Privacy policy
Last updated: 23 October 2026
Who we are
TSP FRANCE SAS (“we”), 47 rue Vivienne, 75002 Paris, France, provides the Volta TSP service and publishes this website. For any question about your personal data, or to exercise your rights, write to hello@voltatsp.com.
Our two roles
When you visit this website, write to us or use your Volta TSP account, we decide how your data is used: we are the controller.
When a hotel uses Volta TSP to settle its commissions, the hotel decides which booking and travel agency data we process for it, and we act only on its instructions, as its processor, under the data processing agreement we sign with it (Article 28 of the GDPR). Questions about that data are for the hotel; we pass on to it any request we receive.
What we process, why, and for how long
Visiting this website
- Data
- The technical data your browser sends with each request: IP address, browser type, page requested, date and time.
- Purpose
- Delivering the website and protecting it against abuse.
- Legal basis
- Our legitimate interest in running a secure website.
- Kept for
- Processed by our host to serve each page. We keep no visitor logs ourselves, and set no cookies.
Writing to us
- Data
- Your name, email address, organisation and what you write.
- Purpose
- Answering you and following up on your request.
- Legal basis
- Our legitimate interest in answering you, or steps you ask us to take before an agreement.
- Kept for
- 3 years from our last exchange.
Your Volta TSP account
- Data
- For each person a hotel or travel agency gives access: name, work email address, role, organisation, language, sign-in and two-step verification data, and a record of the actions taken in the service.
- Purpose
- Providing the service, keeping it secure, and keeping the record of each step that hotels and agencies rely on.
- Legal basis
- Performance of the contract with your organisation; our legitimate interest in security and in a reliable record.
- Kept for
- As long as the account is open. Sign-in data is deleted when the account is closed; the record of actions is kept for 5 years after that, the limitation period for claims under French law.
Invoicing hotels
- Data
- The contact and billing details on our invoices.
- Purpose
- Invoicing our fee and keeping our accounts.
- Legal basis
- Our legal obligations in accounting and tax.
- Kept for
- 10 years, as French commercial law requires.
Who receives it
Within our team, only the people whose work needs it. Outside it, the providers below, which process data for us under contracts that bind them to our instructions and to the GDPR:
- Cloudflare, Inc. (United States): hosts this website.
- Vercel Inc. (United States): hosts the Volta TSP application.
- Supabase, Inc.: database and sign-in, with our data stored in the European Union (Frankfurt, Germany).
- Fly.io, Inc. (United States): runs our application servers, in Paris.
- Stripe Payments Europe, Ltd. (Ireland): moves payments between hotels and travel agencies.
- Resend (United States): sends the service’s emails.
We never sell personal data, and we never use it for advertising.
Transfers outside the European Union
Some of these providers are based in the United States. Where data leaves the European Union, the transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, for providers certified under it, or on the European Commission’s standard contractual clauses.
Security
Data is encrypted in transit and at rest. Anyone who can approve a payment signs in with two-step verification, and every privileged action is recorded.
Your rights
You can ask to access, correct or erase your data, to restrict or object to its use, and to receive it in a portable format. You can also give instructions on what happens to your data after your death. Write to hello@voltatsp.com; we answer within one month.
If you think we have not respected your rights, you can complain to the CNIL, the French data protection authority (www.cnil.fr).
Cookies
This website sets none. See cookies.
Changes
When this policy changes, we update this page and its date.