PRIVACY POLICY UNDER GDPR REGULATION

This Privacy Policy explains how our company collects, uses, stores and discloses your personal information and data when you use our services through our websites and/or application. We know privacy policies are not usually anyone’s idea of fun reading, but this one matters. It explains what we collect, why we collect it, how we protect it and what rights you have over your data.

What Kind of Data Is Collected?

Our company may collect the following categories of data and information:

• Personal identification information, such as name, physical address, email address, phone number and similar contact details
• Images and videos
• Device model, in anonymous form
• Operating system version, in anonymous form
• Device language, in anonymous form
• Geolocation, if provided by you or enabled on your device
• Country, deducted from geolocation where applicable
• City, deducted from geolocation where applicable

In short: we collect the information we need to provide, improve and secure our services. We do not collect data just for the pleasure of filling digital cupboards.

How Is the Data Collected?

You provide our company with most of the data we collect. We collect and process personal data and information when:

• You register online or place an order for any of our products or services
• You use our website or application when cookies or similar tracking technologies are set on your device
• You submit images, videos, text or other content through our forms, features or services
• You use features that require access to your camera, gallery or profile picture
• You allow geolocation or other device-based features

Our company may also receive data and information indirectly from the following third-party sources:

• Flurry: https://www.flurry.com
• Firebase: https://www.firebase.google.com
• Countly: https://count.ly
• AppsFlyer: https://www.appsflyer.com
• Facebook App Events: https://developers.facebook.com/docs/app-events

These third-party tools may help us understand how our services are used, improve performance, detect bugs, measure engagement or support marketing and analytics activities. In other words: they help us understand what works, what does not and what needs a little love.

How Will We Use Your Data?

Our company collects your data so that we can:

• Process your order and manage your account
• Provide access to our products, services, application and website
• Send you emails with special offers on our products and services, where permitted
• Use your images and videos in the form sections you complete, so that we can better understand and process your request
• Use images, videos or text you submit to us in order to publish them on our application, where relevant and permitted
• Use images via your camera or gallery so that you can scan QR codes
• Use your image as a profile picture, if you choose to upload one
• Improve, secure, analyze and maintain our website, application and services
• Detect, prevent and respond to fraud, technical issues, security threats or harmful activities

If you agree, our company may share your data with partner companies so that they may offer you their products and services. No agreement, no marketing sharing party. When our company processes your order, it may send your data to credit and banking agencies, including third-party payment processors, in order to process payment and prevent fraudulent purchases.

How Is the Data Stored?

Our company securely stores your data in France, within Europe. Our company will keep your personal data and information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. At the end of the applicable retention period, we will delete, anonymize or securely erase your data using appropriate technical and organizational measures. Certain anonymous technical data, such as device model, operating system version or device language, may be kept in anonymous or aggregated form for analytics, performance monitoring and service improvement purposes. Personal data should not stay with us forever. It is not collecting loyalty points.

Marketing

Our company may wish to send you information about products and services of ours that we think you might like, as well as information about products and services from our partner companies. If you have agreed to receive marketing emails or communications, you may always opt out at a later date. You have the right at any time to stop our company from contacting you for marketing purposes or from sharing your data with partners working with our company. If you no longer want to be contacted for marketing purposes, you can contact us at info@vistae.travel. You can also use any unsubscribe link or opt-out mechanism provided in our communications, where available.

Data Protection Rights

Our company would like to make sure you are fully aware of your data protection rights. Every user has, where applicable, the following rights:

• The right to access: you have the right to request copies of your personal data from our company.
• The right to rectification: you have the right to request that our company correct any information you believe is inaccurate or mistaken. You also have the right to request that our company complete information you believe is incomplete.
• The right to erasure: you have the right to request that our company erase your personal data under certain conditions.
• The right to restrict processing: you have the right to request that our company restrict the processing of your personal data under certain conditions.
• The right to object to processing: you have the right to object to our company’s processing of your personal data under certain conditions.
• The right to data portability: you have the right to request that our company transfer the data we have collected to another organization or directly to you under certain conditions.

If you make a request regarding your rights, we have one month to answer you, unless applicable law provides otherwise or allows an extension. If you want to exercise any of these rights, please contact us using the following contact detail : info@vistae.travel. We promise not to make you search for the magic door. This is the contact point.

Privacy Policies of Other Websites or Third Parties

Our company’s website and/or application may contain links to other websites, platforms, services or third-party tools. Our Privacy Policy applies only to our website, application and services. If you click on a link to another website or platform, you must read their own privacy policy, terms and security rules. Once you leave our digital home, the rules of the next house apply.

Changes to Our Privacy Policy

Our company keeps its Privacy Policy under regular review and places any updates on this web page.

This Privacy Policy was last updated on 06/10/2026.

Contacting Us

If you have any questions or requests about our Privacy Policy, the data we hold about you, or if you would like to exercise one of your data protection rights, please contact us at info@vistae.travel

Contacting the Appropriate Authority

If you have any complaint or concern regarding how your data is managed, you can contact the appropriate data protection authority.

PRIVACY POLICY UNDER REGULATIONS OTHER THAN GDPR

Our company is committed to protecting individual privacy and securing the personal information made available to us when you visit or use our website and/or application. This Privacy Policy describes what information is made available to our company, how that information is used and retained, and provides information on:

• Information we receive when you provide it, visit our website, use our application or receive emails
• How this information is used
• Sharing of this information
• Data retention
• Third-party tools and sites
• Children and privacy security

If you have any question or suggestion for improving this Privacy Policy, please let us know at info@vistae.travel

Information You Give Us

You do not have to provide our company with personal information or create a user account to access certain information on our website and/or application. However, for some services, we may need personal information from you. For example, we may need information to create an account, process an order, respond to a request, provide a service or allow you to use specific features. When you visit our website, the following information may be automatically received and stored by servers:

• IP address
• Browser type
• Device information
• Operating system
• Date and time of access
• Pages visited
• Technical data relating to your use of the website and/or application

This technical information helps us keep things running properly. Even websites need a dashboard.

Third-Party Websites

Our company’s website and/or application may contain links to other websites. Our Privacy Policy applies only to our website, application and services. If you click on another website, platform or third-party service, you must read their own Privacy Policy.

How Information Is Used

If you choose to provide us with information, we may use that information to contact you, respond to your message, process your request, manage your account, provide information or deliver the services you requested. We use data you provide and automatically generated data for statistical analysis, in order to understand what information is of interest to users and to assess system performance. This allows us to make general improvements to our website, application and services. We may also use your information to detect, prevent and respond to security issues, fraud, technical problems and harmful activities on our website and/or application. In simple terms: we use data to help the service work better, safer and smarter. Not to spy on your breakfast choices.

Sharing of This Information

Information you choose to share publicly with our company may be treated as public information, depending on the feature or service used.

Our company may use a third-party analytics provider, such as Google Analytics, to analyze data from cookies. The third-party analytics provider does not receive personally identifiable information through these cookies where configured accordingly. We may also limit the provider’s ability to see your full IP address, where this option is available. Within our company, we restrict access to personally identifiable information to employees, contractors and vendors subject to confidentiality or non-disclosure requirements who require access to this information in order to perform their duties. We also use controls to limit what data they can view based on the specific needs of their position. We do not use or share your information for commercial purposes except as described in this Privacy Policy. Except as described above, we do not exchange, sell or otherwise disclose this information.

Link to External Websites and Third Parties

Our website may link to other websites created and maintained by other private and/or public organizations and individuals. When you follow a link to an external site, you are leaving our website and are subject to the external site’s privacy and security policies. Our company does not control or guarantee the accuracy, relevance, timeliness or completeness of information contained on an external site. A link is not an endorsement. It is just a door. Please check what is behind it.

Security

Our company takes reasonable precautions to protect our website, application and information. For example, we restrict access to personally identifiable information to employees, contractors and vendors subject to confidentiality or non-disclosure requirements. Our company also uses commonly used practices and technical controls to protect the information in our possession or control. These practices and controls include, but are not limited to:

• Encrypting the transfer of personal information over the internet
• Using firewalls
• Using intrusion detection systems where appropriate
• Maintaining technical controls and procedures to support data integrity
• Reviewing access rights and internal processes

We periodically review our processes and systems to verify compliance with applicable practices and to maintain an appropriate level of security for our website and/or application. We take security seriously. No system can promise magic-level protection, but we do our best to keep the doors locked and the windows closed.

Updates to This Privacy Policy

Our company may revise or update this Privacy Policy from time to time. If we make significant changes to how we handle personal information, we will post changes to the policy on our website and update the date at the end.

Updated on: 05/14/2026

COOKIE POLICY AND SIMILAR TRACKING TECHNOLOGIES

When you visit VISTAE, we may send cookies or other similar tracking technologies to your computer, smartphone, tablet or any other device you use. We use cookies and similar tracking technologies to remember user preferences, understand how users interact with our services, improve performance, support analytics and, where applicable, provide marketing or advertising features. A cookie is a file containing an identifier, usually a string of letters and numbers, that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

For further information, you can visit:

https://www.allaboutcookies.org

Cookies are used for user identification and proper assignment of historical user data collected during previous visits. Both temporary cookie files, known as session cookies, and persistent cookies may be used. Users may delete or remove cookies from their browser at any time or block cookies from being installed on their device. However, doing so may affect the operation of our services or, in some cases, prevent certain features from working properly. Cookies are helpful little tools, but they are not essential to your happiness. Some of them may, however, be essential to the website working correctly.

Targeted Advertising and Marketing Technologies

As described above, we may use your personal information and data to provide you with targeted advertisements or marketing communications we believe may be of interest to you, where permitted by applicable law and subject to your choices.

For example:

• We may use Google Analytics to help us understand how our customers use the website. You can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

• We may use a Facebook pixel on our website. Using the pixel, Facebook may collect information about users and their use of our website. The information may be used to personalize Facebook advertisements and analyze the use of our website. To find out more about the Facebook pixel and Facebook’s use of personal data generally, please see the Facebook cookie policy at https://www.facebook.com/policies/cookies/ and the Facebook privacy policy at https://www.facebook.com/about/privacy. The Facebook cookie policy includes information about controlling Facebook’s use of cookies to show you advertisements. If you are a registered Facebook user, you can adjust how advertisements are targeted by following the instructions at https://www.facebook.com/help/568137493302217.

• We may publish Google AdSense advertisements on our website, together with advertisements from advertisers and advertising networks distributed by Google. The advertisements may be personalized to reflect your interests. To help determine your interests, Google and its partners use cookies. These cookies may be used to track your previous visits to our website and your visits to other websites. You can opt out of Google’s personalized advertising by visiting https://www.google.com/settings/ads and you can opt out of third-party cookies used for personalized advertising by visiting http://www.aboutads.info. You can review Google’s privacy policy at https://policies.google.com/privacy.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s educational page at:

https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of targeted advertising by using the following links:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://adssettings.google.com/authenticated

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Types of Cookies and Tracking Technologies We May Use. We may use different types of cookies or tracking technologies while you are visiting our website and/or application:

Strictly Necessary Cookies

These cookies enable you to access and browse websites and use their essential features. Without these cookies, services such as billing, login, account access or shopping baskets cannot work properly. They are the “please keep the lights on” cookies.

Performance Cookies

These cookies collect information and data about how you use our website and/or application. The data collected can be used to optimize our website and/or application, improve performance and understand where visitors and users are coming from. These cookies do not usually collect information that identifies you personally.

Functionality Cookies

These cookies allow our website or application to remember your choices. They can be used to remember your location, preferences, language settings, display preferences or font size. They are the cookies that try to remember what you like, because asking you every time would be annoying.

Advertising and Targeting Cookies

Where applicable, these cookies may be used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit how often you see an advertisement and to help measure the effectiveness of advertising campaigns. These cookies may be placed by us or by third-party advertising networks, subject to your consent and applicable law.

How to Manage Cookies

You can set your browser not to accept cookies. You can also remove cookies from your browser. However, some of our websites and/or applications may not work properly without the use of cookies. For mobile devices, if you do not want to receive targeted advertising based on your interests from a mobile application, please check the settings of your mobile operating system. Managing cookies may feel a little technical, but it gives you more control over how your data is used. And control is always better than mystery.