Preamble:

The Fuveau Tourist Office places great importance on protecting the privacy of its members, employees, local partners and all other individuals whose contact information it holds. Which is why we have adopted the following set of principles in line with the new General Data Protection Regulation (GDPR).

The purpose of this document is to inform individuals of how we use and protect their personal data, as well as the reasons why we process these data.

Scope

This Privacy Policy applies to Personal Data, collected via the website or otherwise and regardless of the way these data were collected or processed.

The term “Personal Data” refers to any information relating to an identified or identifiable natural person. A person is “identifiable” when they can be identified, directly or indirectly, in particular with reference to an identification number or one or several unique elements. The term “Non-Personal Data” refers to information that does not allow the identification of a natural person.

The Data Controller

The data controller responsible for your Personal Data is Christine Dusserre, employee of the Tourist Office located at 26 boulevard Emile Loubet, 13710 Fuveau in France.

Several technical services, such as our website hosting, are carried out by technical service providers. In accordance with Article 28 of the GDPR, these providers are bound by a strict confidentiality clause that prohibits them from using the data entrusted to them for any purpose other than that set out in the service contract and requires them to implement technical and organisational measures that meet the requirements for the security and protection of personal data.

What personal data do we collect and process?

We collect and use only the personal data we need to carry out our mission to offer you personalised and quality services, such as:

Identification data: last name, first name, postal address, email, telephone number, occupational category.

Principles and objectives

This charter establishes a personal data management policy based on five key principles:

• Take into account data protection rules when collecting personal data;
• Control compliance with legal obligations throughout the entire duration of the processing of these data;
• Reduce data collection to the bare minimum;
• Ensure the greatest possible transparency on our data processing, except for data of which disclosure would compromise their security;
• Facilitate the exercise of rights recognised by law for individuals whose data are processed.

Dissemination

This Privacy Policy is publicly available at the Tourist Office and on the Tourist Office’s website.

Data protection rules

This charter describes all the measures, rules, and means implemented by the Tourist Office to apply the five principles listed above. It is a true “code of conduct” and determines the roles and responsibilities of each of the actors involved in the implementation of data processing in paper or digital format.

Purposes of personal data collection

The Fuveau Tourist Office precisely identifies the purposes to which it collects personal data. These purposes are legitimate and respected throughout the duration of the processing.

We process your data fully or partly for the following purposes:

• Allowing you to browse our Websites and Applications and adapt our content to your device to improve your navigation;
• Allowing you to share our content on social media;
• Sending you information and/or external communications (only if the individual gives their express consent);
• Sending newsletters, if you have consented to this by ticking the relevant box;
• Analysing our Website audience and traffic.

The recipients of Your Personal Data are our own management teams and technical service providers. The recipients of the data are aware of use regulations. The use of data for any purposes other than those provided by law or by the Tourist Office is their responsibility and subject to the individual’s prior consent.

To which types of entities could your personal data be communicated?

In order to achieve the aforementioned purposes, we disclose your personal data only to:

• Municipal services involved in the processing of your data;
• Financial, judicial or state agencies and public bodies, upon request and within the limits permitted by the regulations in case of a legal obligation.

Transparency and objectives

The Fuveau Tourist Office does not collect personal data without the knowledge of the individuals concerned. Similarly, it does not collect personal data when the individuals concerned legitimately object.

Limitation of personal data collection

The Fuveau Tourist Office shall limit itself to collecting only personal data authorised by law and necessary for the achievement of the stated objectives.

Limitation of personal data retention

The Fuveau Tourist Office ensures the updating of personal data it processes while respecting the intended objectives.

Retention periods do not exceed those necessary for the achievement of the intended objectives and comply with applicable regulatory standards.

Physical and logical security of personal data

The Fuveau Tourist Office identifies and implements the necessary means to protect the personal data processing systems to prevent any malicious intrusion and to prevent any loss, alteration or disclosure of data to unauthorised persons.

Right of access, rectification or opposition

The Fuveau Tourist Office ensures that any individual who requests it is informed of the existence of their personal data, what they are used for and their rights of rectification or opposition.

A procedure is put in place to ensure that the mention of individuals’ rights is systematically included when designing data collection forms (in paper or digital format).

Data breach management

A system for detecting possible data breaches is implemented, so corrective measures can immediately be developed, applied and monitored.

Access to data – Transfer of data

The Fuveau Tourist Office may be obliged to hand over personal data to authorities authorised by law, particularly if required by a court order. In such cases, verification of the identity of the requester and the legal basis for the request is carried out according to a formalised procedure. The Fuveau Tourist Office particularly ensures that (unless there is a specific legislative provision) the transmission does not cover the entire database, but only the person targeted by the requisition and for a limited period of time.

What are your rights and how can you exercise them?

In accordance with applicable regulations, you have various rights, namely the right of access, rectification, erasure, restriction of processing, opposition, portability of your data, to define directives relating to the retention of your data and to withdraw your consent.

You can exercise the rights listed above by sending a letter accompanied by proof of identity to the Fuveau Tourist Office – 26 boulevard Emile Loubet – 13710 Fuveau – France, or to dpo@fuveau-tourisme.com.

In accordance with applicable regulations, you have the right to file a complaint with the competent supervisory authority, such as the National Data Protection Commission (CNIL) in France.

This Privacy Policy is subject to change, in particular due to legislative and regulatory developments.