top of page

PRIVACY POLICY

Applicable from April 1, 2026

Article 1: Introduction This Privacy Policy describes the manner in which Root 64, a sole proprietorship, whose registered office is located at 12 Allée du Fer à Cheval, 64200 Biarritz, SIREN 999 28 45 32, and represented by Mr. Philippe Robeyns (hereinafter referred to as "the Service Provider" or "we"), collects, uses, protects, and shares the personal data of its clients and prospects (hereinafter referred to as "you" or "the Client") in the context of its motorcycle tourism services with a driver. We are committed to protecting your privacy and your personal data in accordance with applicable legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and the French "Informatique et Libertés" law.

Article 2: Data Controller The controller of your personal data is: ROOT64, philippe.root64@gmail.com

Article 3: Data Collected We collect different types of personal data about you, depending on the nature of our interactions:

  1. Identification and Contact Data:

    • Last name, first name, title

    • Email address

    • Telephone number

    • Postal address (if necessary for invoicing or correspondence)

    • Date of birth (to verify the minimum required age)

  2. Data Specific to the Service:

    • Passenger's weight (necessary for safety and vehicle balance reasons)

    • Any relevant information on health or contraindications (allergies, medical problems likely to affect safety during the ride), provided voluntarily by the client.

    • Preferences for itinerary or type of ride.

  3. Transaction and Payment Data:

    • Information relating to the services purchased.

    • Transaction history.

    • Payment information (complete credit card data is not stored by the Service Provider but processed securely by a certified payment service provider).

  4. Communication Data:

    • Content of exchanges (emails, phone calls) with our customer service.

  5. Image Data (Photos and Videos):

    • Photos and videos taken during the outings.

Article 4: Purposes of Data Processing We collect and process your personal data for the following purposes:

  1. Management of Bookings and Performance of Services:

    • Process your booking requests and follow up on them.

    • Confirm bookings and payments.

    • Organize and perform the motorcycle rides and circuits (planning itineraries, managing drivers, preparing equipment).

    • Contact you in case of modification or cancellation of the service.

  2. Passenger and Activity Safety:

    • Verify the minimum required age (14 years).

    • Take weight into account for safety and vehicle compliance.

    • Adapt the service or refuse the service if medical or weight information indicates a risk to the passenger's or driver's safety.

    • Ensure compliance with safety rules and the Highway Code.

  3. Invoicing and Accounting Management:

    • Prepare invoices and track payments.

    • Comply with our legal and tax obligations.

  4. Improvement of Our Services:

    • Analyze the use of our services to improve and personalize them.

    • Manage complaints and after-sales service.

  5. Marketing and Communication (with your consent):

    • Send you information about our offers, promotions, or news, only if you have given your explicit consent.

    • Use photos and videos taken during the outings for commercial purposes (advertising, website, social networks) only after obtaining your explicit and separate authorization.

  6. Compliance with Legal Obligations:

    • Respond to requests from competent authorities in case of legal obligation.

Article 5: Legal Bases for Processing The processing of your personal data is based on the following legal bases:

  1. Performance of a Contract: The processing is necessary for the performance of the motorcycle tourism service contract you have entered into with us (management of bookings, performance of the service).

  2. Legal Obligation: The processing is necessary to comply with a legal obligation to which we are subject (invoicing, data management for safety, responses to legal requests).

  3. Legitimate Interest: The processing is necessary for the pursuit of our legitimate interests (improvement of services, fraud prevention, activity security), provided that these interests do not override your fundamental rights and freedoms.

  4. Consent: For certain purposes, particularly the sending of direct marketing communications or the use of your image for commercial purposes, your explicit and prior consent will be obtained. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent carried out before this withdrawal.

Article 6: Recipients of the Data Your personal data may be transmitted to the following recipients, only to the extent necessary to achieve the stated purposes:

  • Our drivers and internal staff involved in the management and performance of the services.

  • Our third-party service providers who assist us in performing our services (e.g., payment providers, website hosts, emailing services), acting as subprocessors and bound by contractual obligations of security and confidentiality.

  • Competent authorities (administrative, judicial) when we are legally required to do so.

We undertake never to sell, rent, or exchange your personal data with third parties for commercial purposes without your explicit consent.

Article 7: Data Retention Period Your personal data is retained for the period necessary to achieve the purposes for which it was collected, and in accordance with applicable legal and regulatory obligations:

  • Booking and service performance data: Retained for the duration of the contractual relationship, then archived for a period of [5 or 10 years] for evidentiary purposes and compliance with legal obligations (commercial and tax statutes of limitations).

  • Payment data: Not stored directly by the Service Provider beyond the transaction time, with processing managed by secure payment providers. Transaction information may be retained for accounting purposes.

  • Data used for direct marketing purposes: Retained as long as you do not withdraw your consent, and for a maximum of three (3) years from the last interaction.

  • Photos and videos: Retained as long as the commercial use authorization is valid. In case of consent withdrawal, the images will be deleted from our commercial media within a reasonable timeframe.

Article 8: Data Security We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include, but are not limited to:

  • Securing our computer systems and website (SSL/TLS protocols).

  • Restricting access to data to only authorized and necessary personnel.

  • Raising awareness among our staff about data protection requirements.

  • Signing confidentiality agreements with our subprocessors.

Article 9: Your Rights In accordance with the GDPR, you have the following rights regarding your personal data:

  1. Right of Access: Obtain confirmation as to whether or not your data is being processed, and, where applicable, access it.

  2. Right to Rectification: Request the correction of inaccurate or incomplete data concerning you.

  3. Right to Erasure ("right to be forgotten"): Request the deletion of your data under certain conditions.

  4. Right to Restriction of Processing: Request the suspension of the processing of your data in certain cases.

  5. Right to Data Portability: Receive the data you have provided to us, in a structured, commonly used, and machine-readable format, and transmit it to another controller.

  6. Right to Object: Object to the processing of your data for reasons relating to your particular situation, or object to processing for prospecting purposes.

  7. Right to Withdraw Consent: Withdraw your consent at any time when the processing is based on your consent.

  8. Right to Define Post-Mortem Instructions: Define instructions relating to the retention, erasure, and communication of your personal data after your death.

To exercise these rights, you can contact us at the email address Philippe.root64@gmail.com. We may ask you for proof of your identity in order to process your request. We undertake to respond to your request within one month, extendable by two months in case of complexity or a large number of requests. In case of non-compliance with your rights, you also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes.

Article 10: Changes to the Privacy Policy We reserve the right to modify this Privacy Policy at any time. Any changes will be published on our website and/or notified to you by email if the changes are significant. We encourage you to regularly consult this page to stay informed of any updates.

Article 11: Contact For any questions regarding this Privacy Policy or the management of your personal data, you can contact us: By email: Philippe.root64@gmail.com By mail: 12 Allée du Fer à Cheval, 64200 Biarritz, France

​

bottom of page