← Back to the home page

Privacy policy

Last updated: 5 June 2026

Wander SAS attaches importance to protecting the personal data of those who use its website wander.paris and its services. This policy describes the processing operations carried out, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Act No. 78-17 of 6 January 1978 as amended.

Language of this policy. This policy is drafted in French and translated into English, Spanish and German. All four versions describe the same processing operations, the same purposes, the same retention periods and the same rights: they carry the same informational value. The French version serves as the reference for the identification of the French legal provisions cited. In the event of any discrepancy between versions, the interpretation most protective of the data subject prevails.

1. Data controller

The data controller is Wander SAS, a société par actions simplifiée with share capital of EUR 5,000, registered office at 26 rue Bosquet, 75007 Paris, registered with the Paris Trade and Companies Register under number 105 543 946. Contact for any question relating to data: contact@wander.paris.

2. Data collected, purposes and legal bases

ProcessingDonnéesPurposeLegal basis
Contact form Last name, first name, email, subject, message Answering the request received Consent and legitimate interests (Art. 6(1)(a) and 6(1)(f) GDPR)
Booking a service [to be activated at the Ride/Gourmet launch] Identity, contact details, booking and payment data Performance of the service and accounting obligations Performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR)
Communications (newsletter, news) [if implemented] E-mail Informing about news and offers Consent (Art. 6(1)(a) GDPR)

No data are collected without the person's knowledge. Mandatory fields are indicated in the forms.

3. Recipients and processors

The data are processed solely by the internal teams of Wander SAS and by its technical processors, acting on instructions and under a contract compliant with Article 28 GDPR:

  • the website's hosting provider, which also handles the contact form: Hostinger International Ltd, established in Cyprus (European Union);
  • where applicable, the online payment provider once ticketing goes live: [TO BE COMPLETED at the Ride/Gourmet launch].

The data are neither sold, nor rented, nor transferred to third parties for commercial purposes.

4. Transfers outside the European Union

The hosting of the website and the processing of the contact form take place within the European Union (Cyprus). No data are transferred outside the European Union and no processor established outside the EU is involved in these operations.

5. Retention periods

  • Requests via the contact form: three years from the last exchange;
  • Booking data and accounting records: the statutory accounting retention period (ten years for supporting documents, in accordance with Article L. 123-22 of the French Commercial Code);
  • Consent to communications: until consent is withdrawn.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability regarding your data, as well as the right to give directions concerning what happens to them after your death. You may withdraw your consent at any time.

These rights may be exercised at contact@wander.paris, accompanied where necessary by proof of identity. You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).

7. Cookies and local storage

The website uses no audience-measurement or advertising cookies. A technical local storage keeps only, on your device, the display language you have chosen. This mechanism is strictly necessary for the website to function and requires no prior consent. No profiling is carried out.

8. Security

Wander SAS implements reasonable technical and organisational measures to protect the data against loss, alteration or unauthorised access, in particular encryption of exchanges on the website (HTTPS) and restriction of access to authorised persons only.

9. Amendments

This policy may be updated to reflect legal or technical developments. The applicable version is the one published on the website on the date of consultation.