Privacy policy
LZPointsPermis takes the protection of your personal data seriously. This privacy policy describes how LZPointsPermis collects, uses and protects the information you share with us when using our website, lzpointspermis.fr, and our services.
This policy complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the amended French Data Protection Act ("Informatique et Libertés").
1. Data controller
The controller responsible for processing your personal data is:
- Name: LZ Formation (trading as LZPointsPermis)
- SIRET: 929 874 410 00012
- Registered office: 2 Rue Vincent Van Gogh, 78700 Conflans-Sainte-Honorine, France
- Operational address: 450 Rue Baden Powell, 34000 Montpellier, France
- Email: gestion@lzformation.fr
- Phone: +33 6 70 54 83 28
2. Data we collect
LZPointsPermis collects the following personal data as part of its activities:
Identity and contact details
- First and last name
- Postal address
- Email address
- Phone number
- Date of birth
Driving licence details
- Driving licence number
- Licence category
- Date of issue
- Declared points balance
- A scan of the licence (optional, if uploaded)
Payment data
- Payment data managed by Stripe or Klarna (LZPointsPermis never stores your full card details)
- Transaction reference
- Amount and date of payment
Browsing data
- IP address (anonymised or pseudonymised)
- Analytics cookie data (where consent was given)
- Pages visited, session duration
- Browser and device type
3. Purposes of processing
| Purpose | Legal basis | Data concerned |
|---|---|---|
| Managing course bookings | Performance of a contract | Identity, contact, licence |
| Processing payments | Performance of a contract | Identity, payment data |
| Sending confirmation and reminder emails | Performance of a contract | Email, name, course date |
| Transmitting the certificate to the Ministry of the Interior | Legal obligation | Identity, licence number |
| Responding to contact requests | Legitimate interest | Identity, contact, message |
| Website audience analytics | Consent | Browsing data |
| Sending newsletters (if subscribed) | Consent | Email, first name |
4. Retention period
| Data category | Retention period |
|---|---|
| Booking and attendance data | 5 years from the date of the course |
| Payment data (excluding card details) | 10 years (French accounting obligation) |
| Driving licence scan | Deleted once verified at booking |
| Browsing data (analytics cookies) | 13 months maximum |
| Contact requests | 3 years |
5. Data recipients
Your personal data is shared with the following third parties, strictly to the extent necessary for them to fulfil their role:
- Ministry of the Interior: transmission of the certificate of attendance (legal obligation)
- Stripe: card payment processing
- Klarna: instalment payment processing
- Supabase: database hosting (EU-based servers)
- Vercel: website hosting
- Email service provider: sending transactional emails
LZPointsPermis never sells or rents your personal data to third parties for commercial purposes.
6. Your rights
Under the GDPR, you have the following rights over your personal data:
- Right of access (GDPR art. 15): obtain a copy of the data we hold about you.
- Right to rectification (GDPR art. 16): correct inaccurate or incomplete data.
- Right to erasure (GDPR art. 17): request deletion of your data, subject to legal retention obligations.
- Right to data portability (GDPR art. 20): receive your data in a structured, machine-readable format.
- Right to object (GDPR art. 21): object to processing for direct marketing or based on legitimate interest.
- Right to restriction (GDPR art. 18): request temporary suspension of processing in certain cases.
- Right to withdraw consent: at any time, for processing based on consent (cookies, newsletter).
7. How to exercise your rights
To exercise any of your rights, contact our Data Protection Officer or compliance manager:
- By email: gestion@lzformation.fr (subject: "GDPR request — [your right]")
- By post: LZ Formation — Data Protection, 2 Rue Vincent Van Gogh, 78700 Conflans-Sainte-Honorine, France
We commit to responding to your request within one month of receipt (this may be extended to 3 months for complex requests, with prior notice).
If you believe your rights aren't being respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr — 3 place de Fontenoy, 75007 Paris, France.
8. Data security
LZPointsPermis implements appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction. These measures include: encrypted communications (HTTPS/TLS), access controls on our systems, hosting on secure infrastructure, and staff training on security best practices.
9. Changes to this privacy policy
LZPointsPermis reserves the right to update this policy at any time to reflect legal changes or internal practices. In the event of a substantial change, you'll be notified by email or via a notice on the website. The date of the last update is shown at the bottom of this page.
Last updated: June 2026.