Informativa sulla privacy
1. Introduction
This privacy statement applies to all personal information about you that we collect, use and retain when you use our website (under the Option Way brand or in partnership with the mention "powered by Option Way"), when you create an account, when you book a flight ticket or another product or service, or when you contact us.
Option Way is responsible for the collection and use of your personal data as described in this privacy statement. If you have any questions, comments or complaints regarding Option Way's use of your personal data, please contact our Data Protection Officer by email: dpo@optionway.com.
Option Way is a French travel agency subject to French regulations for its online airline ticket sales activities. Option Way is registered with Atout France as a travel agency, a member of the Association Professionnelle de Solidarité du Tourisme (APST), and approved by the International Air Transport Association (IATA).
Option Way is a Société par Actions Simplifiée (S.A.S.) with a capital of 233,187 euros, registered with the Cannes Commercial Court (RCS Cannes n° 752 774 521), with its registered office at Parc Haute Technologie, avenue Maurice Donat, Sophia-Antipolis, 06250 Mougins.
2. Data collected
2.1. Data provided by the user
Option Way collects information relating to the user's identity (gender, first names, last names, date of birth, email, phone number, account password...) when you provide it when subscribing to our offers, when you create an account, and when you attempt to make or make a flight booking.
When you attempt to make or make a flight booking, Option Way collects information relating to the passengers' identity (gender, first names, last names, date of birth, passports or identity cards, email, phone number, frequent flyer programs...).
The collected data also covers all the information relating to flight searches and bookings (search criteria, details of itineraries searched and/or booked, price details...), as well as other flight-related products such as travel insurance.
2.2. Data collected by using the website or our services
By using the website or our services, including our Customer Service, Option Way collects information about the use of the website and user behaviour.
When you contact our customer service by email or telephone, we record these contacts in our systems in order to track the actions relating to customer requests or bookings made.
When you browse our website, we record in particular your IP address, your browser type and your browsing behaviour. We also collect information through cookies, scripts, pixel tags or other similar technologies. If you receive a newsletter from us, we record when you open it or if you click on a link.
3. Processing and use of data
Option Way processes and uses the collected data to achieve several objectives.
a) To process flight bookings and provide after-sales service to users.
The main purpose of the collected data is to enable the proper execution of bookings requested and made by users, as well as to ensure all after-sales operations, in particular by contacting users.
b) To communicate with users.
Some collected data is used to communicate with users who have given their consent to be informed about our offers and services. This mainly involves sending emails and newsletters. Users who have given their consent to be contacted can change this choice at any time.
c) To improve the website and our service.
Some collected data is used to improve the website and our services. The use of data consists of analysing user behaviour on the website (audience, user origin, customer journey analysis, types of searches and bookings...).
d) To fulfil our legal, contractual, tax and accounting obligations.
Some collected data is used to fulfil our legal obligations (in the event of customer disputes or fraud, for example), contractual (for example with airlines), tax and accounting obligations (in the event of file audits, for example).
4. Cookie management
These cookies are essential for the website to function and cannot be disabled:
ow-user-session-id, ow-visitor-id, partner, persist:hs-beacon-message-#-#, persist:hs-beacon-#-#-#-#-#, persist:hs-beacon-session-#-#-#-#-#, airports_fr, airportsResultsStructured_fr, ember_simple_auth-session, SCROLL_TO_LOWESTFARES, currentInputLocked, referentiel/currency:all, referentiel/airline:all, referentiel/airport:all, referentiel/aircraft:all, referentiel/city:all, referentiel/document-type:all, referentiel/country:all, referentiel/nationality:all, referentiel/phone-code:all, referentiel/frequent-flyer-program:all, token, topNoteReaded, displayWidget, maintenance, pendingRequests, previousPageWasShopping, limit, JSESSIONID, ak_bmsc, CookieConsent, bestoffer:all.
Non-mandatory cookies may also be placed on your browser, subject to your explicit consent, in accordance with the provisions of the GDPR.
5. Data sharing
Option Way shares some collected data with external service providers in order to carry out transactions and provide our services. Option Way shares the data collected for flight bookings with several airline reservation systems (Galileo France, Amadeus, Travel Fusion), as well as with each of the airlines involved in flight bookings. Option Way also shares data with providers of other products or services subscribed to in addition to flights, in particular the insurance broker and insurance companies for travel insurance.
Furthermore, when a user visits a version of the Option Way website in partnership with another website (airport website, travel agency, agency matching platform, or any other website), Option Way shares the collected data with the partner distributing Option Way's flight search and booking website. The partner's name is clearly displayed on the website, accompanied by the mention "powered by Option Way", thereby informing users that a partnership exists between the partner and Option Way. Users are informed of this data sharing in Option Way's General Terms and Conditions of Use and Sale. Partners use this data to offer and ensure the proper execution of their own services.
Finally, Option Way may be required to share some collected data to comply with legal or regulatory obligations, particularly in the event of a request from the company's supervisory authorities.
6. Payment information
Payments by users on the website are handled by two companies, Point Transaction Systems (Paybox Verifone) and Sogecommerce (Société Générale and Lyra Networks), which are external service providers specialised in this field and compliant with PCI DSS security standards. Option Way has no access to users' bank card data, as this data is provided by users directly on the service providers' interface (redirect). Option Way does, however, receive information from the service providers regarding the outcome of payment execution.
7. Data storage and security
Personal data is stored by Option Way using external service providers offering remote data storage services ("cloud"). Option Way uses two external service providers (OVH and Amazon Web Services) that ensure data storage within the European Union.
The Option Way website is secured for data transmission using the https protocol and a security certificate provided by Digicert. The personal data collected is encrypted by Option Way to secure storage. Database access is also secured with private access. The collected data is retained for a maximum period of 10 years to fulfil certain legal obligations.
8. Your rights regarding your personal data
In accordance with European and French regulations, you have several rights regarding your data collected by Option Way:
a) Right of access to data
You have a right of access to your personal data and you can ask us what data we hold and obtain a copy of this data. We will provide you with all the data at our disposal, specifying the use made of it and the purpose of the processing.
b) Right to rectification of data
You have a right to rectification of your personal data in the event of an error or missing elements. We will modify your data accordingly. Account data can be modified on the website.
c) Right to erasure of data
You have a right to erasure of your personal data, in compliance with Article 17 of the General Data Protection Regulation (GDPR). This concerns personal data that is no longer necessary for the purpose of its storage and processing. In this context, we will delete the relevant data.
d) Right to restriction of processing of data
You have the right to obtain the restriction of processing of your personal data, which means that we suspend the processing of your data for a certain period. Circumstances that may lead to the exercise of this right include situations where the accuracy of your personal data is called into question, but where some time is needed to verify its (in)accuracy. This right does not prevent us from continuing to store your personal data. We will inform you of the lifting of this restriction.
e) Right to data portability
You have a right to data portability. This allows you to ask us to provide your personal data using a computer format widely used by companies in our sector. Upon request, and where technically feasible, we will be able to transfer your personal data to a manager of your choice.
f) Right to object
You have a right to object to the processing of your personal data, by asking us to stop processing your personal data.
In order to exercise your rights regarding your personal data, you can contact the Data Protection Officer directly by email dpo@optionway.com.
9. Links to other websites and social networks
Option Way websites may contain links to partner or third-party websites. These third-party websites have their own privacy policy and Option Way disclaims all responsibility regarding information collected by these third parties.
10. Amendment of our privacy policy
Option Way may amend this privacy policy at any time by updating it on the Option Way websites. The date of updating the document is indicated on the first page of the document.
11. Contact
For any question regarding the protection of personal data, or to exercise your rights, you can contact the Data Protection Officer directly by email dpo@optionway.com or by post:
Option Way
Attn: Data Protection Officer
Parc Haute Technologie
Avenue Maurice Donat
Sophia-Antipolis
06250 Mougins