1. Winter home
  2. Data protection policy

Data protection policy

Scope of application

This Data Protection Policy applies to all processing of personal data, implemented by the Office de Tourisme des Saisies, as Data Controller, within the European Union, relating to external persons, in particular customers, prospective customers, partners, employees, candidates for recruitment, suppliers, service providers, Internet users, etc.

Definitions

Personal data
Any data enabling a natural person to be identified directly or indirectly.

Data processing
Operations carried out on personal data (collection, recording, use or transmission).

Data controller
Legal entity responsible for determining the purposes of the processing and the means used.

Sub-processor
Legal entity that processes personal data on behalf of the data controller.

Data collected

The Office de Tourisme des Saisies takes care to collect and process personal data that is relevant, adequate, not excessive and strictly necessary to achieve the purposes that have been previously determined. The Office de Tourisme des Saisies takes all necessary steps to ensure that your data is accurate, complete and, if necessary, updated.
The Office de Tourisme des Saisies undertakes to obtain the consent of the persons concerned whenever this is required and to inform them of the processing of their data.

We process personal data concerning you that you may communicate to us, in particular during the following operations:

  • When you join the salaried team of the Office de Tourisme des Saisies
  • When you conclude a contract with us (in particular a purchase of an activity or a reservation of a
    stay)
  • When you use our services
  • When you browse our site
  • When you provide us with products or services
  • When you take part in events organised by the Office de Tourisme des Saisies
  • When you agree to receive our newsletters and other commercial information from us
  • When you wish to apply for a job at the Office de Tourisme des Saisies
  • When you wish to contact us with questions, suggestions or complaints
  • When you take part in competitions organised by the Tourist Office or respond to a satisfaction survey.
  • In this context, the Office de Tourisme des Saisies may collect and process the following personal data:

Your identity: first name, surname, title, date and place of birth
Your contact details: postal address, email address, telephone number
Your identifiers (if you create an account as part of a booking): login
Your transactions and payment information: details of the transaction, bank cheque, bank details, etc.
Your application information: CV, covering letter, interview notes, etc.
Your technical and browsing information on our sites (please see the section below on cookies)
Any other information that you directly and voluntarily provide to us as part of the use of our site, services and contracts that we may have concluded with you.
The compulsory nature of the information you must provide is generally indicated by an asterisk at the time of data collection on the corresponding forms. Any failure to reply or any reply deemed abnormal by the Office de Tourisme des Saisies may result in the Office de Tourisme des Saisies refusing to take your request into account.

The Office de Tourisme des Saisies may ask you to provide certain personal data for canvassing/marketing communication purposes. You can explicitly and freely consent or not to the collection and processing of your personal data for these purposes by ticking a box. You can then easily withdraw your consent at any time by unsubscribing from newsletters.

You undertake to ensure that any personal data you provide to the Office de Tourisme des Saisies is up to date, accurate, complete and unambiguous.

In accordance with the French Data Protection Act, the Office de Tourisme des Saisies undertakes to inform you about the processing of your personal data.

The Office de Tourisme des Saisies therefore informs you, in a clear manner, at the time of each collection of your data, in particular:

the identity of the data controller (this is the legal entity of the Office de Tourisme des Saisies
responsible for processing your data)
the purpose for which your data is collected
whether replies are optional or compulsory
the recipients of the data
the existence of and procedures for exercising rights of query, access, rectification and opposition
with regard to all data concerning you

Purpose of data collection

The Office de Tourisme des Saisies undertakes to collect and process your personal data fairly and lawfully. The processing carried out by the Office de Tourisme des Saisies is for explicit, legitimate and specific purposes.

In particular, your data may be processed for the following purposes:

  • To enable you to book an activity or accommodation
    In this context, the legal basis for processing is the performance of the contract between the Office de Tourisme des Saisies and you.
  • To manage your customer or professional accounts and your use of our services.
    In this context, the legal basis for processing is either the performance of the contract between the Office de Tourisme des Saisies and you, or compliance with legal obligations in the case of the collection of tourist tax.
  • To process your transactions and payments
    In this context, the legal basis for processing is either the performance of the contract between the Office de Tourisme des Saisies and you when it comes to managing your transactions and payments, or compliance with legal obligations if the Office de Tourisme des Saisies implements means of combating fraud.
  • To manage the contractual relationship with our employees, customers, service providers and partners (management of the contract, orders, deliveries, invoices, public relations, etc.).
    In this context, the legal basis for processing is the performance of the contract between the Office de Tourisme des Saisies and you.
  • To send you commercial information about us
    In this context, the processing is based on your consent to receive these offers, as well as on the legitimate interest of the Office de Tourisme des Saisies, more specifically its economic interest in sending you personalised offers.
  • To analyse your browsing on our sites and improve their use (please see the section below on cookies).
    In this context, the legal basis for processing is the legitimate interest of the Office de Tourisme des Saisies, more specifically its economic interest in constantly improving its site and its services and in understanding your needs in order to meet your expectations.
  • To answer your questions and complaints
    In this context, the legal basis for processing is the legitimate interest of the Office de Tourisme des Saisies in communicating clearly with you and understanding your needs and expectations in order to improve its services.
    To monitor your application
    In this context, the legal basis for processing is the legitimate interest of the Office de Tourisme des Saisies, more specifically its interest in responding to your application requests and finding profiles suitable for the positions available within the Office de Tourisme des Saisies.

The Office de Tourisme des Saisies only communicates your personal data to authorised and specified recipients, in accordance with the provisions of the applicable regulations.

In particular, the Office de Tourisme des Saisies may give access to your personal data to its partners as well as to any third party service providers, acting as subcontractors, to carry out services relating to the services and IT applications of the Office de Tourisme des Saisies (in particular hosting, storage, analysis, data processing, database management or IT maintenance services).

These third party service providers, who only act on the instructions of the Office de Tourisme des Saisies, will only have access to your personal data in order to carry out the purposes for which the data was collected and will be bound by the same security and confidentiality obligations as the Office de Tourisme des Saisies.

Data retention

The Office de Tourisme des Saisies retains your personal data for as long as is necessary for the purposes for which it was collected and processed. The Office de Tourisme des Saisies may, however, keep your personal data for a longer period in order to comply with legal obligations and in particular applicable limitation periods.

In order to define an appropriate data retention period, the Office de Tourisme des Saisies uses the following criteria in particular:

  • Data relating to your contract, your payments and the use of our services are kept for the entire duration of the contractual relationship, then 3 years from the last exchange you have had with us and carried out on your initiative. After the aforementioned periods, your data will be purely deleted or anonymised.
  • Data relating to the management of the relationship with our service providers and partners is kept for the entire duration of the contractual relationship.
  • Where you have consented to receive commercial canvassing, the Office de Tourisme des Saisies will keep your personal data until you express your wish not to receive any further communications, otherwise in accordance with a period defined by the applicable legislation.
  • When your data is collected in the context of requests/questions relating to IT services and applications, the Office de Tourisme des Saisies retains this data for 3 years from the last exchange you have had with us and carried out on your initiative. After the aforementioned periods, your data will be purely deleted or anonymised.
  • Candidate files may be kept for up to 2 years from the last contact with the said candidates, subject to their prior explicit consent. In the absence of such consent, files will be destroyed immediately at the end of the recruitment procedure.
    Contractual data relating to employees of the Office de Tourisme des Saisies is kept for 5 years after the employee leaves, after which it is deleted or destroyed, except for payslips (10 years for accounting reasons).

Cookies

When you arrive on our site, a banner informs you that by continuing your browsing you accept the use of third-party services that may install cookies. A function allows you to personalise your preference for all third-party services and therefore to refuse the installation of cookies on your browser at any time by clicking here.

Our cookies are sets of data that do not allow you to be identified, but their main purpose is to record information relating to your browsing.

A very effective tutorial from the CNIL can help you if you want to better control your browsing traces. We encourage you to consult it: https: //www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

Security

Les Saisies Tourist Office implements appropriate technical and organisational measures to guarantee the security and confidentiality of personal data and to prevent any loss, alteration, destruction or unauthorised access to such data.

Technical measures
To ensure the protection of data against cyber attacks and unauthorised access, the following measures are applied:

  • Data encryption: Sensitive data is encrypted during storage and transmission to prevent illegitimate access.
  • Strict access control: Access to personal data is restricted to authorised persons only and is based on reinforced authentication mechanisms (e.g. complex passwords).
  • Firewall and antivirus: Security solutions (firewall, antivirus, intrusion detection) are put in place to prevent any attempt at cyber-attack.
  • Regular back-ups: Data is backed up periodically to ensure that it can be recovered in the event of an incident.

Organisational measures
Les Saisies Tourist Office also adopts organisational measures to reinforce data protection:

  • Employee training and awareness of good practice in cybersecurity and personal data protection.
  • Confidentiality agreements signed with employees and service providers who have access to data.
  • Access management policies to ensure that only authorised employees can consult or process certain data.

Management of security incidents
In the event of a personal data breach, Les Saisies Tourist Office undertakes to :

  • Identify and correct the incident as soon as possible.
  • Inform the CNIL and the persons concerned within the time limits required by the regulations.
  • Implement corrective measures to prevent the incident from happening again.

Data transfer

The service providers or other third parties listed above to whom the Tourist Office of Les Saisies is likely to communicate your personal data are domiciled in the European Union and comply with the RGPD.

In certain cases, the Office de Tourisme des Saisies may transfer your personal data to countries outside the EU. These transfers could occur when third-party service providers or partners are located in third-party countries, or when the services used (for example, data storage or payment processing services) are based outside the EU.

In such cases, the Tourist Office would ensure that all data transfers outside the European Union comply with the requirements of the GDPR, in order to ensure the security and confidentiality of personal data.

If personal data is transferred to a country outside the EU, Les Saisies Tourist Office plans to implement appropriate measures to ensure an adequate level of protection for personal data.

These safeguards may include, but are not limited to:

  • Adequacy decisions by the European Commission: Where the third country is deemed by the European Commission to offer an adequate level of protection for personal data, the transfer may take place without further additional guarantees. You can consult the list of countries benefiting from such a decision on the CNIL or European Commission website.
  • Standard contractual clauses (SCC): In the absence of an adequacy decision, standard contractual clauses (SCC), approved by the European Commission, may be put in place between the Office de Tourisme des Saisies and the entities receiving the data, in order to guarantee compliance with the principles of personal data protection. These STC impose strict obligations on data recipients, including the implementation of appropriate security measures.

Rights of the persons concerned

In accordance with the applicable legislation on the protection of personal data, you have a number of rights concerning the collection and processing of your personal data, namely:

  • The right to be informed: You have the right to be informed in a concise, transparent, comprehensible and easily accessible manner of the way in which your personal data is processed.
  • The right of access: You have the right to obtain confirmation as to whether or not your personal data is being processed and, if so, to obtain access to and a copy of the data.
  • The right of rectification: You have the right to obtain rectification of any personal data concerning you that is inaccurate. You also have the right to have incomplete personal data completed, including by providing a supplementary declaration.
  • The right to erasure: You have the right to obtain the erasure of your personal data
  • The right to limit processing: In certain cases, you have the right to obtain the restriction of the processing of your personal data
  • The right to portability: You have the right to receive the personal data concerning you that you have provided to the Office de Tourisme des Saisies, in a structured, commonly used and machine-readable format, and you have the right to pass this data on to another data controller without the Office de Tourisme des Saisies being able to prevent this. This right only applies where the processing of your personal data is based on your consent or on the performance of a contract and where said processing is carried out using automated procedures.
  • The right to object: You have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data concerning you when said processing is based on the legitimate interests of the Office de Tourisme des Saisies. When your personal data is processed for canvassing purposes, you have the right to object to the processing of this data at any time. You can take advantage of this right by clicking on the “unsubscribe” link at the bottom of the messages you receive.
  • The right to lodge a complaint with a supervisory authority: You have the right to contact a supervisory authority (such as the CNIL in France) in order to lodge a complaint concerning the practices relating to the protection of personal data of the Office de Tourisme des Saisies.
  • The right to give instructions concerning the use of data after death (this right is applicable in France): you have the right to give Office de Tourisme des Saisies instructions concerning the use of your personal data after your death.
    To exercise these rights, please send a request to the following address, enclosing a copy of your identity document: rgpd@lessaisies.com. The Tourist Office undertakes to reply within a maximum of one month.

Modification of the policy

Les Saisies Tourist Office may update this Data Protection Policy at any time to adapt it to any new practices and service offers. In this case, the date on which the Data Protection Policy was updated will be updated and will indicate the day on which the changes were made. It is your responsibility to check for any updates to this Data Protection Policy published on the Office de Tourisme des Saisies website. If the Office de Tourisme des Saisies makes any changes that it considers important, you will be informed by means of a notice on our website.

Contact

Les Saisies Tourist Office has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with the General Data Protection Regulation (GDPR). His main tasks include:

  • Informing and advising the Tourist Office on its data protection obligations.
  • Checking the compliance of data processing and proposing recommendations to strengthen their security.
  • Liaising with the CNIL, particularly in the event of data breaches or specific requests.
  • Responding to requests from data subjects concerning the exercise of their rights (access, rectification, opposition, etc.).

Anyone wishing to contact the DPO may do so at the following address: dpo@lessaisies.com.

 Join us