Privacy Policy
Document current as of 18/08/2026 — subject to change.
1. Data controller
The controller of personal data is MONARCH SAS, 2 Chemin du Bac, 38360 Sassenage, France, operating the envie2rouler Alpes agency — email grenoble@envie2rouler.com, phone 06 80 59 40 93.
2. Data we collect
- identity data (surname, first name, date of birth);
- contact details (address, email, phone);
- driving licence and identity document;
- booking and payment data;
- the result of the online identity verification carried out via Stripe Identity — biometric data is processed by Stripe and is not retained by us;
- geolocation and vehicle telematics data during the rental: each vehicle is geolocated and fitted with an accelerometer (fall/impact detection);
- website audience measurement data via Google Analytics 4 (anonymised IP address), set only after your consent.
3. Purposes
- managing and performing rentals, the contract and invoicing;
- fraud prevention and securing the relationship (identity verification);
- fleet, assistance and claims management (geolocation, telematics);
- compliance with our legal and accounting obligations;
- information and marketing, with your consent and the ability to object at any time;
- website audience measurement, with your consent.
4. Legal bases
- Performance of the contract: booking and rental management;
- Legal obligation: accounting, tax and safety obligations;
- Legitimate interest: security and fleet management (geolocation, fraud prevention);
- Consent: audience-measurement cookies and marketing communications.
5. Recipients and processors
Your data may be shared with the following providers, acting as processors or recipients within the limits of their tasks:
- Stripe — payment and identity verification;
- Microsoft Azure — hosting (European Union);
- Google Ireland Limited, and Google LLC in the United States — audience measurement (Analytics) and advert performance measurement (Google Ads), only after your consent. For conversion measurement we send Google an irreversible fingerprint (SHA-256) of your e-mail address and phone number, so that Google can match your booking to the advert you clicked, without ever disclosing those details in clear. Transfer outside the European Union covered by the EU–US Data Privacy Framework and by the Google Ads data processing terms, which appoint Google as a processor. Legal basis: your consent, withdrawable at any time. We keep no fingerprint on our side: it is computed at payment and sent;
- Advences — booking platform;
- Brevo (Sendinblue) — sending SMS and emails.
Any transfers of data outside the European Union are governed by appropriate safeguards (European Commission standard contractual clauses).
6. Retention periods
- contractual and rental data: kept for up to 5 years after the end of the relationship (limitation period);
- identity documents, driving licences and condition reports: kept only as long as strictly necessary for the rental, then deleted;
- biometric data: kept only by Stripe, never by us;
- audience-measurement data: 14 months maximum.
7. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability and the right to withdraw your consent at any time.
To exercise these rights: email grenoble@envie2rouler.com or write to the registered office. You may also lodge a complaint with the French supervisory authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
8. Hosting within the European Union
Your data is hosted and processed within the European Union (Microsoft EU Data Boundary).
9. Cookies
Cookie management is detailed in our Cookie Policy.
