General presentation:
The purpose of this note is to inform users about the processing of their personal data by the Tourist Office of Batz-sur-Mer, as well as the rights they enjoy in this matter.
This is a legal obligation of transparency stemming from the General Data Protection Regulation (GDPR) [1], a European standard transposed into French law since 2018 [2].
Definitions:
A personal data is information relating to an identified or identifiable natural person
A data processing: any operation or set of operations applied to personal data or sets of data, such as
Data controller:
The data controller is the town hall of Batz-sur-Mer.
Legal bases, purposes and retention periods of the processing:
The legal basis for processing is what gives a legal right to an organization to process personal data. There are six different legal bases and each implies different rights for the data subject.
The purpose of a processing is the purpose for which the processing was set up. Personal data is necessarily collected for a specific purpose.
The retention period of personal data: this is the life cycle of the data within the agglomeration.
Rights of data subjects
You have the right to access, correct, delete and restrict the processing of your data. If the legal basis is the public interest mission, you can also object to the processing of your data. If the legal basis is the execution of a contract, you can also exercise your right to data portability.
Visit cnil.fr for more information about your rights.
To exercise these rights or for any questions about the processing of your data in this device, you can contact the data protection officer by electronic means: dpo.batzsurmer@cap-atlantique.fr
If you believe, after contacting us, that your «data protection and freedoms» rights are not respected, you can address a complaint to the CNIL.
----------
[1] Regulation 2016/679 of the European Parliament and of the Council adopted on 27 April 2016.
[2] Personal data protection law no. 2018-493 of 20 June 2018.
The purpose of this note is to inform users about the processing of their personal data by the Tourist Office of Batz-sur-Mer, as well as the rights they enjoy in this matter.
This is a legal obligation of transparency stemming from the General Data Protection Regulation (GDPR) [1], a European standard transposed into French law since 2018 [2].
Definitions:
A personal data is information relating to an identified or identifiable natural person
- Direct: name, surname...
- Or indirect: social security number, voice, license plate....
- From a single data: photo...
- Or the crossing of a data set: a woman of such age living at such address, born on such day and member of such association (index bundle that allows to trace back to the individual)
A data processing: any operation or set of operations applied to personal data or sets of data, such as
- the collection
- the registration
- the amendment
- the consultation
- the use
- communication by transmission
- dissemination or any other form of provision
- the destruction...
Data controller:
The data controller is the town hall of Batz-sur-Mer.
Legal bases, purposes and retention periods of the processing:
The legal basis for processing is what gives a legal right to an organization to process personal data. There are six different legal bases and each implies different rights for the data subject.
The purpose of a processing is the purpose for which the processing was set up. Personal data is necessarily collected for a specific purpose.
The retention period of personal data: this is the life cycle of the data within the agglomeration.
| Data processing | Purpose | Legal basis | Retention period | Data access |
| Sign up for an animation | Allow to register for an animation | Public interest mission | 2 years then destruction | Tourist office, IT service provider |
| Service Contact | Ask a question to get information about a service | Public interest mission | 2 years then destruction | Tourist office, IT service provider |
| Satisfaction questionnaire | Get feedback from users on services | legitimate interest | 2 years then destruction | Tourist office, IT service provider |
| Services invoicing | Invoicing for services provided under management | execution of the contract | 10 years then destruction | Tourist office, IT service provider |
| Webshop | Management of purchases made on the webshop | execution of the contract | 10 years then destruction | Tourist office, IT service provider |
| Newsletter | Sign up for the Tourist Office newsletter | Public interest mission | As long as the person is registered | Tourist office, IT service provider |
| Various activities and tourist offers | Management of tourist activities and offers (markets, "cabines jaunes" etc.) | Public interest mission | Sorting after 5 years | Tourist office, IT service provider |
Rights of data subjects
You have the right to access, correct, delete and restrict the processing of your data. If the legal basis is the public interest mission, you can also object to the processing of your data. If the legal basis is the execution of a contract, you can also exercise your right to data portability.
Visit cnil.fr for more information about your rights.
To exercise these rights or for any questions about the processing of your data in this device, you can contact the data protection officer by electronic means: dpo.batzsurmer@cap-atlantique.fr
If you believe, after contacting us, that your «data protection and freedoms» rights are not respected, you can address a complaint to the CNIL.
----------
[1] Regulation 2016/679 of the European Parliament and of the Council adopted on 27 April 2016.
[2] Personal data protection law no. 2018-493 of 20 June 2018.