01Data controller
The controller of your personal data is:
- FRANCE MILES TOURISME — a simplified joint-stock company (SAS), trading under the commercial name EXPATUR TRAVEL
- Registered office: Immeuble Les Ibis Rouges, 1 avenue Gustave Charlery, 97300 Cayenne, French Guiana
- SIREN: 941 414 112 — SIRET (head office): 941 414 112 00016
- RCS of Cayenne — APE code: 79.11Z (travel agency activities)
- Company registered on 25 February 2025
- President: Erwan TAILLEUX
- Contact: administration@expaturtravel.com
Parent company
FRANCE MILES TOURISME is part of the group EXPATUR AGÊNCIA DE TURISMO LTDA (CNPJ 50.236.211/0001-04 — Rua Marília 4200, Tupã — SP, Brazil), a company incorporated under Brazilian law. Certain support functions (in particular customer-relationship management and the handling of requests) may be carried out within the group; the personal data concerned is then subject to a framed transfer to Brazil (see the section Transfers outside the European Union).
No data protection officer (DPO) has been appointed to date; any request relating to your data may be sent to the e-mail address above.
02Data we collect
We only collect the data necessary to process your request. Specifically:
a) Data you provide to us (quote form)
- Identity and contact: first name, last name, e-mail address, phone number (with country code).
- Trip details: trip type (one-way / round trip), departure and arrival city and airport (name and IATA code), outbound and return dates, number of passengers.
- Consent: your agreement to be contacted by e-mail, message or WhatsApp.
b) Data collected automatically
- IP address and user agent (browser and system), recorded with your request for security purposes and to prevent abusive submissions.
- Country of connection, inferred from your IP address, solely to pre-select the phone country code in the form.
- Source of the request (originating page).
We collect no banking data via this site: no payment is made online when requesting a quote. Nor do we ask for a passport number or date of birth at this stage; if such information is required to issue a ticket, it will be requested later by your advisor, through a secure channel.
03Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Process your quote request and offer you flights, fares and options | Identity, contact, trip details | Pre-contractual measures at your request (art. 6.1.b) |
| Contact you back by e-mail, message or WhatsApp | E-mail, phone, first name | Your consent (art. 6.1.a) |
| Confirm receipt of your request (automatic e-mail) | E-mail, first name, trip summary | Pre-contractual measures (art. 6.1.b) |
| Manage the customer relationship and your bookings in our internal tool | Identity, contact, request history | Performance of the contract (art. 6.1.b) and legitimate interest |
| Site security and abuse prevention | IP address, user agent | Legitimate interest (art. 6.1.f) |
| Audience measurement and advertising (Meta Pixel) | Browsing identifiers, conversion event | Your consent (art. 6.1.a) |
Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
04Recipients and processors
Your data is accessible to our booking team and to the technical providers strictly necessary for the operation of the service. We do not sell or rent your data to third parties.
| Provider | Role | Data concerned |
|---|---|---|
| Cloudflare, Inc. | Site hosting, form execution and database storage (D1) | All form data, IP, user agent |
| Resend, Inc. | Sending the confirmation e-mail for your request | E-mail, first name, trip summary |
| Meta Platforms, Inc. | Meta Pixel — advertising conversion measurement | Browsing identifiers, « Lead » event |
| Trustindex | Display of Google customer reviews | Browsing data linked to the widget |
| Google (Fonts) | Loading the site's fonts | IP address |
| EXPATUR AGENCIA DE TURISMO LTDA (Brazil) | Parent company — handling of requests and customer relationship within the group | Identity, contact, trip details |
| Airlines and consolidators | Booking and issuance of tickets, if you accept an offer | Passenger identity, itinerary |
Your data may also be passed to the competent authorities where the law requires it.
05Transfers outside the European Union
Some of our providers (Cloudflare, Resend, Meta, Google) are established in the United States or process data outside the European Union. These transfers are framed by the mechanisms provided for by the GDPR: the European Commission's standard contractual clauses and/or certification under the EU–US Data Privacy Framework.
Data may also be processed in Brazil, within our parent company EXPATUR AGENCIA DE TURISMO LTDA. Brazil does not benefit from an adequacy decision of the European Commission; these transfers are therefore framed by standard contractual clauses and additional security measures. Brazil also has its own data protection law (LGPD, Law No. 13,709/2018), very closely modelled on the GDPR.
Finally, the very nature of our business (flights between Europe, North America and other regions) means that the data needed to issue your tickets is passed to the relevant airlines, including outside the EU.
06Retention periods
- Unconverted quote request: 3 years from the last contact with you.
- Customer file (booking made): for the duration of the commercial relationship, then archived for up to 5 years, and 10 years for accounting documents (legal obligation).
- IP address and user agent: 12 months for security purposes.
- Cookies and trackers: 13 months maximum.
07Cookies and trackers
The site uses:
- Strictly necessary local storage: remembering your language choice (FR/EN). No consent required.
- Meta Pixel (advertising and conversion measurement): subject to your consent.
- Trustindex review widget: may set trackers when displayed.
You can at any time set your browser to block cookies, or object to advertising tracking from your Meta account settings.
08Your rights
In accordance with the GDPR, you have the following rights over your data:
- Right of access: obtain a copy of the data we hold about you.
- Right of rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data, subject to our legal retention obligations.
- Right to restriction of processing.
- Right to object, in particular to direct marketing.
- Right to portability: receive your data in a structured, machine-readable format.
- Right to withdraw your consent at any time.
- Right to set directives regarding the fate of your data after your death.
To exercise these rights, write to us at administration@expaturtravel.com. We reply within a maximum of one month. Proof of identity may be requested in the event of reasonable doubt.
09Data security
We implement appropriate technical and organisational measures to protect your data:
- Encryption of communications in transit (HTTPS / TLS) across the entire site and form.
- Hosting on secure infrastructure (Cloudflare), with restricted access to the databases.
- Access to data limited to the team members who need it to handle your request.
- No banking data is collected or stored by this site.
Despite these measures, no system is infallible; in the event of a data breach likely to create a high risk to your rights, you would be informed in accordance with Article 34 of the GDPR.
10Minors
The site is not intended for unaccompanied minors. Requests concerning minor passengers are made by a responsible adult, who warrants that they have the necessary authority to provide their information.
11Changes to this policy
This policy may be amended to reflect legal, technical or organisational developments. The date of the last update appears at the bottom of the page. In the event of a substantial change, we will inform you by an appropriate means.
12Contact and complaints
A question about your data?
E-mail: administration@expaturtravel.com
Post: FRANCE MILES TOURISME (Expatur Travel) — Immeuble Les Ibis Rouges, 1 avenue Gustave Charlery, 97300 Cayenne, French Guiana
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Last updated: 13 July 2026.