PRIVACY POLICY - NANS LEYVASTRE - SKI INSTRUCTOR - PARADISKI - LA PLAGNE - LES 3 VALLEES

Personal Data – Website Management

Activities related to the website https://www.nans-ski-fly.com/ involve the processing of personal data.

What does the privacy policy cover?

This policy informs you about the characteristics of these processing activities and your rights concerning your personal data.

This privacy policy is written in accordance with Law No. 78-17 of January 6, 1978 (known as the “Data Protection Act” or “DPA”) and the General Data Protection Regulation (GDPR) No. 2016/679.

Who is responsible for this policy?

The data controller is Mr. Nans Leyvastre. Contact details are:

Mr. Nans Leyvastre - 175 Chemin des Capelets - 84740 VELLERON

Siret 79265383400012

The controller can be reached at the following number: +33 6 28 68 80 09

The contact email address is: n.leyvastre@gmail.com

Who is this policy for?

This policy is addressed to the users of the site: internet users who browse the site. It also concerns:

• People who subscribe to the newsletter

• People who create an account on the site

• People who contact us via the site’s contact form

• People who post reviews and comments on our site

• People who make appointments with us via an e-calendar

• People we reference on the site as partners

Purposes (What are the collected data used for)?

The purpose of the processing is the management of the website.

This processing allows for:

• Management of newsletter subscriptions

• Management of information requests via the contact form

• Management of reviews and comments posted on the site

• Management of appointments (e-calendar)

• Referencing of partners on the site

Legal Basis for Processing

The legal bases for the processing are as follows:

• For the management of newsletter subscriptions, the legal basis is the subscriber’s consent.

• For the management of information requests via the contact form, the legal basis is legitimate interest (enabling online communication) or the execution of pre-contractual measures (preparing quotes at the request of individuals).

• For the management of reviews and comments posted on the site, the legal basis is the consent of the individuals concerned.

• For the referencing of partners on the site, the legal basis is the consent of these individuals.

Data Retention Period

The data subject to processing are kept for a period not exceeding the necessary duration for the purposes for which they are recorded (principle of minimization of processing).

The maximum retention periods are as follows:

• For the management of newsletter subscriptions: the email address is retained as long as the individual does not unsubscribe.

• For the management of information requests via the contact form: 3 years from the request.

• For the management of reviews and comments posted on the site: 5 years from the publication.

• For the referencing of partners on the site: 5 years from the publication.

Data Processed

The data controller processes the following categories of data:

• Civil status, identity, identification data, images (name, first name, address, photograph, date and place of birth, etc.)

• Connection data (IP addresses, logs, device identifiers, login credentials, timestamp information, etc.)

Mandatory or Optional Nature of Data Collection

The collected data are mandatory to achieve the processing purposes.

Sources of Data

The data are directly provided by the concerned individual.

Recipients of the Data

The collected personal data are reserved for the use of the data controller. No personal data is transferred by the data controller to recipients.

What security measures are implemented?

The data controller implements appropriate technical and organizational measures to ensure a level of security suitable to the risk.

The data controller ensures that any individual acting under their authority or that of a processor, who has access to personal data, does not process them except under instructions from the controller, unless required to do so.

The following specific security measures have been taken:

The website hosting is provided by Wix.com Inc.

Existence or Non-Existence of Data Transfers Outside the European Union and Associated Guarantees

The data controller carries out personal data transfers outside the European Union.

The data controller commits to ensuring that these transfers are made:

• To countries presenting an adequate level of protection according to European data protection authorities or with appropriate safeguards under Article 46 of the GDPR or

• In compliance with Article 49 of the GDPR.

Automated Decision-Making

The processing does not involve fully automated decision-making.

Fate of Personal Data After Death - Right of Access, Rectification, Deletion, and Portability

The individual concerned by processing can define directives regarding the conservation, deletion, and communication of their personal data after their death. These directives can be general or specific.

The individual concerned by processing also has the right of access, opposition, rectification, deletion, and, under certain conditions, portability of their personal data. The individual has the right to withdraw their consent at any time if consent is the legal basis for the processing.

The request must indicate the first and last name, email or postal address of the concerned individual, be signed, and accompanied by a valid proof of identity.

They can exercise these rights by contacting:

Mr. Nans Leyvastre - 175 Chemin des Capelets - 84740 VELLERON

Complaint

The individual concerned by processing has the right to file a complaint with the supervisory authority (CNIL): https://www.cnil.fr/fr/webform/adresser-une-plainte