Updated on 4 January 2023
Privacy Policy
Fleeti attaches the utmost importance and care to the protection of the privacy of personal data, as well as to compliance with the applicable legal provisions.
Purpose of this Charter
Fleeti carries out Personal Data Processing operations for which it is the controller.
Through this Personal Data Protection Charter, Fleeti wishes to inform all Data Subjects of:
The characteristics of the Data Processing operations collected and processed under its responsibility;
The commitments it makes to respect Personal Data and to enable its Customers to exercise the rights granted to them by the Regulations, where applicable.
As part of its contractual relationship with Data Subjects, Fleeti undertakes to comply with the regulations in force on the Processing of personal data and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of personal data and on the free movement of such data (the "GDPR"), as well as French Law No. 78-17 of 6 January 1978 as currently in force. Capitalised terms in this article have the meaning given to them by the applicable personal data protection regulations.
Who are the Recipients of the Personal Data collected?
The Personal Data is collected for Fleeti as Data Controller, which guarantees its confidentiality, and for three partners: OVH, Azure and Navixy.
Fleeti informs the Data Subject that the Personal Data may be used by Fleeti staff or by staff of the group’s entities. These Recipients are subject to strict confidentiality and security obligations and will have access to the Personal Data only within the limits of the specified Purposes.
Data security
Fleeti undertakes to protect your personal data against any loss, destruction, alteration, unauthorized access or disclosure. We implement technical and organizational measures appropriate to the nature of the data and the risks involved in the processing. These measures are intended to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being distorted or damaged, or from being accessed by third parties.
These measures may include practices such as limited access to data by authorized departments’ staff, contractual guarantees when using an external service provider, regular reviews of our privacy practices and policies, and physical and/or logical security measures (secure access, authentication procedures, backup copies, software, antivirus, firewalls, etc.).
Is a transfer of Personal Data planned? If so, under what contractual conditions and to which countries?
The Data Subject is informed that, unless otherwise provided by law, Fleeti may, in the course of its mission, use third parties that may be located outside France (but within the European Economic Area). These may be other group entities and/or service providers acting on its behalf, providing administrative services, IT infrastructure services (including, where applicable, “cloud” service providers), as well as services supporting its activity. These third parties, for whom it remains responsible, are subject to strict confidentiality and security obligations pursuant to Article 28 and Article 29 of the GDPR.
Fleeti does not transfer your data outside the European Economic Area (EEA).
Otherwise, binding contractual mechanisms and legal processes will be put in place to lawfully transfer personal data beyond the borders of the EEA and to secure these data flows.
What access to the collected Personal Data is possible?
The person concerned by the Data Processing operations carried out by Fleeti has, pursuant to Article 18 of the GDPR, the rights listed below:
A right of access, that is, to obtain confirmation as to whether or not the Data is being processed and, where it is, access to said Data, as well as various information including the purposes of the Processing, the categories of Data, the recipient(s) of the Data, etc.;
A right to rectification, as soon as possible, of Data that is inaccurate, incomplete, outdated or ambiguous, or whose collection and Processing are prohibited;
A right to object to the Processing or to a transfer of the Data, unless there are compelling legitimate grounds that override the interests of the Data Subjects;
A right to erasure of the Data, which may be requested in the cases defined by law (Article 17 of the GDPR);
A right to restriction of the Processing of Data concerning the Data Subject on the following grounds:
For a period enabling the Data Controller to verify the accuracy of the personal data, where the data subject contests it;
The Processing is unlawful and the Data Subject opposes its erasure and requests the restriction of its use instead;
The Data Controller no longer needs the Personal Data for the purposes of the Processing, but it is still required by the data subject for the establishment, exercise or defense of legal claims;
Pending verification of whether the legitimate grounds pursued by the Data Controller override those of the data subject, where the latter has objected to the Processing.
The Data Subject may exercise these rights by writing to Fleeti at the following address: 2 rue Lestandeau, 64600 Anglet, France, and/or by email at: dpo@fleeti.co
The Data Subject also has the right to lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés, CNIL), including via its website
