In accordance with the provisions of the legislation in force on the protection of personal data, we inform you that your data will be integrated into the processing system belonging to the owner named below.

Presentation of the website

In accordance with Article 6 of Law No. 2004-575 of 21 June 2004 on confidence in the digital economy, users of the site are informed of the identity of the various parties involved in its creation and monitoring :

Owner

CDC

Address of the site

https://viapatrimonia.eu/

Owner’s e-mail address

gritcom@tourisme.corsica 

Data controller

In accordance with Article 4.7 of the GDPR, the owner is responsible for the processing of personal data collected on the site. The owner determines the purposes and means of the processing carried out.

Why does the owner collect personal data?

The owner collects data for the following purposes: analysis of site usage behaviour. Some data are collected automatically. You are then scrupulously informed beforehand. Other data are collected by law and/or regulation, and others are of strategic and commercial importance and require your prior consent. In each case, the owner ensures that the regulations are respected, the requirements of which vary from simple information to the prior collection of your consent.

1) Data collected automatically

– The device and browser used
– IP address (anonymised)
– Date and time of your visit
– Your browsing history

In order for this data collection to be permitted by the regulations, we provide you with the mechanism to object by updating your preferences in the “privacy policy” section of the site. This possibility is available on all browsers and all types of terminals (including smartphones and tablets). Please contact us using the contact form if you have any difficulties using this mechanism. In accordance with the regulations, we would also like to inform you that: The data collected is not cross-referenced with other processing (customer files or statistics on visits to other sites for example).

1. The data collected in this way is only used to produce anonymous statistics
2. We do not track your browsing on other websites.
3. The IP address collected does not allow us to obtain a more precise geolocation than the scale of a city: these data are not kept beyond 13 months from your first visit.
4. Raw traffic data with an associated identifier should also not be kept for more than 13 months.

Any collection of data beyond that required for these statistics requires your prior consent if not assisted by another legal basis.

2) Data collected when you contact customer service

You may provide us with personal data when you contact customer service, so that we can process your requests. Again, the legal basis for this is Article 6.1.b of the GDPR. The legal basis for this collection and processing is Article 6.1.b of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).

Data retention

In accordance with the regulations in force, the owner informs you that the data will be kept for the period strictly necessary for its processing, in accordance with the regulations in force locally. For example, in accordance with French law, we are obliged to keep payment and billing information for a period of 10 years.

Data processing

The owner informs that it will process the data in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner. The owner therefore undertakes to take all reasonable steps to ensure that data is deleted or corrected without delay where it is inaccurate. The owner may need to contact you by telephone to ensure that the information provided is correct.

The owner will process your data in order to be able to contact you again following your contact request.

User rights

In accordance with Articles 15 to 22 GDPR, regarding the data we hold about you, you have the following rights :
– right of access (Article 15 of the GDPR)
– right of rectification (Article 16 of the GDPR)
– right to erasure (Article 17 of the GDPR)
– right to restrict processing (Article 18 of the GDPR)
– right to notification of data: rectification, erasure, restriction (Article 19 GDPR)
– right to data portability (Article 20 of the GDPR)
– right to object (Article 21 of the GDPR)
– right not to be profiled (Article 22 of the GDPR)

You may exercise these rights by sending your request to the postal or e-mail address of the owner named above. Any request for the exercise of a right must be accompanied by a copy of a valid proof of identity to enable us to ensure that the request is indeed made by the legitimate owner of the data concerned. You may also contact the relevant supervisory authority (CNIL) to make any complaint you consider appropriate.

Data transfer

The owner informs that he will not transfer your data to a third party.

Duration of data retention

The periods of retention of your data vary according to the state of the law and when the constraints are lesser, according to the recommendations of the CNIL and our needs.

As an indication, you will find in the attached table the retention periods of the main data applied by the owner :

Changes to this Privacy Policy

This privacy policy was last updated on 29 July 2020. From time to time, the owner may make changes to its privacy policy and update it on the website. Any updates to this policy will be communicated to you by means of easily identifiable notices on the website and/or by sending you information by e-mail.