logo-white
David's Bridal > Travel by David's

Privacy Notice

Worldia GROUP (hereinafter referred to as "The Tour Operator") specializes in the design of tailor-made trips for its direct clients and/or the clients of its partners.

In the course of its activities, THE TOUR OPERATOR may collect and process personal data within the meaning of the General Data Protection Regulation (GDPR) 2016/679 of April 27, 2016, and the French Data Protection Act (Law No. 78-17 of January 6, 1978), as amended by Law No. 2018-493 of June 20, 2018, Order No. 2018-1125 of December 12, 2018, and Law No. 2024-449 of May 21, 2024 (hereinafter the "Data Protection Act").

The present Privacy Policy (hereinafter the "Policy") has therefore been written to allow customers (hereinafter "You**" or a "User**") to understand what data is collected, for what purposes, and what their rights are in this respect.

This Privacy Policy is posted on every page of the THE TOUR OPERATOR Web site accessible at travel.davidsbridal.com (the "Site") and may also be downloaded in PDF format for future reference.

This Policy may be amended from time to time. Any modification will be implemented after having informed You, for example by means of a banner on the Site and/or by any other means at THE TOUR OPERATOR's disposal (e.g., by e-mail using the e-mail address provided in your User Area).

Any new version of this Policy will apply only to use of the Web Site after its entry into force.


Article 1- Who is responsible for the processing of data implemented on the Site?

The person in charge of the processing of personal data implemented in accordance with this Privacy Policy is Worldia GROUP, a company with a capital of 80,716.80, identified under the number 751 602 285 RCS Paris, whose registered office is located at 52 boulevard de Sébastopol 75003 Paris, represented by its President (hereinafter "THE TOUR OPERATOR" or "We").


Article 2 - When is personal data collected and processed by THE TOUR OPERATOR?

THE TOUR OPERATOR offers its customers the opportunity to design and book customized travel packages through the Web Site.

The Web Site offers both suggested itineraries and a unique tool that allows Users to create a trip by selecting the departure and return dates, the number of travelers and rooms required, then add a hotel, one or more activities, a flight, a rental car, a means of transportation, etc.

The design of the trip does not involve the collection or processing of personal data. It is thus possible to select the different stages of a trip without having to identify themselves beforehand.

On the other hand, the registration of the selected contents and/or the placing of an order requires the creation of a User Account and the provision of personal data relating to the various persons who will participate in the trip.

In this context, THE TOUR OPERATOR will collect and process personal data in accordance with the meaning of the RGPD and the French Data Protection Act in several situations:

  • when registering on the Site**: THE TOUR OPERATOR may collect certain information when creating a User Account;

  • when requesting a quote**: if the User wishes to be contacted by one of THE TOUR OPERATOR's destination experts must provide THE TOUR OPERATOR with certain personal data such as last name, first name and contact information (telephone number, email address, etc.);

  • when ordering a trip**: the User who wishes to order a trip must provide THE TOUR OPERATOR with certain personal information about each person who is to participate in the when ordering a trip;

  • when communicating between THE TOUR OPERATOR and Users**: any exchange of communication between a User and THE TOUR OPERATOR, including, without limitation, through the communication interface of the Web Site, generally contains personal data that is collected and processed by THE TOUR OPERATOR.


Article 3 - What personal data is collected and processed by THE TOUR OPERATOR?

In accordance with the principle of "data minimization" set forth in the GDPR, THE TOUR OPERATOR will only collect and process personal data that is strictly necessary for the ordering of travel by Users and the management of tne relationship between THE TOUR OPERATOR and the User.

The data collected and processed by THE TOUR OPERATOR is as follows:

  • when registering on the Web site**: When registering on the Web site, User must enter his/her first name, last name and e-mail address;

  • when requesting a quote**: when requesting to be contacted again, the User must enter his first name, last name, e-mail address and telephone;

  • when ordering a trip**: in order to order a trip on the Site, the User must enter the first name, last name and date of birth of each participant, as well as a cell phone number. The User may also provide additional information (for example the name of the driver of a rental car, flight times and numbers, specific requests and wishes);

  • when browsing the Site**: any connection to the Site and any browsing on the Site implies the collection of certain personal data concerning You, as well as their processing. This data is collected automatically. It generally consists of: the IP address (Internet of the computer terminal used), the date and time of connection and the connection and the navigation software used. This data is used to personalize your navigation on the Site, to guarantee the correct establishment connection, to evaluate the security of the system and to determine statistics of use.


Article 4 - On what legal basis is personal data collected and processed?

THE TOUR OPERATOR does not collect or process personal data in any way that is unlawful. All personal data collected and processed by THE TOUR OPERATOR is collected and processed under a legal basis duly identified in accordance with Article 6 of the GDPR:

  • the contract**: personal data collected by THE TOUR OPERATOR in the context of each THE TOUR OPERATOR in the context of each travel order is necessary for the performance of the contract to which the User is a party;

  • Consent**: When a User provides personal information about other travel participants, the personal data relating to the other participants in the trip, he/she must ensure that the consent of the other travel participants, and where a User chooses to communicate with THE TOUR OPERATOR, the User consents to the collection and processing of any personal data that he/she chooses to provide to us;

  • THE TOUR OPERATOR's legitimate interest**: certain data collected is necessary for the legitimate purposes that We pursue, in particular in relation to the management of the Web Site, it being specified that neither the collection nor the processing of such data is likely to infringe on the interests or fundamental freedoms that are yours.


Article 5 - What are the purposes of collecting and processing personal data?

THE TOUR OPERATOR will only use the personal data collected under the above-described circumstances for specific and legitimate purposes, which are strictly related to the fulfillment of Users' orders and, more broadly, the operation of the Site.

Broadly speaking, these purposes are as follows:

  • to enable the execution of travel orders**: the collection and processing of personal data of a User and of the participants in a trip are necessary to allow the execution of the order and the various objects and activities that are the subject of the order (such as flight reservations, hotel reservations, etc.);

  • to enable THE TOUR OPERATOR to correspond with you**: this data may be processed for the purposes of communication between THE TOUR OPERATOR and You;

  • to enable THE TOUR OPERATOR to administer the Site**: THE TOUR OPERATOR analyzes this data (either directly or through third parties with whom we contract) to compile usage statistics (for example, to understand which pages are most popular) and to improve the Site by enhancing its features and functionality. We may also use the address of your terminal in order to fight against certain cases of fraud, including identity theft or theft of bank details.


Article 6 - To whom do we disclose the information we collect?

THE TOUR OPERATOR collects personal information about you primarily for its own purposes. However, in its capacity as a travel agent THE TOUR OPERATOR will disclose your personal information to third parties for the purposes described in section 5 above. These third parties are listed below:

  • travel service providers**: THE TOUR OPERATOR will disclose the personal data of all participants in a trip to the various service providers who are responsible for providing services in connection with the travel services, such as the selected airline, hotel operators and other selected airline, the operators of the hotels in which a room has been booked or any of the service providers who provide the activities selected;

  • our service providers or subcontractors**: THE TOUR OPERATOR may contract with third party service providers with third party service providers to perform certain tasks in connection with the proper operation of the Site. These include, but are not limited to hosting company, Google Inc. All of these parties are duly mandated by THE TOUR OPERATOR and are bound by a written contract not to disclose or use any information about You for any other purpose. They are contractually bound by confidentiality and security obligations at least equivalent to those set forth in this Privacy Policy;

  • our partners**: THE TOUR OPERATOR may operate certain Web sites on a "white-label" basis, which means that it provides travel ordering services for third parties under the brand name of the third party. Depending on THE TOUR OPERATOR may transmit User data to its partners on a case-by-case basis. The contract with such partner will contain confidentiality and security obligations at least equivalent to those set forth in this Privacy Policy;

  • authorities**: THE TOUR OPERATOR shall cooperate with state, administrative or judicial, including supervisory authorities for enforcing the GDPR and the Data Protection Act. Therefore, We reserve the right to disclose any information collected in the course of Our activities to the competent authorities when THE TOUR OPERATOR is required to do so.

THE TOUR OPERATOR does not share your personal information with third parties for the purpose of any third party for marketing or other purposes.


Article 7 - How long does THE TOUR OPERATOR keep your personal information?

THE TOUR OPERATOR will only retain your personal information in an identifiable form for as long as is identifiable form for only as long as is necessary for the fulfillment of the purpose of the processing concerned. Thus, in general terms:

  • data relating to a trip** is retained from the time the trip is registered in your account and/or the placing of the order until the end of the end of the trip; they are then archived (and can no longer be modified) and accessible in your User Space as long as it remains active;

  • data relating to a User Account**: they are kept as long as the said Account is as long as the aforementioned Account is active (i.e. that You connect to it) and until five (5) years after the last connection;

  • certain data will be retained for a longer period of time** when required by law where THE TOUR OPERATOR is required to do so by law. This includes, but is not limited to, all billing data;

  • automatically collected data** relating to your browsing session on the Site is deleted automatically after one (1) year.

The other data, in particular the statistics, are kept in an anonymous form that does not allow Your identification.


Article 8 - What are Your rights with respect to Your personal data?

THE TOUR OPERATOR respects the rights granted to You by the GDPR and French law.

Thus, You have the right to request access to the personal data concerning You held by THE TOUR OPERATOR, as well as the rectification or deletion of such data or the limitation of the processing of personal data concerning You. You also have the right to object to the processing of such data.

In addition, You have the right to data portability, which allows You to receive the personal data You have provided to THE TOUR OPERATOR in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.

However, in the event of a limitation of processing or an objection to processing, THE TOUR OPERATOR may no longer be able to provide You with access to your User Account. In addition, if You exercise your right to restrict, object to, or limit processing, THE TOUR OPERATOR may no longer be able to provide You with the travel services that You have ordered. However, THE TOUR OPERATOR hereby advises You that certain information may be retained by THE TOUR OPERATOR in order to comply with its legal obligations.

You may also set up directives regarding the retention, deletion, and disposal of Your personal information after Your death. In the absence of such directives, Your personal data will be kept in accordance with the paragraphs above, unless Your heirs request deletion.

To exercise these rights, You may send an e-mail to [email protected].

Finally, You have the right to lodge a complaint at any time with the competent supervisory authority for data protection. To do so, You can contact the competent supervisory authority for data protection in the region where You reside or, in any case, the CNIL for France: www.cnil.fr.


Article 9 - How are Your personal data protected?

In its capacity as data controller, THE TOUR OPERATOR is committed to implementing and maintaining, at its own expense, measures, both technical and organizational, for the processing and security of personal data in accordance with Articles 32 to 34 of the GDPR and Article 121 of the French Data Protection Act.

THE TOUR OPERATOR ensures that these technical and organizational measures are at all times reasonable and adapted to the particular risks presented by its processing activities, having regard to the nature of the information collected and processed, in particular to protect Your personal data against destruction, loss, modification, unauthorized disclosure, accidental or unlawful disclosure.

In line with the latest guidelines from the CNIL's 2024 edition of the practice guide for the security of personal data, THE TOUR OPERATOR has implemented the following measures:

  • All personal data is stored on a private cluster within the Google Cloud Platform, ensuring compliance with the latest cloud security standards.

  • Your password is encrypted using advanced encryption standards and is not accessible by anyone but you.

  • Administrative access to the computer servers is limited to certain persons duly identified to Our hosting provider, with multi-factor authentication required for access.

With respect to organizational measures:

  • Only certain members of THE TOUR OPERATOR's staff, as listed below, are authorized to have access to Your personal data. Access is granted based on the principle of least privilege.

  • Access to data is protected by user names and passwords, with regular audits and monitoring to ensure compliance with security protocols.

  • THE TOUR OPERATOR maintains, updates, and retains complete and accurate records of personal data processing activities. These records detail its processing activities and are reviewed periodically to ensure ongoing compliance with data protection regulations.

These measures are designed to ensure the highest level of security for Your personal data, in accordance with the latest regulatory requirements and industry best practices.

Article 10 - Are there any international data transfers?

As a matter of principle, personal data collected and processed by THE TOUR OPERATOR is collected and processed within the European Union. Data hosted by Google Cloud Platform is located in the European Union.

However, depending on the trip You book, Your personal data and the personal data of any person participating in the trip may be transmitted to various service providers located abroad, including countries that do not offer the same level of protection for personal data as that afforded within the European Union.

In accordance with Article 49 of the GDPR, You declare that You are informed and consent to these transfers of personal data, being specified that they are essential for the proper execution of your travel order. For example, if You book a hotel room in the United States, We will necessarily have to transmit Your name and contact information to the operator of this hotel.

THE TOUR OPERATOR ensures that any transfer of personal data outside the European Union is carried out in compliance with applicable data protection laws and regulations, and that appropriate safeguards are in place to protect Your personal data.


Article 11 - For more information

For more information about how THE TOUR OPERATOR collects and processes personal information about You, please send an e-mail to the following address: [email protected].


Last Updated: July 24th, 2025