The following was translated from the original French version for your convenience. Only the original French version is legally binding.
The Pays de Gex Tourist Office processes personal data (hereinafter referred to as “Personal Data”) concerning you when you use this website (hereinafter referred to as the “Site”).
As a data controller, we are respectful of the privacy and we protect the personal data of the users of our Site.
This policy aims to inform you of the methods of collection, processing and use of Your Personal Data and of your rights in terms of protection of personal data with regard to the provisions applicable in this area, in particular the law 78-17 of January 6, 1978 relating to data processing, files and freedoms known as “Informatique et libertés” in its latest version and with the RGPD (General Regulation on Data Protection) in application since May 25, 2018.
Article 1 – Scope of this personal data protection policy
This Policy sets out the principles and guidelines for the protection of Your Personal Data, which includes Personal Data collected on – or via – the Site.
The Pays de Gex Intercommunal Tourist Office collects Personal Data (online, including by e-mail, or offline); the present policy applies regardless of the mode of collection or processing.
The notion of Personal Data refers to any information relating to an identified or identifiable individual. A person is “identifiable” when he or she can be identified, directly or indirectly, in particular by reference to an identification number or to one or more elements that are specific to that person.
Non-Personal Data” corresponds to information that does not allow a person to be identified.
Article 2 – Places of storage of Personal Data
All Personal Data is stored exclusively in France, by our web hosting provider :
- 2 rue Kellermann
- 59100 Roubaix – France
Article 3 – Data controller
The person in charge of processing Your Personal Data is: The Pays de Gex Intercommunal Tourist Office, located at 135 rue de Genève, 01170 Gex; certain technical services (hosting) are entrusted to our technical service providers (IRIS Interactive). In accordance with Article 28 of the RGPD, this service provider is bound by a strict confidentiality clause that prohibits any use of the data entrusted to it that is not provided for in the service contract and that requires it to implement technical and organizational measures that meet the requirements of security and protection of personal data.
Article 4 – Collected data
The Personal Data may include the following:
- First name
- E-mail address
- Mailing Address
- Date of birth
- Phone number
- IP address
And any other Personal Data that may be relevant to the purposes set out below.
Note to visitors and users of the Website: certain functionalities and characteristics of the Website can only be used if You communicate certain Personal Data to the Pays de Gex Intercommunal Tourist Office when You visit or use the Website. You are free to choose whether or not to provide all or part of your Personal Data.
However, if You choose not to provide it, such a decision could prevent the achievement or satisfactory achievement of the objectives described below, certain services and certain features of the Site could not function properly and/or You will be denied access to certain pages of the Site.
Cookies and Other Tracers
Cookies can be permanent (and remain after You disconnect from the Site in order to be used during Your subsequent visits to the Site) or temporary (and disappear as soon as You disconnect from the Site).
- allowing a service to recognize Your equipment, so You will not have to provide the same information several times in order to perform the same task;
- recognizing the username and password You have already provided so that You do not have to provide them again on every web page that requests them.
- measure the number of users of the services, thus making them easier to use and ensuring their ability to respond quickly to Your requests;
- help the Pays de Gex Intercommunal Tourist Office to understand how users interact with the services in order to improve them.
The Pays de Gex Intercommunal Tourist Office may also use the services of third party service providers to execute the services on its behalf and notably to :
- analyze Your browsing habits and measure the audience of the Sites and Applications;
- analyze Your centers of interest and propose targeted marketing or advertising offers to You;
- allow You to share the content of the Sites and Applications with other people on social networks or to let these other people know what You are looking at or what You think (e.g. the “Like” button on Facebook)
In this case, web beacons and cookies provided by these third party providers may be used and retained. When transmitting the information generated by these cookies, the cookie settings ensure that the IP address is anonymized before geolocation and before storage. Our service providers will use this information to evaluate your use of the site, to draw up reports on the activity of the site for the Pays de Gex Intercommunal Tourist Office, and to offer you better services and advertising targeted to your needs. They will not associate your IP address with any of their other data.
When you browse the Site, cookies are activated by default and data can be read or stored locally on your equipment. You will be notified the first time You receive a cookie and can choose to accept or decline it. By continuing to use the Sites, You expressly accept the use of such cookies by the Pays de Gex Intercommunal Tourist Office.
If you wish to modify or delete your information, please refer to Article 8: Your rights.
You can access your cookie management panel in order to configure the deposit and reading of cookies.
By type of data :
- Civil status data (name, first name, postal address…): 3 years max ;
- Connection data : 3 years max;
- Location data = 48 hours;
We only keep Your Personal Data for a period of time that is necessary and proportionate to the purpose for which they were collected, i.e. for a maximum of 3 years from the last exchange you had with us and carried out at your initiative. Beyond the above-mentioned periods, your data will be purely deleted or made anonymous.
Article 5 – Purposes of collecting personal data
Personal Data is generally collected for the needs of the activity of the Pays de Gex Intercommunal Tourist Office such as the improvement of the marketing and advertising efforts of the Pays de Gex Intercommunal Tourist Office, a better adaptation of the products and services of the Pays de Gex Intercommunal Tourist Office to the needs of the customers or the respect of the declarative obligations provided for by the law, and other similar activities.
The Pays de Gex Intercommunal Tourist Office collects and uses your Personal Data for the needs of its activity and notably for the following purposes
We process your data in whole or in part for the purposes of: processing registration requests to the Pays de Gex Intercommunal Tourist Office forms and providing the best experience to our prospects/customers.
Subject to applicable local legislation, by providing Your e-mail address, You expressly authorize the Intercommunal Tourist Office of Pays de Gex to use it with other Personal Data useful for sending You commercial or marketing messages.
The Intercommunal Tourist Office of Pays de Gex may also use Your e-mail address for administrative purposes or other non-marketing purposes (for example, to notify You of important changes made to the Website).
Article 6 – Conditions of processing and storage of personal data
Processing” of Personal Data includes, but is not limited to, using, storing, recording, transferring, adapting, analyzing, modifying, reporting, sharing and destroying Personal Data as necessary under the circumstances or as required by law.
All Personal Data collected is kept for a limited period of time depending on the purpose of the processing and only for the period of time required by applicable law.
All Personal Data collected is stored in Metropolitan France.
Article 7 – Links to websites not controlled by the Pays de Gex Intercommunal Tourist Office
The Website may propose links to third party websites that may be of interest to You.
The Pays de Gex Intercommunal Tourist Office has no control over the content of third party websites or over the practices of these third parties in terms of protection of the Personal Data they may collect. Consequently, the Pays de Gex Intercommunal Tourist Office declines all responsibility concerning the processing of Your Personal Data by these third parties. It is your responsibility to inform yourself about the personal data protection policies of these third parties.
Article 8 – Transfer of personal data
Your Personal Data may be disclosed within the Pays de Gex Intercommunal Tourist Office for the purposes stated in Article 3 of the present Policy.
The Pays de Gex Intercommunal Tourist Office may transfer Your Personal Data outside of the European Union, provided that it ensures, before transferring it, that the entities outside of the European Union offer an adequate level of protection, in accordance with the European legislation in force.
If the Pays de Gex Intercommunal Tourist Office learns that a third party to whom the Pays de Gex Intercommunal Tourist Office has communicated Personal Data for the purposes set out in Article 3 above, uses or discloses Personal Data without respecting this Policy or in violation of applicable legislation, the Pays de Gex Intercommunal Tourist Office will take all reasonable steps to prevent or stop such use or disclosure.
You also have the right to authorize or not the Pays de Gex Intercommunal Tourist Office to use Your Personal Data for a purpose other than those for which these Personal Data were initially collected. You may object to this use by referring to Article 8 below.
The Pays de Gex Intercommunal Tourist Office may also transfer Your Personal Data to third parties if the Pays de Gex Intercommunal Tourist Office considers that such a transfer is necessary for technical reasons (for example, for hosting services by a third party) or to protect its legal interests (for example, in the event of the sale of assets to a third party company, a change of control or the total or partial liquidation of the Pays de Gex Intercommunal Tourist Office).
Furthermore, the Intercommunal Tourist Office of Pays de Gex may share Your Personal Data with the reseller on which You depend or assigned to the territory in which You are located for the purposes of the Intercommunal Tourist Office of Pays de Gex’s activity. The Pays de Gex Intercommunal Tourist Office may also share your Personal Data with commercial partners when the Pays de Gex Intercommunal Tourist Office and the commercial partner jointly sponsor an event or participate in a marketing promotion in which You are involved.
The Pays de Gex Intercommunal Tourist Office may disclose Your Personal Data if required to do so by law or if the Pays de Gex Intercommunal Tourist Office believes in good faith that such disclosure is reasonably necessary to comply with legal process (e.g., a warrant, subpoena, or other court order) or to protect the rights, property, or personal safety of the Pays de Gex Intercommunal Tourist Office, our customers, or the public.
If the applicable legislation allows it, the Pays de Gex Intercommunal Tourist Office may also share Your Personal Data with third parties in order to offer You targeted marketing or advertising.
These transfers may take place via the Internet or by any other method deemed appropriate by the Intercommunal Tourist Office of Pays de Gex in accordance with applicable legislation and the internal security policies of the Intercommunal Tourist Office of Pays de Gex
Article 9 – Your rights
Your right to access and rectify your data
You have the right to access and rectify your personal data.
You can ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.
Your right to the deletion of your data
You can request the deletion of your personal data if one of the following reasons applies
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you withdraw the consent previously given;
- you object to the processing of your personal data on legitimate grounds;
- the processing of personal data does not comply with the provisions of the applicable laws and regulations.
However, the exercise of this right will not be possible when the retention of your personal data is necessary under the law or regulations and in particular, for example, for the establishment, exercise or defense of legal claims.
Your right to limit data processing
You can request the limitation of the processing of your personal data in the cases provided for by the legislation and regulations.
Your right to the portability of your data
You have the right to object to the processing of your personal data where the processing is based on the legitimate interests of the controller.
Your right to the portability of your data
Since May 25, 2018, you will have the right to portability of your personal data.
The data on which this right can be exercised are:
- only your personal data, which excludes anonymized personal data or data that does not concern you;
- personal data that are declarative as well as the personal operating data mentioned above;
- personal data that do not infringe the rights and freedoms of third parties, such as those protected by business secrecy.
This right is limited to processing based on consent or on a contract and to personal data that you have personally generated.
This right does not include derived or inferred data, which are personal data created by the Pays de Gex Intercommunal Tourist Office.
Your right to withdraw your consent
When the data processing that we implement is based on your consent, you can withdraw it at any time. We will then stop processing your personal data, without the previous operations for which you had given your consent being called into question.
Your right to appeal
You have the right to lodge a complaint with the CNIL on French territory, without prejudice to any other administrative or legal remedy.
Your right to define post-mortem directives
You have the possibility to define directives relating to the conservation, the erasure and the communication of your personal data after your death and this with a trusted third party, certified and charged to make respect the will of the deceased in accordance with the requirements of the applicable legal framework.
How to exercise your rights
All the rights listed above can be exercised:
- by mail to the following address: 135 rue de Genève, 01170 Gex, enclosing a copy of your identity card and proof of address;
- via our email address email@example.com. A procedure will then be sent to you to validate your identity.
Note: the documents sent in the framework of this procedure will be purely destroyed, and the data potentially collected during the procedure will be definitively deleted, at the end of the latter.
Please also note that all requests that do not follow these guidelines will be ignored.
We will respond to such requests within 1 month of receipt of the request. This period may be extended by 2 months depending on the complexity and number of requests received, for a total of 3 months.
If you have an account, you can exercise your rights of access and rectification by logging into your account.
However, with respect to the exercise of the right to information, we may not be obliged to respond if:
- you already have this information;
- the recording or disclosure of your personal data is expressly provided for by law;
- the provision of information is not possible;
- the provision of information would require disproportionate efforts.
Article 10 – Security and recipients of data
The Pays de Gex Intercommunal Tourist Office takes care to protect and secure the Personal Data that you have chosen to communicate to it, in order to ensure their confidentiality and prevent them from being distorted, damaged, destroyed or disclosed to unauthorized third parties.
The Pays de Gex Intercommunal Tourist Office has taken physical, electronic and organizational protection measures to prevent any loss, misuse, unauthorized access or distribution, alteration or possible destruction of this Personal Data. Among these protection measures, the Pays de Gex Intercommunal Tourist Office integrates technologies specially designed to protect Personal Data during their transfer. However, despite the efforts of the Pays de Gex Intercommunal Tourist Office to protect Your Personal Data, the Pays de Gex Intercommunal Tourist Office cannot guarantee the infallibility of this protection due to unavoidable risks that may occur during the transmission of Personal Data.
As all Personal Data is confidential, access to it is limited to the employees and service providers of the Pays de Gex Intercommunal Tourist Office who need it in order to carry out their mission. All persons having access to Your Personal Data are bound by an obligation of confidentiality and may be subject to disciplinary measures and/or other sanctions if they do not respect these obligations.
However, it is important that You exercise caution to prevent unauthorized access to Your Personal Information. You are responsible for maintaining the confidentiality of Your password and account information. Therefore, You must ensure that You log off when using the same computer or terminal.
Article 11 – Dispute Resolution
Although the Pays de Gex Intercommunal Tourist Office has taken reasonable measures to protect Personal Data, no transmission or storage technology is totally infallible.
However, the Pays de Gex Intercommunal Tourist Office is committed to ensuring the protection of Personal Data. If You have reason to believe that the security of Your Personal Data has been compromised or that it has been misused, You are invited to contact the Intercommunal Tourist Office of Pays de Gex at the following address: firstname.lastname@example.org
The Pays de Gex Intercommunal Tourist Office will investigate complaints concerning the use and disclosure of Personal Data and will attempt to resolve them in accordance with the principles set out in this Policy.
Unauthorized access to or misuse of Personal Data may constitute an offence under local law.
Article 12 – Contact
For any question concerning the present Policy, to stop receiving information from the Pays de Gex Intercommunal Tourist Office or for any request to rectify, complete, update or delete Your Personal Data, You can send an e-mail to the following address: email@example.com
Article 13 – Effective date and revisions of the personal data protection policy
The present Policy may be updated according to the needs of the Pays de Gex Intercommunal Tourist Office and circumstances or if required by law. We therefore invite you to regularly read the updates.
Last modification : 24/07/2020