Privacy Policy

As data controller, YUPWEGO SAS, whose registered office is at 2, place de Francfort, 69003 Lyon, France, registered with the Lyon Trade and Companies Register under number 842 336 349 (hereinafter “YUPWEGO” or “we”), takes the protection of your personal data very seriously.

Under the applicable regulations, the data controller is the organisation that determines the purposes and means of the processing.

We process your personal data confidentially and in accordance with data protection law, in particular the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”).

This privacy policy explains how, to what extent and for what purposes we process the personal data of people using the website available at https://www.yupwego.com/ and the YUPWEGO application (hereinafter the “Site” and the “Application”).

Version number: 1.1

Date: 14 October 2026

Purpose of this privacy policy

This privacy policy concerns the protection of personal data relating to the use of the Site and the Application. Data is personal if it can be attributed to an identified or identifiable natural person. This includes information such as names, addresses, email addresses and telephone numbers.

Collection, processing and use of personal data at your request

You can use the Site and the Application without being required to provide personal data.

If you refuse to provide all or part of your personal data, you may not be able to use some features of the Site. Apart from that, there will be no consequences for you.

Personal data of Site users is always collected on a voluntary basis, except in the cases described below. We only collect the data strictly necessary for the purposes pursued.

Please note that data transmitted over the Internet (for example by email) may be subject to security breaches. Complete protection of data against access by third parties is not possible. You declare that you are fully aware of the characteristics of the Internet and the constraints of its use, in particular the impossibility of guaranteeing the integrity, availability and confidentiality of all data passing through it.

We collect, process and use the personal data you provide when registering an account to subscribe to our services, to the extent necessary in each case and for the following purposes:

Purpose 1. Registration and performance of the contract

This is the personal data you provide when creating an account, such as your name, email address, landline number, mobile number, postal address and the data provided depending on the service you use (first name, last name, date of birth, country of residence, email, telephone, bank card number).

We also collect, process and use:

  • transaction data concerning your activities on the Site and the Application (for example, subscribing to the service),
  • billing data,
  • data collected in discussions and correspondence with YUPWEGO on the Site or by email, fax and post.

If you voluntarily provide additional personal data when registering your member account, YUPWEGO will also use this data to provide the Site and the Application.

Purpose 2. Answering requests for information and support

If you provide personal data to contact us for information or support, we will use this data because we need it to answer you.

This may include your last name, first name, email address and telephone number.

Purpose 3. Use of the Forum

We provide users of the Site and the Application with a discussion forum to exchange information with other users.

This may include data about your trips and the photos and videos you share.

Purpose 4. Marketing and prospecting

YUPWEGO may process and use your personal data for marketing purposes, for example to send you emails with general or promotional information (newsletter), on the basis of the consent you have given us.

You can withdraw your consent to the processing of your personal data at any time.

If you want to stop receiving emails from us, you can follow the instructions in any of the emails you receive from us.

This withdraws your consent to receiving any future email of this kind from us.

You can also object to the use of your personal data insofar as we use it for marketing purposes.

To exercise your rights, you can send an email to rgpd@yupwego.com. For more information about your rights, please see the “Rights of data subjects” section of this policy.

Purpose 5. Information transmitted for online payment

All payments made on the Site or the Application are processed by SystemPay, an online payment operator that complies with the GDPR and applicable banking regulations, acting as YUPWEGO’s processor. It acts solely on YUPWEGO’s instructions to give you access to our services.

We transmit your personal data to this processor to handle your payments when you use the Site and the Application.

Purpose 6. Statistical data

We may transmit some of the data collected on the Site to third parties, anonymously and in aggregate, for statistical purposes.

The data transmitted in this way does not identify you personally, as it is irreversibly anonymised.

Processing of data to enable use of the Site

When you visit the Site, we collect the data necessary for you to use it.

This includes data about the start, end and subject of your use of the Site, as well as any identification data (for example, your login details when you sign in to a secure area).

This data is used to provide and design the service according to users’ preferences. It is always deleted as soon as it is no longer needed and there is no further obligation to keep it.

Processing of data for the Application

When you download data, use our Application or access our Site optimised for mobile devices, we may collect information about you and your mobile device as described above in this policy.

This may include location data, for example if you allow it in our Application. To offer you a relevant service, we only need to know your country of residence and the countries involved in your trip.

You can control or disable location services from the Settings menu of most mobile devices.

If you have questions about disabling location services on your device, we recommend that you contact your mobile service provider or the manufacturer of your device.

If we collect other personal data transferred as a result of your use of our Application or your access to our Site from a mobile device, we will ask for your express consent beforehand.

Data collected from other sources

We may obtain additional information about you from third parties to complete our account information, to the extent permitted by law and under the conditions defined by the GDPR. This includes demographic and browsing data used to improve our services.

Cookies

A cookie is a small file placed on your device (computer, phone, tablet) when you visit the Site. Cookies that are not essential to the operation of the Site are only placed with your consent.

Your choice

On your first visit, a banner lets you accept or refuse these cookies, or choose purpose by purpose: audience measurement, advertising. Refusing is as easy as accepting and does not prevent you from using the Site. Until you have made a choice, these cookies are not placed.

Your choice is kept for six months, after which you are asked again. You can change it or withdraw your consent at any time with the “Manage cookies” link at the bottom of every page: the cookies of the withdrawn purpose are then deleted from the Site.

Cookies placed by YUPWEGO

Placed without your consent:

Cookie Purpose Duration
astro-session Keep your quote and your subscription from one page to the next. Until you close your browser
yw_consent Keep your cookie choice. 6 months
ywg-affiliate Remember the partner, campaign or website that brought you to the Site (link parameters, referring site, landing page), to pay our partners and find out which campaigns lead to subscriptions. 30 days

Placed only with your consent to advertising:

Cookie Purpose Duration
ywg-ads-click Keep the identifier of your last click on a Google Ads ad, to measure the subscriptions that come from our ads. 90 days
_fbc Keep the identifier of your last click on a Facebook or Instagram ad, to measure the subscriptions that come from our advertising. 90 days

If you take out a subscription, the information in ywg-affiliate, ywg-ads-click and _fbc is recorded with it. Click identifiers may be sent to Google and Meta to measure the effectiveness of our ads.

Our payment providers (SystemPay, PayPal) also place, at the time of payment, the cookies needed for its security.

Our partners’ tools

These tools only place cookies with your consent for the purpose concerned. Their retention period is given in each provider’s privacy policy.

  • Audience measurement: Google Analytics, Google Ireland Limited (_ga cookies), privacy policy.
  • Advertising:
    • Google Ads, Google Ireland Limited (_gcl cookies), privacy policy;
    • Meta (Facebook, Instagram), Meta Platforms Ireland Limited (_fbp and _fbc cookies), privacy policy;
    • TikTok, TikTok Technology Limited (_ttp and ttcsid cookies), privacy policy;
    • ChatGPT Ads, OpenAI Ireland Limited (__oppref cookie), privacy policy.

The processing of your personal information is justified as follows:

Whenever we need your consent to process your personal information, the processing is based on Article 6(1)(a) GDPR. This article describes the cases in which processing may lawfully be carried out.

If the processing of your personal data is necessary for the performance of a contract between you and YUPWEGO, or to take pre-contractual steps at your request, it is based on Article 6(1)(b) GDPR. If this data is not processed, YUPWEGO will not be able to perform the contract with you.

Where the processing is necessary for us to comply with a legal obligation, we process your information on the basis of Article 6(1)(c) GDPR, for example in the field of employment law.

And where the processing is necessary for the purposes of YUPWEGO’s legitimate interests, it is carried out on the basis of Article 6(1)(f) GDPR, for example to detect fraud.

Social networks

The Site contains links to social networks (Facebook, Instagram, Twitter). These social networks are operated exclusively by third parties. If you follow these links, information may be transmitted to these third parties, which you expressly accept by clicking the links. You can read the terms of these networks, which explain how they use their users’ personal data and how to control the personal data visible there.

Transfer of personal data to third parties

Your personal data will only be transferred to third parties if the law allows it or if you have given your prior consent, to answer your request, provide the service or for legitimate business purposes.

In particular, we will not sell your data to third parties or market it in any other way.

We will only disclose your data to government authorities as required by law or following an official order or court decision.

We have required our employees and partners to keep it confidential and to comply with data protection rules.

YUPWEGO shares personal information in the following cases:

We may share your information with suppliers or third parties that provide services for YUPWEGO on its instructions as processors (host of the Site and the Application, online payment operator), or that work in partnership with YUPWEGO to provide you with the service (insurance company).

Transfer of data to countries outside the EU

To the extent necessary to set up or perform the contract between you and YUPWEGO, for example to provide medical repatriation, arrange hospital treatment, trigger legal expenses insurance or host the data.

In this respect, we ensure, in accordance with the GDPR, that the recipient of the data guarantees an appropriate and adequate level of data protection and that no other interest worthy of protection conflicts with the transfer.

In the absence of an adequacy decision and other safeguards under the GDPR (for example, binding corporate rules on transfers outside the EEA), YUPWEGO relies on the derogations provided for in Article 49 GDPR.

In particular, we only collect and transfer personal data to countries outside the EU:

  • with your explicit consent;
  • to perform a contract with you;
  • in a way that does not override your rights and freedoms.

If this data is not processed and transferred, YUPWEGO will not be able to perform the contract with you, or you will not have access to all the benefits and features associated with your transaction.

We strive to apply appropriate safeguards to protect the confidentiality and security of your personal data and to use it only in accordance with your relationship with YUPWEGO and the practices described in this privacy policy. If you have any questions about this, please contact our privacy team at rgpd@yupwego.com.

Data deletion

We keep data for the whole duration of your business relationship with us and as otherwise required by applicable law. Personal data will not be kept longer than necessary for the purposes for which it is processed. We will keep your personal data for as long as you have a member account or need our services, so that we can provide them to you.

When you inform us that you withdraw your consent to the processing of your personal data, all personal data received and stored is deleted, unless we are required to keep it by law or to comply with our regulatory obligations. You will be informed if this is the case.

In that case, we will only keep this personal data for as long as necessary.

To find out more about where and for how long your personal data is kept, please contact our privacy team at rgpd@yupwego.com.

Data security

YUPWEGO has taken the technical and organisational measures necessary to protect the personal data you have provided against loss, destruction, manipulation and unauthorised access.

YUPWEGO is committed to maintaining the security of your data, in particular its confidentiality, integrity and availability.

Our employees, contractors and everyone involved in processing the data, in particular any processor and partner, are required to comply with data protection law, in particular the GDPR, and to treat personal data confidentially. Our employees and contractors ensure compliance with all data protection processes in place within YUPWEGO.

Rights of data subjects

The GDPR provides data subjects with certain rights.

If you want to confirm that YUPWEGO processes your personal data, access the personal data YUPWEGO may hold about you, or if you have other questions, please contact us at rgpd@yupwego.com.

You can also request information about:

  • the purpose of the processing;
  • the categories of personal data concerned;
  • who other than YUPWEGO may have received the data from us (the recipients or categories of recipients);
  • the source of the information (if you did not provide it directly to YUPWEGO);
  • where the personal data is stored and for how long it will be kept (if this is not possible, we will tell you the criteria used to determine that period).

You also have the right to correct (rectify) the personal data we hold about you if it is inaccurate.

You can ask us to delete this data or to stop processing it, subject to certain exceptions.

You can also ask for your personal data to be completed or updated, made anonymous, or for any data held in breach of the law to be blocked, and you can object to its processing for any legitimate reason.

You can withdraw your consent to the processing of personal data, or to its further processing by us, at any time.

You can also ask YUPWEGO to stop using your data for direct marketing. You also have the right to lodge a complaint with the competent data protection authority if you have concerns about how YUPWEGO processes your personal data. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).

Where technically possible, we will provide you with your personal data at your request, or transmit it directly to another data controller. You have the right to receive your personal information in a structured, standard format.

No automated individual decision-making

We do not use your personal data for automated individual decisions.

How to contact us

Our full contact details as data controller are given in the Site’s legal notice.

If you want to exercise the rights listed in the “Rights of data subjects” section, or if you have questions about our privacy policy, you can write to:

YUPWEGO SAS, Data Protection Officer, 2, place de Francfort, 69003 Lyon, FRANCE

You can also contact our Data Protection Officer at rgpd@yupwego.com.

Changes to this privacy policy

From time to time, we may need to update or change this privacy policy to reflect changes to our business practices, data collection practices or organisation.

We reserve the right to change this privacy policy at any time, for any reason, without notice, other than by posting the amended privacy policy on the Site or, if you have given us your email address, by sending you an email about it. We strongly recommend that you check the Site regularly, referring to the date of the last change shown at the top of the page.