USER PRIVACY POLICY
I. PRIVACY POLICY
The processing of personal data covered by this Privacy Policy is subject to French law, and in particular to the Loi Informatique et Libertés of January 6, 1978 in its amended versions, and to EU Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD), hereinafter referred to as the “Personal Data Regulation”.
We first present the principles of collection of Data from Users of the site and then our commitment concerning the policy of security and protection of this data.
By using our Services on the Platform, the User acknowledges that he/she is aware of and understands the present Privacy Policy and the Personal Data Regulations, as well as our information collection and processing practices.
This Privacy Policy was last updated on 01/11/2022. We may modify this Privacy Policy from time to time. We therefore advise the User to consult this document regularly, in particular each time he/she uses the Services.
Use of the www.vaison-ventoux-tourisme.com website (hereinafter referred to as “the site”) implies unreserved acceptance of the present Privacy Policy and understanding of the Personal Data Regulations by any User wishing to benefit from the Services delivered by the latter, the latest version being authoritative.
1. Data controller
In the course of our business, we collect and process Personal Data on our own behalf.
In this context, we determine the purposes and means of processing Personal Data. Within the meaning of Article 26 of the Personal Data Regulation (Regulation EU 2016/679 of the European Parliament and of the Council of April 27, 2016).
2. Who does our Data protection policy apply to?
This Privacy Policy applies to Users to accurately describe our practices and obligations regarding the collection, use and disclosure of Data.
So that Users can browse the site in complete confidence, we undertake to process Data in accordance with the Personal Data Regulations.
3. Origin of Personal Data collected
When using the Platform, we only collect and process Personal Data that the User provides to us through the site.
4. Categories of Data processed
The Personal Data we collect may include, but is not limited to:
Name and surname(s) ;
e-mail address; telephone number
Telephone number;
Address.
Within the meaning of Article 5 of the Personal Data Regulation (Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016), we undertake to process Personal Data that is adequate, relevant and limited to what is necessary with regard to the purposes for which it is processed. This Personal Data will be collected for specified, explicit and legitimate purposes.
In accordance with article 13 of the Personal Data Regulation, we undertake to provide the User, prior to collection, with all information concerning collection and processing. This is done via a hypertext link to this Privacy Policy.
User Data we collect automatically when the User uses our Services
To enable access to the Services offered by the site, we collect User Data in order to analyze and understand behavior and interactions on the Platform (audience measurement, bounce rate analysis, number of pages viewed, for example). The purpose of this use is to perfect our approach, to define and understand needs and expectations, and to target our efforts. All this information is processed anonymously using cookies placed on the Platform.
For more information on the use of cookies, please consult our Cookies policy.
5. Data use and legal basis
Processing of Data on the basis of the data subject’s consent (Article 6 a. of the RGPD)
We process Data to enable the use of the Services offered by the site, once the User consents, for the following purposes:
Buying or reserving an electronic ticket as well as its management and processing ;
To be alerted to new offers, new activities during the stay;
Subscribe to the Partner’s newsletter;
Use of Data on the basis of compliance with our legal obligations (Article 6 c. of the RGPD)
In the event that we are required to do so by law, we may be able to transmit some of your Personal Data to the competent courts.
Use of Data on the basis of our legitimate interest (Article 6 f. of the RGPD)
Where we have a legitimate interest, either as part of our marketing activities or as part of the practical performance of our business activities, we collect and process Data for the following purposes:
Carrying out studies, tests and analyses (including customer or market research) with a view to improving our solutions, our internal procedures and our overall Service;
Management of possible disputes;
Preventing and combating fraud and abuse.
6. Information relating to minors
Our Services and the use of the Platform are intended for the general public. The processing of Personal Data covered by the present Personal Data Policy is subject to French law, and in particular to the “Informatique et Libertés” law, which requires the joint consent of the child and the holder of parental authority under the age of 15.
If we receive Personal Data from a person under 15, we delete or destroy this information as soon as reasonably possible.
7. Data retention period
Data is retained for a period strictly necessary for the purposes for which it is to be used. The retention period may vary depending on the purpose of the processing.
Categories of Data
Retention period in active database
User e-mail address, surname, first name(s), telephone number,
As stipulated by the CNIL, we delete all personal data of persons who have been inactive for 3 years.
It will then be anonymized, stored and used for statistical purposes.
Cookies
Every 13 months, we will ask for your consent to process cookies.
Data likely to be the subject of a judicial requisition (connection data, identity, contact details)
12 months from the date of collection.
Data may also be kept longer for other purposes, in particular to comply with our legal obligations (e.g. accounting and tax obligations). Access to archived Data is limited and restricted to competent persons.
8. Security and storage of Data and external links
Physical, logical, administrative and organizational measures, adapted to the degree of sensitivity of the Data, are in place to ensure the integrity and confidentiality of the Data and to protect it against malicious intrusion, loss, alteration or disclosure to unauthorized third parties.
9. User rights
Exercising your rights
You may submit a written request to prevent us from disclosing your Data to third parties.
Your right of access and rectification
In accordance with the Data Protection Act, you have the right to obtain confirmation that your Data is being processed (or not) and the right to access it, if necessary, and to request a copy.
You also have the right to request the completion and/or rectification of your personal data.
Your right to object to and delete your Data
This is your right to object at any time and without justification to the processing of your Data.
Your right to limit processing
In the event of a dispute concerning the processing of your Data, you may request that the processing of your Data be suspended for the time required to investigate the dispute.
Your right to Data portability
You may request that the Data you have provided be transferred to another data controller in a structured, commonly used and readable format, within the limits set by the Personal Data Regulation.
Your right not to be subject to a decision based on automated processing
In the course of our business, we may automatically process your Data. You have the right not to be subject to a decision based exclusively on automated processing that produces legal effects concerning or affecting you, except where such a decision is necessary for the conclusion or performance of a contract, or is authorized by law.
Your right to lodge a complaint with the CNIL
You can take your complaint to the French supervisory authority, the CNIL (Commission Nationale de l’Informatique et des Libertés) by filing an action.
Your right to give instructions in the event of death
You have the right to give instructions concerning the fate of your Data after your death.
No charge will be levied for exercising the above rights to access your Personal Data. However, any unjustified, repeated or excessive request will be thoroughly investigated and we may charge you a reasonable fee.
