Personal data protection

Provence Sud Sainte Baume attaches the utmost importance to protecting the privacy and personal data of its customers and visitors to its website (hereinafter "site user" or "customer" or "you").

The purpose of this Personal Data Protection Policy (hereinafter the "Policy") is to:

• Describe the purposes and the personal data concerning you that Provence Sud Sainte Baume and its subcontractors may collect.
• Inform you of your rights and how to exercise them between you and Provence Sud Sainte Baume in relation to your Personal Data.

CNIL

Independent administrative authority created in 1978, comprising a pluralist college of 18 commissioners from a variety of backgrounds (4 members of parliament, 2 members of the Economic, Social and Environmental Council, 6 representatives of high courts, 5 qualified personalities and the Chairman of the Commission d'Accès aux Documents Administratifs (CADA)).

 

Cookie

A "cookie" is a piece of information, generally small in size and identified by a name, which may be sent to your browser by a web site you visit. Your web browser will store it for a certain length of time, and send it back to the web server each time you reconnect. Cookies have many uses: they can be used to memorize your customer ID with a merchant site, the current contents of your shopping cart, an identifier enabling us to track your browsing for statistical or advertising purposes, etc.

 

Data Protection Officer (DPO)

The Data Protection Officer (DPO) is responsible for implementing compliance with the European Data Protection Regulation within the organization that has appointed him/her, with regard to all processing carried out by this organization.

 

Personal data (DCP)

Personal data is any information relating to an identified or identifiable individual. But because it concerns individuals, they must retain control over it. A natural person can be identified: directly (example: name...).

 

Sensitive data

Sensitive data is a special category of personal data. This is information revealing alleged racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership... No sensitive data is collected by Provence Sud Sainte Baume.

 

Purpose of processing

The purpose of processing is the main objective of the use of personal data. Data is collected for a well-defined and legitimate purpose and is not further processed in a way that is incompatible with this initial purpose.

 

Data controller

The data controller is the legal entity (company, municipality, etc.) or natural person who determines the purposes and means of data processing, i.e. the objective and the way in which it is to be carried out. In practice, this is usually the legal entity represented by its legal representative.

 

Subcontractor

The processor is the natural or legal person (company or public body) who processes data on behalf of another organization ("the controller"), as part of a service or provision. Processors have certain obligations.

 

Processing of personal data

Personal data processing is any operation or set of operations involving personal data, regardless of the process used (collection, recording, organization, storage, adaptation, modification, extraction, consultation, use).

Provence Sud Sainte Baume is responsible for processing the user's personal data and informs the user that his or her data will be processed in accordance with the provisions of current regulations on the protection of personal data, Regulation (EU) 2016/679 of April 27, 2016 (RGPD) on the protection of individuals with regard to the processing of personal data and their free movement.

Its partners are its subcontractors. They intervene within an exclusively contractual framework, for which the processing of personal data is foreseen.

 

1. Provence Sud Sainte Baume Treatment Registry

The processing of personal data is mapped in the processing register kept by the DPO of Provence Sud Sainte Baume. The aim of the privacy policy is to provide customers and visitors to the site with the necessary information on the processing operations and their related rights. Detailed information on data processing is available from the DPO.

 

2. Legitimacy of processing

According to Article 6 of the European Data Protection Regulation (EDPR), the consent of the person whose data is recorded in a file is not required when such data is collected :

• For the performance of a contract (e.g. sales, rental, employment, etc.) or pre-contractual measures (e.g. quotations, discussions, etc.).
• Because a legal text makes certain files mandatory (e.g. INSEE population census, single personnel register, etc.).
• For the performance of a mission of public interest or public authority (e.g. constitution of police or tax files, etc.).
• To safeguard a person's vital interests (e.g. in the event of epidemics, natural or man-made disasters, etc.).
• For a legitimate interest (e.g. fraud prevention, transfers within a group, network security, etc.) unless the interests or fundamental freedoms of the data subject prevail.

Provence Sud Sainte Baume carries out processing that is largely based on legitimacy relating to performance in connection with a stay or between companies; or pre-contractual measures with a view to preparing the order.

In all other cases, the consent of the data subject is required. It is this consent that makes the proposed file lawful. For example, in the case of the Newsletter and certain website cookies, the individual's consent is required.

Withdrawal of consent is possible at any time and has no retroactive effect on the lawfulness of Processing carried out on this basis prior to the said withdrawal.

 

3. Purposes of processing

The purpose of the processing is the main objective of the use of personal data.

Data is collected for a well-defined and legitimate purpose and is not further processed in a way that is incompatible with this initial purpose. This principle of purpose limits the way in which the data controller may use or reuse the data in the future.

 

a) Purposes related to contract performance or contractualization

• Present holiday offers.
• Search and book holidays and other activities provided by Provence Sud Sainte Baume via the website or telephone platform.
• Create and use your customer account to implement, update your personal data, consult, modify or cancel your stay.
• Keep in touch with a customer relations manager when a reservation is in progress or confirmed by telephone.
• A reminder of your current basket that has not been validated or paid for.
• Controlling the contractual execution of the stay.
• Post-stay satisfaction surveys to build up a database for monitoring services.
• Maintain a commercial relationship with customers and site visitors.
• Create invoices and monitor customer accounts.
• Secure order payment.
• Ensuring that the reservation contract is properly executed, and monitoring the accounts.
• Recruitment by posting job offers and receiving applications.

 

b) Legitimate interest in the economic development of Provence Sud Sainte Baume

• Statistical analysis to personalize the customer journey.
• The instruction of reservation of stays, requests for information or any type of solicitation made by the customer or user of the site or by one of the modes of contact made available to him (email, telephone, chatbot).
• The use of site user and customer data to create a commercial profile based on the customer's holiday habits. The creation of the profile will not imply the taking of automated decisions, to better understand the customer's needs and to adapt personalized offers; not likely to be prejudicial to the user.
• Transfer of mail to partners under contract for communication operations.

 

c) Purposes requiring the individual's consent

• The sending of commercial communications, subject to the consent of prospects and customers, by e-mail or via social networks. These communications by Provence Sud Sainte Baume will concern its stays, or those of its partners with whom it has signed a promotional agreement.
• Obtaining consent to receive newsletters by e-mail.
• By accessing one of Provence Sud Sainte Baume's services through a social network, you consent to the collection and storage by Provence Sud Sainte Baume of all personal data provided to the social network, provided that you have accepted this transfer to the social network.

 

d) Purposes based on compliance with legal obligations

• Retention of tax-related personal data.
• Retention and communication of personal data to judicial authorities upon request.

 

4. How long personal data is kept

Personal data cannot be kept for an indefinite period: this period must be defined according to the purposes for which the data are processed. Once this purpose has been achieved, the data should be archived, deleted or anonymized (e.g. for statistical purposes).

The retention of personal data by Provence Sud Sainte Baume complies with the criteria for the retention of personal data: they will be retained for as long as there is a mutual interest in maintaining the purpose of the processing and when this interest is no longer necessary for this purpose, the data will be deleted by the use of adequate security measures to ensure their anonymization or total destruction.

The duration of data retention by Provence Sud Sainte Baume may vary from 6 months to 2, 3 or 5 years in most cases of processing.

These retention periods are recorded in the data processing register held by the DPO of Provence Sud Sainte Baume.

 

5. Personal data flows

Personal data may be communicated between Provence Sud Sainte Baume departments, but also to public control bodies and to partner companies when this is necessary for data processing.

Provence Sud Sainte Baume's business partners are bound by contracts, in which the conditions for processing personal data are provided for by RGPD rider.

These flows are identified in Provence Sud Sainte Baume's processing register, which is monitored by the DPO.

 

6. The rights of data subjects

In accordance with the RGPD, the persons concerned by the processing implemented by Provence Sud Sainte Baume have the right to request from its DPO access to the Personal Data concerning them; the rectification or deletion thereof, or a limitation of the processing of their personal data and the right to the portability of their data.

Data subjects may exercise their right to object for reasons that concern them. In the event of opposition, the data will no longer be processed, except within the framework of legal obligations imposed on Provence Sud Sainte Baume.

To exercise these rights, please contact the DPO of Provence Sud Sainte Baume.

Postal address: Office de Tourisme intercommunal, 155 Avenue Henri Jansoulin, 83740 La Cadière-d'Azur.

Tel: 04 94 98 26 56

Mail: tourisme@sudsaintebaume.fr

 

7. Personal data processed by Provence Sud Sainte Baume

Personal data is classified by type, notably according to its origin and purpose. (location, civil status, banking, professional, social, medical, etc.). Data processing by the Provence Sud Sainte Baume Intercommunal Tourist Office complies with the following principles:

 

a) Limitation of processing

Companies must only collect personal data for specific purposes, clearly indicate their purpose and only retain data for as long as is necessary to achieve that purpose.

Processing carried out for archiving purposes in the public interest, or for scientific, historical or statistical purposes, enjoys greater freedom.

 

b) Data minimization

Companies only need to process the personal data they need to achieve the initial objective. This has two major advantages. Firstly, in the event of a data breach, the unauthorized person will only have access to a limited amount of data. Secondly, data minimization ensures that data remains accurate and up-to-date.

 

c) Types of personal data processed

Provence Sud Sainte Baume processes the following types of personal data:

• Identity data: civil status, surname, first names, age, children, etc.
• Domicile data: place of residence, etc.
• Professional data: employer, etc.
• Banking data: bank details, check number, credit card number, etc.
• Commercial data: customer number, reservation number, documentation requests, etc.
• Accounting data: invoices, payment methods, etc.
• Contact details.
• Digital data: e-mail, IP, telephone number, fax, connections, cookies, etc.

By checking the corresponding boxes and entering data in the fields on the contact form or presented on downloaded forms, the user expressly, freely and unequivocally accepts that his/her data is necessary for the service provider to be able to follow up on his/her request, the inclusion of data being voluntary in the remaining fields. The user guarantees that the personal data provided to Provence Sud Sainte Baume are true and takes responsibility for communicating any changes concerning them.

Provence Sud Sainte Baume informs the user and expressly guarantees that under no circumstances will his/her personal data be transferred to third parties other than Provence Sud Sainte Baume, nor to its partners involved in data processing. Whenever any type of transfer of personal data takes place, other than for reasons related to the execution of the contract, the user's express, informed and unequivocal consent will be requested beforehand. All data requested through the website or by any of the contact methods made available are compulsory, as they are necessary to provide the user and customer with the best possible service. In the event that all data is not provided, Provence Sud Sainte Baume does not guarantee that the information and services it provides are fully adapted to the needs of the user or customer.

In accordance with current regulations on the protection of personal data, Provence Sud Sainte Baume applies all the provisions of the articles of the RGPD for the processing of personal data placed under its responsibility, and manifestly applies the principles described in Article 5 of the RGPD, whereby data is processed lawfully, fairly and transparently with respect to the data subject and is adequate, relevant and limited to what is strictly necessary in relation to the purposes for which it is processed.

Provence Sud Sainte Baume guarantees that it has implemented appropriate technical and organizational policies to apply the security measures provided for in the RGPD in order to protect the rights and freedoms of website users and customers, and has provided them with adequate information so that they can exercise them.

Provence Sud Sainte Baume uses local shared digital objects (also called "Flash cookies") (collectively referred to as "cookies"). Further information on the operation, use and purpose of cookies is provided below. It is suggested that you contact Provence Sud Sainte Baume's DPO for further information on the management of personal data in cookies.

1. Definitions

Cookies are small files recorded by a website when the user consults it on their PC, laptop or mobile device. They enable Provence Sud Sainte Baume to detect whether a link has already been established between your device and the Provence Sud Sainte Baume website, to take into account your preferred language or other settings, to offer you certain functionalities (e.g. online store, vehicle configurator) or to recognize your centers of interest based on your use. Cookies may also contain personal data.

 

2. Cookie customization

By using the Provence Sud Sainte Baume website, you agree to the use of cookies - with the exception of cookies for Google marketing products. Cookies for Google marketing products (e.g. Google Search Ads, Google Display & Video 360) will only be used with your express consent.

You can also browse the Provence Sud Sainte Baume website without consenting to the use of cookies. In other words, you can prevent the use of cookies and delete them at any time by making the appropriate settings on your device. To do this, please proceed as follows:

• Most browsers are programmed to accept cookies automatically, but you can usually change this setting. You can delete cookies already stored on your device at any time. To find out how to do this in your Internet browser or on your device, please refer to your manufacturer's user manual.
• You can delete content from Web/DOM Storage at any time. To find out how to do this in your Internet browser or on your device, please refer to your manufacturer's user manual.
• You can find information on how to deactivate local shared objects at the following link: Cookie information
• Opposition to the use of cookies or their deletion is linked, like their use, to the device and browser used. You must therefore oppose the use of cookies or delete them on each of your devices and, if you use several browsers, for each browser.

 

3. Limitation of services

If you decide to refuse the use of cookies or delete them, some of the functions offered on the Provence Sud Sainte Baume web pages may not be available or may only be partially available.

 

4. Cookies used by Provence Sud Sainte Baume

 

a. Essential cookies (type 1)

These cookies are absolutely essential for the availability of all functions on the Internet pages. Without them, Provence Sud Sainte Baume would not be able to offer you certain services, such as holidays tailored to your wishes.

 

b. Functional cookies (type 2)

These cookies facilitate the use of Internet pages and improve their functions. They can save your language settings, for example.

 

c. Performance cookies (type 3)

These cookies collect information about how you use the Provence Sud Sainte Baume web pages. In particular, they help Provence Sud Sainte Baume to identify particularly popular sections of the holiday offers on the Internet and thus to improve the communication of holiday offers to you (a process known as tracking).

 

d. Third-party cookies (type 4)

These cookies are generated by third parties, for example social networks such as Facebook, Twitter and Google+, whose content you can integrate via the "social plug-ins" offered on the Provence Sud Sainte Baume web pages and its targeting and (re)targeting partners, which enable Provence Sud Sainte Baume to better target our online marketing to your needs and interests.

 

5. Cookies used

 

• Analytical cookies: marketing.
• Social cookies: marketing.
• Advertising cookies and behavioral cookies: marketing.
• Technical and functional cookies: these are strictly necessary for using the website and providing the contracted service.

 

6. Withdrawal of consent for the installation of cookies

 

How do I delete cookies from my browser?

 

1. Chrome :

• Select the "Tools" icon.
• Click on "Configuration".
• Click on "Show advanced options".
• In the "Privacy" section, click on "Content configuration".
• Eliminate cookies: click on "All cookies and site data....", do not allow cookies to be stored.
• Click on "Clear browsing data" (empty cache).
• Close and reset the browser.

For more information on Chrome, click on the following link: https: //support.google.com/chrome/answer/95647?hl.

 

2. Internet Explorer. Version 11 :

• Select "Tools | Internet Options".
• Click on the "General" tab.
• In the "Exploration history" section, click on "Clear exploration history on exit".
• Select "Delete files".
• Select "Delete cookies".
• Click on "Eliminate".
• Click on "OK".
• Close and reset the browser.

For more information on Internet Explorer, click on the following link: https: //support.microsoft.com/es-es/kb/278835.

 

3. Firefox. Version 18 :

• Select "Firefox | History | Clear Recent History".
• Next to "Details", click on the down arrow.
• Select the following checkboxes: "Cookies", "Hidden", "Session starters enabled".
• Using "Time interval for deletion" in the drop-down menu, select "All".
• Click on "Delete now".
• Close and reset the browser.
• You can accept or reject cookies individually at "Firefox Preferences", in the "History" section at Tools > Options > Privacy".

For more information on Mozilla Firefox, click on the following link: https: //www.mozilla.org/fr/privacy/websites/#cookies.

 

4. Other browsers :

Consult the documentation for the browser you have installed.