Privacy Policy

Article 1 – PREAMBLE

This privacy policy applies to the website https://gites-en-normandie.eu/ and, where applicable, to all of its subdomains. The purpose of this privacy policy is to inform website users about:

The way in which their personal data is collected and processed. Personal data includes any data that can identify a user. This includes, in particular, their first and last name, email address, location, and IP address;

What are the users' rights regarding this data?

Who is responsible for the processing of personal data collected and processed?

To whom is this data transmitted?

Possibly, the site's policy regarding "cookie" files.

This privacy policy supplements the legal notices and the General Terms and Conditions of Use that users can consult on the website.

Article 2 – GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of user data on the site comply with the following principles:

Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that their data is being collected, and for what reasons

Limited purposes: the collection and processing of data is carried out to meet one or more specific purposes as defined in these terms and conditions of use;

Minimizing data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;

Data retention is limited in time: data is kept for a limited period, of which the user is informed.

Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if at least one of the following conditions is met:

The user has expressly consented to the processing;

The processing is in response to a legal obligation;

Article 3 – PERSONAL DATA COLLECTED AND PROCESSED DURING NAVIGATION ON THE SITE

The data controller will store all collected data in its site's computer systems under reasonable security conditions for a maximum period of 3 years.

3.1 – PERSONAL DATA COLLECTED AND PROCESSED

The personal data collected on the website https://gites-en-normandie.eu/ are as follows:

Civil status, identity, identification data (e.g., name, surname, address, email, etc.)

Connection data (e.g., IP addresses, logs, device identifiers, login credentials, timestamp information, etc.)

3.2 – METHOD OF COLLECTING PERSONAL DATA

This data is collected when the user performs one of the following actions on the website:

Website navigation.

Entering a contact form

Supplementary collection method 1

Supplementary collection method 2

Article 4 – PURPOSE OF PROCESSING PERSONAL DATA

The collection and processing of data serve, in particular, the following purposes:

Visitor Statistics Tracking.

Monitoring of processed cases

And more generally, all activities related to the information presented on the website.

Article 5 – TRANSMISSION OF DATA TO THIRD PARTIES

During their browsing of the Site, users' personal data cannot be transmitted to external service providers.

We will never share your personal data with third-party companies for marketing and/or commercial purposes without your prior consent.

We may be required to disclose your personal data to administrative or judicial authorities when such disclosure is necessary to identify, apprehend, or prosecute any individual who may infringe upon our rights, the rights of any other user, or the rights of a third party. Finally, we may be legally obligated to disclose your personal data, and in such cases, we cannot object.

Article 6 – DATA HOSTING

The website https://gites-en-normandie.eu/ is hosted by: IONOS SARL, whose registered office is located at the following address:

7 Place de la Gare – 57200, Sarreguemines, France. The data collected and processed by the site is exclusively hosted and processed in France.

Article 7 – DATA CONTROLLER AND DATA PROTECTION OFFICER

7.1 – THE DATA CONTROLLER

The data controller for personal data is Mr. and Mrs. Sileghem. They can be contacted by email at: gites.en.normandie@gmail.com

The data controller is responsible for determining the purposes and means of processing personal data.

7.2 – OBLIGATIONS OF THE DATA CONTROLLER

The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed and to respect the purposes for which this data was collected.

The site uses an SSL certificate to ensure that information and data transfers through the site are secure. An SSL (Secure Socket Layer) certificate is designed to secure the data exchanged between the user and the website.

Furthermore, the data controller undertakes to notify the user in the event of rectification or erasure of their data, unless this would involve disproportionate effort, cost, or procedures. In the event that the integrity, confidentiality, or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.

Article 8 – USER RIGHTS

In accordance with regulations concerning the processing of personal data, the user has the rights listed below.

In order for the data controller to process their request, the user must provide their first and last name, email address, and, if applicable, their account, personal space, or subscriber number. The data controller is required to respond to the user within a maximum of 30 days.

8.1 – PRESENTATION OF USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Right of access, rectification and erasure

Users can access, update, modify, or request the deletion of their personal data by following the procedure outlined below: Users must send an email to the data controller, specifying the subject of their request and using the contact email address provided above. If applicable, users have the right to request the deletion of their personal account by following this procedure: Users must send an email to the data controller, specifying their account number. Data deletion requests will be processed within 30 business days.

Article 9. Right to data portability

The user has the right to request the portability of their personal data, held by the site, to another site, by complying with the following procedure: the user must make a request for the portability of their personal data to the data controller, by sending an email to the address provided above.

9.1. Right to restriction and objection to data processing

The user has the right to request the restriction of or to object to the processing of their data by the website, and the website cannot refuse this request unless it can demonstrate compelling legitimate grounds that override the interests, rights, and freedoms of the user. To request the restriction of the processing of their data or to object to the processing of their data, the user must follow this procedure: the user must submit a request to restrict the processing of their personal data to the data controller by sending an email to the address provided above.

9.2. Right not to be subject to a decision based solely on automated processing

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning him or her, or similarly significantly affects him or her.

9.3. Right to determine the fate of data after death

Users are reminded that they can organize what should happen to their collected and processed data if they die, in accordance with Law No. 2016-1321 of October 7, 2016.

9.4. Right to appeal to the competent supervisory authority

In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if he believes that one of the rights listed above has been infringed, he has the right to contact the CNIL (National Commission for Information Technology and Freedoms, www.cnil.fr ) or any competent judge.

Article 10 – PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.

If the user is a minor under 15 years of age, the agreement of a legal representative will be required in order for personal data to be collected and processed.

The website publisher reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the agreement of a legal representative before browsing the site.

Article 11 – CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

This privacy policy can be viewed at any time on the website.

The website publisher reserves the right to modify it in order to ensure its compliance with applicable law.

Therefore, users are encouraged to regularly review this privacy policy to stay informed of any changes.

Users are hereby informed that the latest update to this privacy policy took place on 23/07/2021.

Article 12 – USER ACCEPTANCE OF THE PRIVACY POLICY

By browsing the site, the user acknowledges having read and understood this privacy policy and accepts its terms, particularly with regard to the collection and processing of their personal data