What we do with your data when you request a rental on corsiva.fr, which cookies and trackers the site uses — with your consent, except our host’s cookieless audience measurement, which is exempt — and how to exercise your rights.
Last updated: 7 October 2026.
The data controller is CORSIVA HUB FRANCE (SASU, Rodez Trade and Companies Register 990 256 224, registered office: La Grangette, 12190 Le Nayrac, France), which runs the Corsiva agency, rue Marguerite Sevez, 73000 Chambéry, France (see the legal notice). For any question about your data: contact@corsiva.fr or +33 4 80 81 91 38.
The site does not require an account. The data below is collected only when you send a booking request:
On the Car concierge page, the form simply opens your e-mail client with a pre-filled request addressed to contact@corsiva.fr: nothing is stored on this site.
The "Request a callback" window works the same way: it prepares a WhatsApp message, or failing that an e-mail, with your first name, your number and the time slot you chose, which you send yourself. Nothing is stored on this site.
If you have accepted the "Advertising" purpose, the contact details entered in these forms may also be sent, hashed, to Google: see User-provided data.
Booking measurement. If you have accepted audience measurement, your booking request also sends our management software your Google Analytics identifier (_ga cookie), the identifier of your visit (_ga_* cookie), your advertising choice and, where applicable, the fact that the request comes from one of our team's devices. If you have also accepted advertising, it sends the identifier of the click on a Google ad that brought you to the site (gclid, gbraid or wbraid). These identifiers contain neither your name, nor your e-mail address, nor your phone number. The Google Analytics identifiers are used to link a paid booking to the visit that led to it; the click identifier is kept so that, where appropriate, the paid booking can be reported to Google Ads as a result of that ad. Without your consent to audience measurement, none of this is sent, and consent withdrawn before your request is sent applies to it. These identifiers are no longer used 90 days after the request; our management software then deletes them automatically (see For how long). If you withdraw your consent after sending a request, our management software is not informed: write to us at the address given under Your rights and we will delete these identifiers from your booking.
| Purpose | Legal basis |
|---|---|
| Processing your request, checking your file (licence, ID) before handing over the keys, drawing up the rental agreement and the inspection report | Pre-contractual steps and performance of the contract |
| Sending you the secure payment link and managing the security deposit (card hold) | Performance of the contract |
| Insuring the vehicle and the driver during the rental | Performance of the contract |
| Identifying the driver in the event of a traffic offence and handling fines or damage that occurred during the rental | Legal obligation, then performance of the contract |
| Preventing fraud and protecting the fleet | Legitimate interest |
| Counting the site's traffic and key actions (moving from one page to another, clicks on the main buttons and links, requests sent) as aggregated statistics, without cookies (see Cookieless audience measurement) | Legitimate interest (audience measurement exempt from consent) |
| Measuring the site audience, measuring advertising, improving the journeys (see the Cookies section) | Your consent |
| Measuring paid bookings and linking them to the original visit or ad (see Booking measurement) | Your consent |
Vercel, Stripe, Google, Microsoft and Cloudflare (document storage in our management software) belong to groups based in the United States: any transfers outside the European Union are covered by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's standard contractual clauses.
Your data is never sold or passed on to third parties for commercial purposes.
Your documents are kept securely in your customer file after the rental, in particular in case of a fine and to make your future rentals easier. Booking data is kept for the duration of the business relationship, then for as long as the related legal obligations require (driver identification, accounting, limitation periods). You can ask for your file to be deleted at any time (see Your rights), subject to those obligations.
The measurement identifiers attached to a booking request (Google Analytics, Google ad click) are no longer used 90 days after the request; our management software then deletes them automatically. Once sent to Google, this data follows the retention period set in Google Analytics (14 months).
Vercel cookieless audience measurement: the visit fingerprint is deleted after 24 hours; only aggregated statistics are kept.
On your first visit, a banner lets you accept all, refuse all or choose purpose by purpose. Apart from our host's cookieless audience measurement, which is exempt from consent (see below), nothing is loaded or measured before you choose, and refusing does not prevent you from using the site.
corsiva_consent, kept for 6 months in your browser (local storage).corsiva_lang, local storage) and not showing you the "Call us" window again during your visit (corsiva_callpop, session storage). No account, no login session.Provider: Vercel Inc., our host, acting on our behalf (processor). Counts page views and a few actions on the site: moving from one page to another (path of the previous page on this site and of the page shown, without any parameters), clicks on the main buttons and links (book, quote, call, e-mail, SMS or WhatsApp, link to another site) and the start of a booking or the sending of a request. What is sent is the page address (without any ad click identifier), the referring address (usually just the name of the site you came from) and the kind of button, link or form: for a click, a fixed code naming the button or the type of link (for another site, its domain name only); for a request, its type only; never the text of a button, a phone number, an e-mail address, the content of a request, an amount or anything you type. Vercel adds the country, device type, operating system and browser, derived from the request. All of this without cookies or any identifier stored on your device, and without tracking you from one site to another. Visits are recognised by a fingerprint computed by Vercel from the request, deleted after 24 hours; only aggregated statistics are kept, solely to measure how this site is visited and used, for our exclusive use. This measurement falls under the consent exemption provided by the CNIL (the French data protection authority) for audience measurement: it is therefore not listed in the banner and does not depend on your choice. Legal basis: our legitimate interest in knowing the site's traffic and how it is used.
Provider: Google Ireland Ltd. Counts visits, page views and actions (clicks, forms) to see which pages matter and improve the site. Cookies _ga and _ga_* (13 months); data kept for 14 months. Loaded only with your consent. If you send a booking request, your Google Analytics identifier is attached to it (see Booking measurement). Google privacy policy.
Provider: Google Ireland Ltd. Conversion measurement and personalisation of Google Ads. Cookies _gcl_* (13 months maximum). Loaded only with your consent. If you send a booking request, the identifier of your click on a Google ad is attached to it (see Booking measurement). No Meta (Facebook, Instagram) pixel is used on this site.
User-provided data (Google enhanced conversions). The site's Google tag is set up to detect the contact details entered in our forms (booking request, callback request, form on the Concierge page) and send them to Google to measure advertising conversions:
For how Google uses this data and how long it keeps it, see the Google privacy policy and the "About enhanced conversions" page.
Provider: Microsoft Ireland Operations Ltd. When this tool is active, it anonymously replays sessions (clicks, scrolling, pages) and builds heatmaps to spot friction; input fields and areas containing your data are masked. Cookies _clck (13 months) and _clsk (1 day); recordings kept for 30 days. Loaded only with your consent. Microsoft privacy statement.
You can change or withdraw your choice at any time via the "Manage cookies" link at the bottom of the page or the cookie icon at the bottom left of the screen; the cookies concerned are then deleted, and the page reloads if a tool already loaded has to stop. Withdrawal applies from then on: for identifiers already attached to a booking request, see Booking measurement.
Hosting: Vercel privacy policy.
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time. Write to contact@corsiva.fr; we reply within one month. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
The site is served over HTTPS. The documents you upload are sent directly to the agency's management software over an encrypted connection and do not pass through any other server of this site. Access to your file is restricted to the Corsiva team.
This policy may change, for example if a new measurement tool is added. The date at the top of the page shows the latest version; when the cookie set-up changes, the banner asks for your choice again.