INTRODUCTION
www.ot-montsaintmichel.com processes personal data (hereinafter “Personal Data”) concerning you as part of the use of this website (hereinafter the “Site”). As data controller, we are respectful of privacy and we protect the personal data of our Site users. This policy aims to inform you of the methods of collection, processing and use of your Personal Data and rights in terms of protection of personal data with regard to the applicable provisions, including Law 78-17 of 6 January 1978 relating to data protection and known as the “Informatique et libertés” law, in its most recent version, and the GDPR (General Data Protection Regulation), in force since 25 May 2018.
Scope of this Privacy Policy
This Policy sets forth the principles and guidelines for the protection of your Personal Data, which includes Personal Data collected on or through the Site. www.ot-montsaintmichel.com collects Personal Data both online – including by email – and offline; this policy will apply regardless of means of collection or processing. The term Personal Data refers to any information relating to an identified or identifiable natural person. A person is “identifiable” when they can be identified, either directly or indirectly – including by reference to an identification number or to one or more elements specific to their person. “Non-Personal Data” corresponds to information that does not make it possible to identify a person.
PROCESSING RESPONSIBILITY
The person responsible for processing your Personal Data is Hervé Bierjon, director of the OTMSMN, Industrial and Commercial Establishment created on 1 January 2017, included in the National Registry of Travel Agencies under No IM0501600002 and registered in the Siret directory (81756789400016), with its head office located at 2 rue du Général de Gaulle, 50300 Avranches, and for which Mr Hervé Bierjon also serves as legal representative.
Certain technical services (hosting, back-ups, data quality and customer knowledge) are entrusted to our technical service providers. In accordance with Article 28 of the GDPR, this service provider is bound by a clause of strict confidentiality which prohibits any use of the data entrusted to it and not provided for in the service contract, and which requires it to implement technical and organisational measures that meet the requirements of personal data protection and security
PERSONAL DATA SECURITY AND PRIVACY
We consider your Personal Data to be confidential information.
We endeavour to take reasonable technical measures to prevent any loss or misuse in collecting or storing the data with which you have provided us and to prevent any disclosure to unauthorised third parties.
However, despite these measures, the Internet remains an open system and we cannot guarantee that unauthorised third parties will not be able to bypass these measures or use your Personal Data for illegitimate purposes. Consequently, www.ot-montsaintmichel.com may not be held liable in case of any fraudulent access to your data, for any use whatsoever.
The Site may provide links to third party websites that may be of interest to you.
www.ot-montsaintmichel.com has no control over the content of third party sites or over the practices of said third parties with respect to the protection of any Personal Data they may collect. Consequently, www.ot-montsaintmichel.com declines all liability concerning the processing of your Personal Data by these third parties. It is your responsibility to inform yourself about the personal data protection policies of said third parties.
PURPOSE OF THE DATA COLLECTION
We process your data, in whole or in part, for the following purposes:
● to allow you to browse our Sites and Applications and to adapt our content to your device in order to improve navigation;
● to remember the information you have entered in forms (your user account for example);
● to allow you to share our content on social networks;
● to allow you to purchase products or services;
● to facilitate your interactive and personalised use of the Sites and Applications;
● to identify your needs and interests and to provide you with the most suitable products and/or services;
● to allow you to open and manage an account in order to access all the features and options offered by the Sites and Applications;
● to send external information and/or communications;
● to organise contests (contacting winners, handing over of prizes, etc.) ;
● to send newsletters, if you have consented by ticking the relevant box,
● to send commercial offers from partners, if you have consented by ticking the corresponding box;
● to analyse the site audience and traffic;
● to share advertisements adapted to your interests;
● to analyse the performance of these advertisements;
● to process applications and manage recruitment sources;
The recipients of your Personal Data are our own management teams and technical service providers.
COLLECTED DATA
Personal Data
Personal Data may include the following:
- Surname;
- First name;
- Email address;
- Postal address;
- Phone number;
- Password;
- Geolocation;
- IP address;
Data collected during our exchanges as part of a commercial contract and/or partnership with service providers: consult the Terms and Conditions of Use of your personal data.
And any other Personal Data that may be relevant for the purposes set out below.
Cookies and other trackers
Cookies, or other similar trackers, are files used by a server to communicate with the browser. Cookies are used to send status information when a user visits a site. Status information can be, for example, a session ID, language, expiration date, or response domain, etc. During their period of validity, cookies make it possible to store status information when a browser accesses the various pages of a website or when the browser subsequently returns to said site. Only the issuer of a cookie can read or modify the information contained therein. There are different types of cookies:
● session cookies that disappear as soon as you leave the browser or the site;
● permanent cookies that remain on your device until their lifetime expires (a maximum of 12 months) or until you delete them using your browser’s features.
You can access your cookie management settings to configure the placement and reading of cookies.
Browser settings
The installation of certain cookies is subject to your consent. During your first visit to the Site, an information banner will be displayed indicating that by continuing to browse the Site, the aforementioned cookies will be installed on your equipment.
Cookies or trackers allow you to take full advantage of the Site’s functionalities. If your browser is configured to refuse all cookies or trackers, this may prevent the use of some of our services, for which www.ot-montsaintmichel.com cannot be held liable.
FORMS
Newsletter subscription
www.ot-montsaintmichel.com newsletters
By authorising this type of newsletter, you allow the site to send you personalised emails. You can unsubscribe at any time via the link on any of the emails received; however, the maximum retention period for your data is 36 months.
Contact form
Data is transmitted by site users who wish to send a comment or a report. The information collected via this form is transmitted to the department in charge of managing comments on the www.ot-montsaintmichel.com website. The maximum retention period for your data is 36 months.
EXERCISING YOUR RIGHTS
In accordance with the provisions of the applicable regulations on the protection of personal data, you have the right to access, rectify and delete data concerning you and the right to obtain a copy of the personal data we hold in a structured electronic format (portability).
You also have the right to object on legitimate grounds to the processing of personal data concerning you, and the right to object to the use of your data for canvassing purposes – in particular for commercial canvassing.
You can exercise your rights by sending us any requests via post to the following address:
OFFICE DE TOURISME MONT SAINT-MICHEL NORMANDIE
For the attention of the Data Protection Officer
2 rue du Général de Gaulle
50300 AVRANCHES
(please attach a copy of your identity document)
or by email to dpo-ot@msm-normandie.fr.
We undertake to respond to these requests within a period of two months. This period may be extended by two months, depending on the complexity and number of requests received.
In the event of a dispute over the exercise of your rights, you have the right to file a complaint with the French Data Protection Authority (CNIL).
DATA RETENTION
We only keep your Personal Data for a period necessary and proportionate to the purpose for which it is collected, i.e. for a maximum period of 3 years from your last interaction with us, carried out at your initiative (including by logging in to your account), and 10 years as part of a financial transaction, in accordance with Article L.123-22 of the French Commercial Code . If you wish to modify or rectify your data, or have this deleted, please refer to the paragraph below: “Exercising your rights”.
Beyond the above-mentioned periods, your data will be anonymised for statistical purposes or simply deleted.
Updates to this Privacy Policy
This privacy policy may be modified or amended at any time.
You are invited to consult it regularly.
For more practical information on the exercise of your rights, we recommend that you consult the site of the French Data Protection Authority (CNIL), and more specifically the page https://www.cnil.fr/fr/comprendre-vos-droits.
