Updated on 29 June 2020
The “Comité Régional de Tourisme de Normandie” (Normandy Tourism Board) processes your personal data (hereinafter the “Personal Data”)” with regards to using this website (hereinafter the “website”).
As the data controller, we respect our website user’s privacy and protect their personal data.
The purpose of this policy page is to inform you of the methods of collection, processing and use of your Personal Data and of your rights in terms of protection of personal data with regards to the applicable rules and regulations, in particular the latest version of the Law 78-17 of 6th January 1978 relating to data processing, privacy and freedoms known as “Informatique et libertés” and with the enforcement of RGPD (General Regulations on Data Protection) since 25th May 2018.
This Policy sets out the principles and guidelines for the protection of your Personal Data, which includes Personal Data collected on – or via – Normandy Tourism website.
Normandy Tourism Board collects Personal Data (online, including by e-mail, or offline); this Policy applies regardless of the method of collection or processing.
The term “Personal Data” refers to any information relating to an identified or identifiable individual. A person is “identifiable” when he or she can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements.
“Non-Personal Data” refers to information that does not allow an individual to be identified.
ARTICLE 2 – STORAGE OF PERSONAL DATA
All Personal Data is stored exclusively in France, by our web hosting provider:
355 Victor Hugo Street
ARTICLE 3 – CONTROLLER
The organisation responsible for processing your Personal Data is: Normandy Tourism Board, 14 rue Charles Corbeau – 27000 Evreux – France. Some technical services (such as hosting) are entrusted to our technical service providers (IRIS Interactive, Webaxys). In accordance with the Article 28 of the RGPD, this service provider is bound by a clause of strict confidentiality which prohibits in a contract all use of the data collected by this provider. The contract also mentions the implementation of technical and structural measures in compliance with the commitments to personal data security and protection.
ARTICLE 4 – DATA COLLECTED
- Personal Data may include the following:
- First name,
- Email address,
- Town of residence,
- Date of Birth,
And any other Personal Data that may be relevant for the purposes set out below.
Note to our visitors and website users: certain features and characteristics of the website can only be used if your personal data is supplied to Normandy Tourism Board when you visit the website. You are free to provide it or not, or to provide all or partial information in regards to your Personal Data.
If you choose however not to provide your data, it may prevent the display of certain functionality and a fully functional use of the website.
COOKIES AND OTHER TRACKERS
Cookies may be permanent and remain after you log out of the website in order to be used during your next visits or they can be temporary and disappear as soon as you log out of the website.
- allowing a service to recognize your connection, so that you will not have to provide the same information several times in order to perform the same task;
- recognising the username and password that you have already provided so that you do not have to supply this information again if requested on web pages.
- measure the number of services users, thus making functionalities easier to use and to ensure a quick response to your requests;
- help Normandy Tourism Board understand how users interact with the services in order to improve them.
Normandy Tourism Board may also use the services of third-party service providers in order to perform the services on its behalf and in particular to:
- analyse your browsing habits and measure the websites and applications’ audiences;
- analyse your main interests and tailor marketing or advertising offers accordingly;
- allow you to share content on the Apps’ Sites with others on social networks or to let others know what you are watching or enjoying (e.g., the “Like” button on Facebook).
In this case, invisible “pixels” and cookies provided by these third-party providers could be used and stored. When transmitting the information generated by these cookies, the parameters of the cookies ensure that the IP address is made anonymous before geolocation and before storage. Our service providers will use this information to evaluate your use of the website, to write reports on website activity for Normandy Tourism Board, and to offer web users better services and advertising targeted to specific needs. They will not associate your IP address with any other data.
When browsing the website, cookies are enabled by default and data can be read or stored locally on your hardware. You will be notified the first time you receive a cookie and you will be able to decide whether to accept it or not. By continuing to use the websites, you accept that cookies are used by Normandy Tourism Board.
If you wish to amend or delete your information, please refer to Article 8: Your rights.
You can access your cookie management panel in order to set up the input and reading of cookies.
By data type:
- Civil data (surname, first name, postal address…): 3 years maximum;
- Connection data: 3 years maximum;
- Location data : 48 hours.
We only keep your personal data according to the purpose for which it was collected, i.e. for a maximum of 3 years from the last exchange that you had with us and carried out at your initiative.
Beyond the above-mentioned periods, your data will be deleted or anonymised.
ARTICLE 5 – PURPOSES OF PERSONAL DATA COLLECTION
As stated above, the website user provides personal data on a voluntary basis.
Personal Data is generally collected for the purposes of Normandy Tourism Board’s activity such as improving its marketing and advertising practices, adapting its products and services to customers’ needs, or complying with statutory reporting obligations, and other similar activities.
Normandy Tourism Board collects and uses Personal Data for its activity and in particular for the following purposes:
We process your data as a whole or partially for the following purposes:
- Collecting email addresses for sending newsletters promoting tourism in Normandy
Subject to the applicable local legislation, by providing your e-mail address, you expressly authorise Normandy Tourism Board to use it along other Personal Data in order to send commercial or marketing offers.
Normandy Tourism Board is also likely to use your e-mail address for administrative purposes or other non-marketing objectives (for example, to notify users of important changes to the website).
ARTICLE 6 – CONDITIONS OF PROCESSING AND STORAGE OF PERSONAL DATA
“Processing” of Personal Data includes, among other things, the use, storage, recording, transfer, adaptation, analysis, modification, reporting, sharing and destruction of Personal Data as necessary in light of the circumstances or legal requirements.
All Personal Data collected is kept for a limited period of time depending on the purpose of processing and only for the period provided for by the applicable legislation.
All Personal Data collected is stored in France (Continental).
ARTICLE 7 – LINKS TO WEBSITES NOT OPERATED BY NORMANDY TOURISM BOARD
The website may provide links to third-party websites that may be of interest to you.
However, it is important to note that Normandy Tourism Board has no control over the content of third party sites or over the practices of these third parties with regard to the protection of Personal Data that they may collect. Consequently, Normandy Tourism Board declines all responsibility concerning the processing of your Personal Data by these third parties. It is your responsibility to keep informed of the Personal Data protection policies of these third parties.
ARTICLE 8 – TRANSFER OF PERSONAL DATA
Your Personal Data may be disclosed within Normandy Tourism Board for the purposes set out in Article 3 of this Policy.
Normandy Tourism Board may transfer your Personal Data outside of the European Union, provided that it ensures, before transferring it, that the entities outside the European Union offer an adequate level of protection, in adequation with enforced European legislation.
If the Normandy Tourism Board notices that a third party to whom it has communicated Personal Data for the purposes set out in Article 3 above, is using or disclosing Personal Data without complying with this Policy or in breach of applicable law, Normandy Tourism Board will take all reasonable steps to prevent or stop such use or disclosure.
You also have the right to decide whether or not to authorise Normandy Tourism Board to use your Personal Data for a purpose other than that for which it was originally collected. You may object to this use by referring to Article 8 below.
Normandy Tourism Board may also share your Personal Data with third parties if necessary for technical reasons (for example, for hosting services by a third party) or to protect its legal interests (for example, in the event of a sale of assets to a third party company, a change of control or the total or partial liquidation of Normandy Tourism Board).
In addition, Normandy Tourism Board may share your Personal Data with the partner you depend on or assigned to the area in which you are located for the purposes of Normandy Tourism Board’s activity. We may also share your Personal Data with business partners when Normandy Tourism Board and the business partner jointly sponsor an event or participate together in a marketing promotion in which you are involved.
Normandy Tourism Board may disclose your Personal Data if required to do so by law or if it believes in good faith that such disclosure is reasonably necessary to comply with legal process (for example, a warrant, subpoena or other court order) or to protect the rights, property or personal safety of Normandy Tourism Board, our customers or the public.
If permitted by the law, Normandy Tourism Board may also share your Personal Data with third parties in order to provide users with targeted marketing or advertising offers.
These transfers may take place over the Internet or by any other method deemed appropriate by the Normandy Tourism Board in adequation with applicable legislation and the internal security policies of Normandy Tourism Board.
ARTICLE 9 – YOUR RIGHTS
YOUR RIGHT TO ACCESS AND AMEND YOUR DATA
You have the right to access and amend your personal data.
You can contact us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or out dated.
YOUR RIGHT TO ERASE YOUR DATA
You may request us to erase your personal data when one of the following reasons applies:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you withdraw your consent previously given
- you object the processing of your personal data on legitimate grounds;
- the processing of personal data does not comply with the provisions of applicable laws and regulations.
Nevertheless, the claim to this right will not be possible when the retention of your personal data is necessary under the law or regulations and in particular, for example, for the establishment, exercise or defense of legal rights.
YOUR RIGHT TO LIMIT DATA PROCESSING
You may request the limitation of the processing of your personal data in the cases provided for by laws and regulations.
YOUR RIGHT TO OBJECT TO THE PROCESSING OF DATA
You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the controller.
YOUR RIGHT TO YOUR DATA PORTABILITY
Since 25 May 2018, you have the right to portability of your personal data.
The data on which this right can be exercised are:
- only your personal data, which excludes anonymized personal data or data that does not concern you;
- the declarative personal data as well as the personal operating data mentioned above;
- personal data that does not infringe on the rights and freedoms of third parties, such as those protected by business secrecy.
This right is limited to processing based on consent or a contract as well as to personal data that you have personally generated.
This right does not include derived or inferred data, which is personal data created by Normandy Tourism Board.
YOUR RIGHT TO WITHDRAW YOUR CONSENT
As the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data without jeopardizing the previous operations for which you consented.
YOUR RIGHT TO APPEAL
You have the right to file a complaint with the CNIL on French territory, without prejudice to any other administrative or jurisdictional recourse.
YOUR RIGHT TO DEFINE POST-MORTEM GUIDELINES
You have the possibility to set guidelines for the storage, deletion and disclosure of your personal data after your death to a trusted, certified third party who is responsible for enforcing the wishes of the deceased in accordance to the requirements of the applicable legal framework.
HOW TO EXERCISE YOUR RIGHTS
All the rights listed above can be exercised:
- by postal mail to the following address: C.R.T. de Normandie (Normandy Tourism Board), 14 rue Charles Corbeau – 27000 Evreux – France, enclosing a copy of your ID and a proof of address;
- via our e-mail address email@example.com
- a procedure will then be sent to you in order to approve your identity.
Note: the documents sent as part of this procedure will be purely destroyed, and the data potentially collected during the procedure will be definitively erased, at the end of the procedure.
Please also note that all applications that do not comply with these guidelines will be ignored.
We undertake to respond to such requests within 1 month after reception of the request. This deadline may be extended to 2 months depending on the complexity and number of requests received, i.e. 3 months in total.
If you have an account, you can exercise your rights of access and amendment by logging into your account.
However, with regard to the exercise of the right to information, we may not be obliged to do so if:
- you already have this information;
- the registration or communication of your personal data is expressly provided for by law;
- the communication of information proves impossible;
- the provision of information would require disproportionate efforts.
ARTICLE 10 – SECURITY AND RECIPIENTS OF THE DATA
Normandy Tourism Board is dedicated to protect and secure the Personal Data you have chosen to communicate, in order to ensure data confidentiality and prevent data from being distorted, damaged, destroyed or disclosed to unauthorised third parties.
Normandy Tourism Board has taken physical, digital and organisational protection measures to prevent any loss, misuse, unauthorised access or distribution, alteration or destruction of Personal Data. Among these protection measures, Normandy Tourism Board integrates technologies specially designed to protect Personal Data during its transfer. However, despite Normandy Tourism Board’s efforts to protect your Personal Data, it cannot guarantee the infallibility of this protection due to unavoidable risks that may occur during the transmission of Personal Data.
As all Personal Data is confidential, access to it is limited to the employees and service providers of Normandy Tourism Board who need it in order to carry out their mission. All individuals with access to your Personal Data are bound by a clause of confidentiality and expose themselves to disciplinary measures and/or other sanctions if they do not comply with these obligations.
However, it is important that you are also cautious to prevent any unauthorized access to your Personal Data. You are responsible for maintaining the confidentiality of your password and account information. Therefore, you must ensure that you log off the website if you share a computer or a connection terminal.
ARTICLE 11 – DISPUTE RESOLUTION
Although Normandy Tourism Board has taken all reasonable measures to protect Personal Data, no transmission or storage technology is completely infallible.
However, Normandy Tourism Board is committed to ensuring the protection of Personal Data. If You have any reason to believe that the security of your Personal Data has been compromised or that it has been misused, please feel free to contact Monkey Factory at the following address: firstname.lastname@example.org.
Normandy Tourism Board will investigate complaints with regards to the use and disclosure of Personal Data and will attempt to resolve them in adequation with the principles set out in this Policy.
Unauthorized access to or misuse of Personal Data may constitute a violation of local law.
ARTICLE 12 – CONTACT
For any question concerning this Policy, to stop receiving information from Normandy Tourism Board or for any request to correct, complete, update or erase your Personal Data, feel free to send an e-mail to the following address: email@example.com.
ARTICLE 13 – EFFECTIVE DATE AND REVISIONS OF THE PERSONAL DATA PROTECTION POLICY
This Policy may be updated according to the needs of Normandy Tourism Board, circumstances or if required by law. We therefore invite you to regularly check for updates.
Update : 24/04/2020