
7. International Transfers
Your data may be transferred to servers located outside the European Economic Area (EEA). In this case, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).
8. Data Security
We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, secure authentication (JWT), PCI-DSS payments via Stripe, restricted data access.
9. Complaint
If you believe your rights are not being respected, you can file a complaint with the Personal Data Protection Authority (APDP) of Benin or the CNIL in France.