Personal Data Protection Charter

 

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD is committed to protecting the privacy and personal data (hereinafter “Personal Data”) of the Users of its internet site (hereinafter the “Site”).


SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD undertakes to put in place adequate measures for the protection, confidentiality and security of Personal Data in accordance with the regulations in force in France and in the European Union, notably Regulation (EU) 2016/679 of 27 April 2016 on the Protection of Personal Data and the regulations adopted by national law for its application.

Users are informed by this charter (hereinafter the “Charter”) of the practices and processing methods involved in the collection and use of Personal Data by SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD in its capacity as data controller.

Consequently, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD asks Users to read this document carefully to become familiar with and understand the processing of Personal Data.

It is hereby noted that by visiting the Site, the User implicitly accepts the Charter and the General Conditions of Use.

 

ARTICLE 1.  PERSONAL DATA COLLECTED

The User provides Personal Data in digital format when using the Site.


1.1  Principles Applicable in the Collection of Personal Data

Generally, the User may browse the Site without necessarily being obliged to provide Personal Data to SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD.

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD only collects Personal Data necessary to undertake the processing in place and it assures a high level of protection for said data. Thus, processing which requires the collection of Personal Data is as follows:

  • To answer queries (contact forms).
  • To participate in enquiries designed to optimise the experience of, and relationship with, the User.
  • To send newsletters and informative or commercial alerts.

This Personal Data shall then be conserved for the period of time necessary to the accomplishment of the User’s request. Unless said data is required for the realisation of any specific action, it is deleted within the timeframe recommended by the CNIL, namely within three years of its collection by the Site, subject to legal obligations in the matter of archiving, conservation of certain types of data and/or anonymisation.

 

1.2 Site User Browsing Information

When visiting the Site or certain services linked to the Site, some data is automatically collected, such as:

  • IP address
  • Reference of the web browser used
  • Browsing data (date, time, content consulted, search terms used etc.) 
  • Reference of the operating system

Among the technologies used to collect this information, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD may use “php” sessions which store the data of each user using a unique identifier. These php sessions only store the data while the user is browsing.

The data thereby collected is deleted the moment the user closes the browser or, if appropriate, within a maximum period of thirteen months counting from the date of collection. 

ARTICLE 2.  LEGAL BASIS OF THE COLLECTION AND PROCESSING OF PERSONAL DATA

Personal Data is processed by SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD as authorised by prevailing legislation and subject to the following conditions:

  • Further to obtaining the freely-given, specific, informed and unambiguous consent of the User to the processing of his Personal Data (it is hereby noted that consent must be given by the legal representative of minors under the age of 18).
  • Collection of Personal Data necessary to the execution of the request of the User.
  • In accordance with the legal and/or regulatory obligations to which SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD is subject (such as the fight against fraud and corruption).
  • With due respect to the protection of SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD’s legitimate interests (such as safeguarding the security of its computer network).  

ARTICLE 3.  RECIPIENTS OF THE PERSONAL DATA COLLECTED

Only accredited employees of SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD and its service providers have access to the Personal Data collected and may process it, without prejudice to its possible transmission to bodies charged with the monitoring or inspection of said data in accordance with legislation and/or regulations in force or in order to respond to an administrative or judicial request.

Accredited employees have a duty of strict confidentiality.

 

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD agrees not to sell Personal Data to a third party.

 

ARTICLE 4.  TRANSFER OF PERSONAL DATA     

Personal Data collected from Site Users shall be exclusively conserved in France and shall not be transferred outside the European Union.

In the event of working with partners or service providers outside the European Union, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD undertakes to verify that appropriate measures have been implemented to ensure that the Personal Data of Users is sufficiently protected.

 

ARTICLE 5.  Data Security

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD collects and processes Users’ Personal Data with the strictest confidentiality and in accordance with applicable law. The User is protected against the unauthorised access, alteration, disclosure or erasure of Personal Data.

In the event of a necessary and authorised disclosure of Personal Data to a third party, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD shall ensure that said third party or parties provide the same level of security for Personal Data as afforded by SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD and shall insist upon the third party or parties providing contractual guarantees in order that Personal Data be used exclusively for the end purposes accepted by the User with the necessary level of confidentiality and security (this shall be achieved thanks, in particular, to European Commission model clauses, Binding Corporate Rules and the  EU-US Privacy Shield).

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD implements technical and organisational measures to ensure security of conserved Personal Data during the period necessary to the achievement of the intended outcome.

The attention of Users is drawn to the fact that no storage or transfer technology is totally infallible.

In the event of a proven compromise of Personal Data which may incur a high risk of violation of the rights of Users, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD shall inform the competent authority as stipulated by the applicable regulations. 

The User shall be careful to prevent any non-authorised access to his Personal Data and notably to his terminal (computer, smartphone and tablet, in particular).

 

ARTICLE 6.   LINKS TO OTHER INTERNET SITES   

The Site may occasionally contain links to the sites of partners or third parties which have their own personal data protection charter.

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD has no control over the content of these sites and shall not take any liability for the use made of the information collected by the User further to clicking on such links.

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD consequently suggests that the User take note of the data protection policies implemented by the publishers of said sites prior to transmitting any nominative data. 

 

ARTICLE 7.   USER RIGHTS

It is hereby reiterated that the User benefits from the following rights, subject to any limits imposed by the legislation in force:

 

7.1. Right of Information regarding the Processing of Personal Data

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD undertakes to do its best to provide concise, transparent and accessible information regarding the processing of Users’ Personal Data. 

 

7.2. Right of Access to Personal Data

The User may access his Personal Data processed by SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD and has the right to receive a copy by electronic means (SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD may charge for the administrative costs involved in supplying any extra copies).

 

7.3. Right to Erasure (“Right to be Forgotten”) and the Right to Amend Personal Data  

The User has the right to request that his Personal Data be deleted and/or amended when it is inaccurate or obsolete.

It is hereby noted that SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD may conserve certain Personal Data when it is obliged to do so by law or for any other legitimate reason.

 

7.4. Right of Objection

The User may, at all times, for legitimate reasons, object to the use of his Personal Data for marketing purposes or for its re-use for ends other than that for which consent has been given, except in the event of SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD executing a legal obligation.

 

7.5. Right to Limit the Processing of Personal Data

The User has the right to request that the processing of his Personal Data be limited to what is strictly necessary. This right is only applicable:

- If the User contests the accuracy of his Personal Data; if the User can show that the use of his Personal Data is unlawful and asks for it to be limited rather than erased.

- If SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD no longer needs the User’s Personal Data but the User still requires it for the purposes of recognition or legal proceedings.

- If the User objects to its processing, based on the legitimate interest of the data controller, during the monitoring process which is establishing whether the legitimate interest of the data controller prevails over that of the User.

 

7.6. Right to File a Claim with a Monitoring Authority

If the User believes that the efforts put in place by SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD to preserve the confidentiality of Personal Data do not guarantee the respect of the rights of the User, the User may file a claim with the competent monitoring authority (CNIL or any other monitoring authority listed by the European Commission). 

7.7. Right to Data Portability

The User has a right to the portability of his Personal Data. This authorises the User to obtain from SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD his Personal Data in a structured, commonly-used, machine-readable format and to request that his Personal Data be transferred to another processing controller.

7.8. Right to Organise the Fate of Personal Data after Death

The User has the right to organise the fate of his Personal Data after his death further to the adoption of general or specific directives by which SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD agrees to abide.

In the absence of any such directives, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD acknowledges that the User’s heirs have the possibility of exercising certain legal rights, most notably the right of access should this prove necessary to settling the deceased’s succession, and to the right of objection.

 

7.9. Exercising the Aforementioned Rights 

In order to exercise the aforementioned rights, the User is invited to contact the SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD’s Officer for the Protection of Personal Data in accordance with the modalities outlined in Clause 10.

It is hereby noted that, in order to help the User exercise his rights, the CNIL has model letters available on its website (www.cnil.fr).

Prior to treating the request(s) of the User, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD reserves the right to verify the former’s identity by asking for proof of identity.

The Officer for the Protection of Personal Data shall answer all requests as soon as possible and, at the latest, within one (1) month of reception of proof of identity.

If necessary, this timeframe may be extended by two (2) months in the light of the complexity and quantity of requests. In this event, SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD undertakes to inform the User of the reason for, and prolongation of, the timeframe.  

ARTICLE 8.  MODIFICATION OF THE PERSONAL DATA PROTECTION CHARTER

SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD reserves the right, at all times, to modify the Personal Data Protection Charter in order to incorporate legislative or regulatory modifications and/or to improve its Personal Data Protection policy.

In the event of such modifications, a new, up-dated version of the Charter shall be published online with the date of the “Last update”.

 

ARTICLE 9. APPLICABLE LAW AND COMPETENT COURT

The Charter is subject to French law, including the provisions applicable to the rules of international private law.


IN THE EVENT OF ANY LITIGATION REGARDING THE USE OF THE SITE AND/OR ANY DIFFICULTY RELATING TO THE VALIDITY, INTERPRETATION OR EXECUTION OF THESE GENERAL CONDITIONS OF USE AND IN THE ABSENCE OF AN OUT-OF-COURT SETTLEMENT, JURISDICTIONAL COMPETENCE SHALL BE ATTRIBUTED TO PÉRIGUEUX COURT OF APPEAL, MULTIPLE DEFENDANTS AND/OR THE INTRODUCTION OF A THIRD-PARTY NOTWITHSTANDING.

 

ARTICLE 10.  CONTACT DETAILS

For amendements, additions or updates of information and for all questions regarding the Charter, please contact SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD by email addressed to the Officer for the Protection of Personal Data at contact@semitour.com or by letter to the following address : SA SOCIÉTÉ D’ÉCONOMIE MIXTE DE TOURISME DU PÉRIGORD –  marked for the attention of the Officer for the Protection of Personal Data, 25 Rue du Président Wilson 24001 PÉRIGUEUX Cedex.