Privacy Policy

Last updated: 9 September 2026

This Privacy Policy describes how V.I.P. collects, uses and protects your personal data when you use the olamholidays.com website, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

1. Data controller

The data controller is:
V.I.P., SAS with share capital of €10,000
Registered office: 84 avenue de la République, 94300 Vincennes, France
RCS Créteil 830 841 706
Represented by its President, Mr Simon Lahiany

2. Data we collect

We collect the following data:

• Data you provide to us: through our quote and contact forms — surname, first name, e-mail address, telephone number, and any information relating to your travel request (dates, destinations, number of travellers, preferences, free-text message).
• Browsing data: through cookies and similar technologies — IP address, browser type, pages viewed, visit duration (see the Cookies section below).

3. Purposes and legal bases

4. Recipients of the data

Your data is intended for the authorised staff of V.I.P. It may be shared with our technical processors acting on our behalf, in particular:

• our host OVH SAS (data storage, France);
• Google Ireland Limited for audience measurement, subject to your consent.

We do not sell or rent your personal data to third parties.

5. Transfers outside the European Union

The use of Google Analytics may involve a transfer of data to servers located outside the European Union. Such transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by the EU–US Data Privacy Framework. These processing operations are activated only after your consent has been obtained via our cookie banner.

6. Retention period

• Quote and contact requests: retained for the period necessary to process your request, then for up to 3 years from the last contact for prospecting purposes.
• Customer data (in the event of a booking): retained for the duration of the contractual relationship, then archived in accordance with legal (notably accounting) time limits.
• Cookies: see the duration indicated in the Cookies section.

7. Cookies

A cookie is a small file placed on your device when you visit a website. On your first visit, a banner allows you to accept, reject or configure cookies. Your choice is stored for 12 months; you can change it at any time via the "Manage cookies" link.

Strictly necessary cookies

Essential for the website to function (storing your language choice, your cookie consent, security). They do not require your consent.

Audience measurement cookies

We use Google Analytics to understand how visitors use the website and to improve its content. These cookies are placed only after your consent. They have a maximum lifespan of 13 months.

8. Your rights (GDPR)

Under the GDPR, you have the following rights:

• right of access to your data;
• right to rectification;
• right to erasure ("right to be forgotten");
• right to restriction of processing;
• right to object, in particular to prospecting;
• right to data portability;
• right to withdraw your consent at any time;
• right to set directives regarding the fate of your data after your death.

To exercise these rights, you may contact us via the website's contact form or by post at: V.I.P., 84 avenue de la République, 94300 Vincennes, France. Proof of identity may be requested.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (French Data Protection Authority), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, www.cnil.fr.

9. Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights regarding your personal information:

• the right to know what personal information we collect and how it is used;
• the right to request deletion of your personal information;
• the right to correct inaccurate personal information;
• the right to opt out of the "sale" or "sharing" of your personal information;
• the right not to be discriminated against for exercising your privacy rights.

We do not sell your personal information for money. The use of advertising or analytics cookies, such as Google Analytics, may qualify as "sharing" under the CPRA. You can opt out of such sharing at any time by rejecting non-essential cookies in our cookie banner or via the "Manage cookies" link — this functions as our "Do Not Sell or Share My Personal Information" mechanism. Analytics cookies are never activated before you give consent.

To exercise your California rights, please contact us using the details in the section above. We will not discriminate against you for exercising any of these rights.

10. Security

V.I.P. implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration.

11. Changes

This policy may be updated at any time. The date of the last update appears at the top of the page. We invite you to review it regularly.