Legal notices

Personal data protection

The information we collect from you

We will collect and process the following data about you:

Information that you provide to us. This is information about you that you provide to us when you use our websites or applications or communicate with us by telephone, email or otherwise. This includes information you provide when you register to use our websites or applications, subscribe to our services, purchase a product, sign up to receive our newsletter or other offers, search for a product, participate in discussion forums or other social media or enter a competition, promotion, survey, market research or any information you add to your online account (if you have one) as part of your ongoing use of our services. The information you provide to us may include your name, postal address, e-mail address, telephone number, financial and credit card information, login details (if any), marketing preferences and, in some cases, a personal description and photograph. If you contact us with a complaint or enquiry, we may keep a copy of your contact details and our correspondence as well as information about your satisfaction. Where we collect personal data from you, we will indicate whether the personal data we have requested from you is mandatory or optional and explain the consequences if you choose not to provide us with this information. In some cases, we may not be able to provide you with a product or service you have requested if you do not provide this information.

Information we receive from other sources: this is information we receive about you if you use any of our other websites, applications or services, if you log in through a third party channel such as Facebook or Google or allow us to log in to third party devices or applications. We also receive information about you from other sources to enable us to provide you with a better user experience. For example, we work closely with third parties, such as business partners, technical contractors, payment and delivery services, advertising networks, analytics providers, customer management platforms, search providers. We may also collect information about you from business partners where you have been informed in advance.

Cookies

Our websites and applications use cookies to distinguish you from other users. This helps us to provide you with a better user experience.

Web analytics and audience measurement cookies help us to know what content is most useful to our users. They count the number of visitors and then analyse how they move around our website. This data helps us to know what products you are looking for and to make it easier for you to find them, thereby significantly improving your experience of our website. We use the services of Google Analytics for this purpose and have set the retention period of the audience measurement cookies to 14 months.

No personal information is stored. Please note that our cookies do not store any information that could identify you. Therefore, no one will be able to use the information collected by the cookies to contact you by phone, e-mail or otherwise. Tracking is limited to our website and is never shared with any third party.

Blocking cookies. You can block cookies - just activate the setting in your browser that allows you to refuse them.

Accepting and setting cookies. If your browser is set to accept cookies, our system will issue them when you visit our website. You can also choose to accept cookies only partially by checking the appropriate boxes on your first visit.

Use of information

We use the information we hold about you in the following ways:

• as part of our public interest mission, i.e. to inform you about the Sancy destination, the conditions of reception and stays, with the exception of purely commercial offers. The execution of our mission of public interest does not require prior consent, but at any time you can unsubscribe (see chapter: YOUR RIGHTS).
• to carry out our obligations under any online or offline contract between us and to provide you with information, products and services you request from us;
• as permitted by applicable law, to provide you with information about other products and services similar or complementary to those you have already purchased or about which you have requested information;
• with your consent (e.g. subscription to a newsletter or Club Sancy), we will send you messages relating to the service you have registered for.
• where you have provided your details to enter one of our competitions, we will use the personal data you provide to process your entry into the competition, to communicate with you about it and subsequently to keep you informed about news from the Massif du Sancy as part of our public interest mission.

Legal basis for processing your personal data

We will only process your personal data if we have a lawful basis for doing so. The lawful basis varies depending on the purposes for which we have collected and used your personal data. In almost all cases, the lawful basis will be one of the following:

• Our mission of public interest: the Office de Tourisme du Sancy is part of a mission of public service concerning the promotion, communication to potential tourists and the reception of visitors in the territory. The execution of our mission of public interest does not require prior consent, but at any time you can unsubscribe or modify your personal data (see chapter: YOUR RIGHTS)
• Consent: for example, when you have given your consent to receive certain commercial offers from us. You can withdraw your consent at any time, including by clicking on the "unsubscribe" link at the bottom of every marketing email we send you.
• Fulfilling a contract with you: for example, where you have purchased a product or service from us and we need to use your contact and payment information to process your order and deliver the products or services to you.
• Compliance with the law: where we are under a legal obligation and need to use your personal data to comply with that obligation.

Communication of your personal data

In the case of customer or prospect files, we do not pass on customer files to third parties. We do pass on your data or part of your data to our third party service providers and professional advisors, who may need access to your personal data to provide services to us (collection, credit card payment). In any case, this data may not be used by third parties other than to provide us with a technical service.

In the case of the files of the providers of the tourist offer, we may communicate your personal data to the following third parties and for the purposes set out below

• all members affiliated with the APIDAE tourism offer database in the category of broadcasters, partners and developers under the access conditions described on www.apidae-tourisme.com
• to our third party service providers and professional advisors, who may need to access your personal data to provide us with services (website management, tourist tax registration, credit card payment). In any case, this data may not be used by third parties other than to provide us with a technical service.

Where we store your personal data

The data we collect from you is stored in the European Economic Area (EEA),

Third Party Sites

Our websites and applications may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you click on these links, please note that these websites and applications will have their own privacy policies and we will not assume any responsibility or liability on their behalf. Please review their policies before providing any personal data.

Retention of your personal data

We take steps to ensure that the personal data you provide is retained for a maximum of 3 years after the last contact. After this period, it will be deleted or, in some cases, anonymised. Where we have collected personal data on the basis of your consent and we have no other legal basis for further processing, we will delete your personal data if you withdraw your consent.

Your rights

You can unsubscribe from our marketing emails at any time by clicking on the "Unsubscribe" link at the bottom of the email you receive.
In accordance with the RGPD, any person may exercise their right to access, rectify, oppose, limit the processing, delete and portability of data concerning them by sending a signed letter accompanied by a copy of an identity document to the attention of Délégué à la Protection des Données - Office de Tourisme du Sancy - 4 boulevard Mirabeau - 63240 LE MONT-DORE, or by email to dpo(a)sancy.com.
Our Data Protection Officer will reply within one month of the request for access or rectification.
You may also have the right to lodge a complaint with a data protection authority (the CNIL for France) if you believe that we have processed your personal data unlawfully or in violation of your rights. If you have such concerns, we ask that you contact us in the first instance (using the contact details above) so that we can investigate your request and hopefully resolve your concerns.
Data breach and communication within 72 hours (art.33 and art.34 of the RGPD): in the event of a breach or suspected breach of personal data, L'Office de Tourisme du Sancy and its subcontractors will notify the CNIL within 72 hours of becoming aware of it.