Privacy Policy
1. Identity of the Data Controller
Raphael Jordan (trading as Birdguides International)
Port De Sechex, 74200 Margencel, France
SIREN: 433 640 539
Contact: contact@birdguides.io
DPO (Data Protection Officer):
Clément TOURNIER — Agence NUCOM
clement@nucom.fr
2 allée des Saules, 74000 Annecy, France
2. Data We Collect
2.1 Users (Bird Watchers)
- Email address, display name, profile photo (via Firebase Auth)
- Location (optional, user-provided)
- Booking history and favourite guides
- Reviews you have written
- Notification and privacy preferences
- Search history (anonymized after 90 days)
2.2 Guides & Tour Operators
- Professional profile: name, bio, photos, specialties, GPS location
- Contact information: email, phone (optional)
- Booking data and reviews received
- Gallery photos (stored in Firebase Storage)
- Availability, pricing, subscription status
2.3 Technical Data (All Users)
- Session cookie
__session(14 days, httpOnly, secure) - Language preference cookie
birdguides-locale(1 year) - IP address (Firebase infrastructure, security purposes only)
- User agent (truncated to 100 characters in search logs)
3. Lawful Basis for Processing
| Processing activity | Legal basis |
|---|---|
| Account creation and authentication | Contract (Art. 6.1.b) |
| Displaying your profile to other users | Contract (Art. 6.1.b) |
| Analytics cookies | Consent (Art. 6.1.a) |
| Marketing communications | Consent (Art. 6.1.a) |
| Retaining booking records (5 years) | Legal obligation (Art. 6.1.c) |
| Security monitoring and fraud prevention | Legitimate interest (Art. 6.1.f) |
4. Data Retention
| Data type | Retention period |
|---|---|
| User profiles | Until deletion request |
| Booking records | 5 years after the booking (French commercial law) |
| Contact requests | 7 days (auto-deleted) |
| Search logs | 90 days (anonymized) |
| Session cookies | 14 days |
| GDPR requests log | 3 years |
| Consent records | 5 years (proof of consent — CNIL) |
5. Data Processors (Sub-processors)
| Processor | Service | Data transferred |
|---|---|---|
| Google Firebase | Auth, Database, Storage, Hosting | All user data |
| Google Gemini AI | AI-powered search | Search queries (anonymized) |
| Google Maps | Location and map display | Location queries |
| Infomaniak | Transactional email delivery | Email address, name |
Firebase infrastructure is hosted in the europe-west1 region (EU data residency).
6. Your Rights (GDPR)
Under GDPR you have the following rights:
- Right of Access (Art. 15) — Request a copy of all data we hold about you.
- Right to Rectification (Art. 16) — Correct inaccurate data via your dashboard.
- Right to Erasure (Art. 17) — Request deletion of your personal data. Submit a request →
- Right to Portability (Art. 20) — Receive your data in a machine-readable format.
- Right to Object (Art. 21) — Opt out of analytics at any time in cookie preferences.
- Right to Restriction (Art. 18) — Ask us to limit processing while a dispute is resolved.
To exercise any right, email contact@birdguides.io. We will respond within 30 days.
Note on booking records: Even if you request erasure, financial booking records must be retained for 5 years under French commercial law. We will anonymize all personal data fields while keeping the financial data.
7. Cookies
For detailed information on cookies we use, please read our Cookie Policy.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes
9. Changes to This Policy
We will update this page when there are material changes to our data practices. The date at the top of this page reflects the last update.