Privacy Policy

1. Introduction

This privacy policy aims to inform users of the website www.nomadays.fr (hereinafter "the Site") about how their personal data is collected, used and protected by Nomadays, in accordance with:

Regulation (EU) 2016/679 on the protection of personal data (GDPR),
the amended French Data Protection Act,
as well as the recommendations of the CNIL.

2. Data Controller

Personal data collected via the Site is processed by:

Nomadays SAS
10 Allée Jean Bringer, 34260 Le Bousquet d'Orb, France
RCS Béziers 837 904 267

Email: service.clientele@nomadays.com

Nomadays acts as the data controller for data relating to the use of the Site, the management of quote requests, customer relations, booking and administrative follow-up of trips, as well as access to the customer portal.

3. Local partner agencies

As part of organizing trips, Nomadays partners with independent local agencies specialized in their respective destinations.

To ensure the proper delivery of tourism services, certain personal data necessary for organizing your stay may be shared with the local agency involved as well as with service providers participating in the delivery of your trip.

Depending on the nature of the processing carried out, the local partner agency may act as:

either as a subcontractor acting on behalf of Nomadays,
or as a separate data controller for operations falling directly under the local execution of the trip.

4. Personal data collected

We may collect the following data categories:

Identification Data

Full name, first name, email address, phone number, postal address.

Trip Details

Participants, dates of birth, travel preferences, information necessary for booking tourism services.

Customer account data

Navigation data

IP address, device type, pages visited, navigation statistics.

Payment Details

Processed exclusively by our secure payment provider Stripe — Nomadays has no access to card numbers.

Special Data

Certain health or specific needs information may be collected only when strictly necessary for trip organization, with your consent.

5. Processing purposes

Personal data is used in order to:

respond to quote requests;
design and organize trips;
manage reservations, contracts and billing;
provide access to the client portal;
ensure traveler assistance before and during the stay;
personalize our travel suggestions;
comply with legal and accounting obligations;
improve our services and user experience;
send marketing communications when you have consented to receive them.

6. Legal basis for processing

Processing is based on:

the performance of the travel contract;
user consent;
compliance with legal obligations;
the legitimate interest of Nomadays to improve its services and Site security.

7. Data Recipients

Personal data is transmitted only when necessary:

to partner local agencies;
to tourism service providers (accommodations, carriers, guides, activities);
to technical service providers ensuring the Site's operation;
to administrative authorities when regulations require it.

Nomadays never sells personal data to third parties.

8. Hosting and Technical Subprocessors

To provide its services, Nomadays uses technical subprocessors, selected for their security guarantees and supervised in accordance with Article 28 of the GDPR:

Data hosting: Supabase (infrastructure located in the European Union);
Application hosting: Vercel and Railway;
Secure payment: Stripe;
Artificial intelligence assistance: Anthropic (see Article 9);
Transactional email sending: dedicated email service provider.

9. Use of artificial intelligence

Nomadays uses artificial intelligence tools (Anthropic Claude) to assist its advisors in processing requests (brief summaries, customized itinerary suggestions). Data transmitted to these tools is anonymized beforehand: name, email and telephone are systematically removed.

No automated decision producing legal effects is made by artificial intelligence: a human advisor validates each proposal before any submission.

10. Transfers Outside the European Union

As part of organizing international trips, certain data may be transferred to partners located outside the European Union.

Nomadays ensures that these transfers are governed by appropriate safeguards in compliance with GDPR requirements, particularly when data is necessary for the performance of the travel contract.

11. Data Retention Period

Data is retained solely for the duration necessary to achieve the purposes pursued:

Type of Data	Retention Period
Prospects (unconverted quote request)	3 years from last contact
Traveler clients (relationship data)	5 years after the trip
Accounting and tax data	10 years
Newsletter / marketing consent	Until unsubscription
Cookies and browsing data	13 months maximum

12. Data Security

Nomadays implements technical and organizational measures designed to ensure the security and confidentiality of personal data, including:

access control,
secure hosting,
encrypted communications,
regular backups.

13. Your rights

In accordance with applicable regulations, you have the following rights:

right of access ;
right of rectification ;
right of erasure ;
right to object ;
right to restrict processing ;
right to data portability ;
right to determine the fate of your data after your death.

You can exercise your rights by writing to service.clientele@nomadays.com or by mail:

Nomadays
10 Allée Jean Bringer, 34260 Le Bousquet d'Orb, France

You also have the right to lodge a complaint with the CNIL: www.cnil.fr

14. Cookies and Audience Measurement

The Site uses essential cookies (operation, session, memorization of your cookie choices) and, subject to your consent, analytics and marketing cookies. Details are described in our cookie policy.

Our internal audience measurement (Nomadays nd.js) collects anonymous statistics for our sole use, without transmission to a third party: truncated IP address /24, ephemeral session identifier 30 minutes, retention 13 months maximum, no cross-site tracking. This measurement is exempt from consent under CNIL regulations. You can modify your choices at any time via the cookie manager.

15. Links to third-party websites

The Site may contain links to external websites. Nomadays cannot be held responsible for the privacy policies applied by these third-party websites.

16. Policy Updates

This privacy policy may be updated at any time to reflect legal, technical, or organizational changes.

The current version is the one published on the Site.

Politique de confidentialité