Introduction
For SOGESPRAL, the protection of personal data is fundamental because it reflects the relationship we have with you. It is important to us to protect your privacy and that of your partners and collaborators, with regard to the information you entrust to us.
The main purpose of this policy statement is to inform you about the collection and use of your personal data by our firm, but also to present you with the means that will allow you to control this personal information.
Legal context
This data protection policy is part of a legal framework defined by the General Regulations on Data Protection, applicable since 25 May 2018 and the amended French Data Protection Act (“Loi Informatique et Libertés”).
These strong legal provisions provide you with high guarantees in terms of data protection and allow you to have greater control over the use of your data when you entrust them to organizations such as ours.
Definitions
Personal data is any information relating, whether directly or indirectly, to an identified or identifiable natural person. It is for example your name, age, telephone number, an identifier or any other information concerning you such as your socio-professional category or your interests.
Data processing is any operation or set of operations carried out whether or not using automated processes and applied to data or sets of data of a personal nature. For example, it is the collection, recording, use, dissemination, storage, etc. of personal data.
The purpose is the reason for which personal data is collected or used. This is for example the keeping of your accounts or the preparation of pay slips and social declarations within the framework of our mission.
What personal data do we collect?
In accordance with the principle of minimization, we collect only the data necessary to carry out our missions. SOGESPRAL may collect this data, either directly from you by telephone or physically, or via the website.
- When browsing either of our two websites:
The simple consultation of the websites as a visitor does not require a nominative registration. On the other hand, certain information about you is collected automatically during your navigation on the websites (IP address, time of visit, type of browser, as well as the categories of the website visited).
During your navigation on the sites, you will be asked to accept cookies. These text files are deposited on the hard disk of your computer, and then read by a server, in order to facilitate your navigation by recognising you during your subsequent visits to the websites. You can disable cookies at any time in your browser settings. However, please be aware that certain functionalities of its site are not guaranteed if cookies are blocked.
Within the framework of the use of the two websites, SOGESPRAL can also provide you with an online customer space, accessible via a personal login and password, as well as a dedicated professional space, for the rental of accommodation.
For more information, you can consult our cookie policy on the following link: [lien vers la politique des cookies].
- When you contact us :
When you wish to contact us through the online form or in resort, you will be asked for certain personal data. These include your first and last name, e-mail address and telephone number.
Some data is optional, and if it can in particular facilitate our exchanges with you, you can voluntarily choose whether or not to provide it. In this case, it is clearly indicated as such, next to the requested information.
We do not collect sensitive data such as religion, trade union membership, racial and ethnic origins, criminal convictions or health-related data.
- When you register up for our services :
When you subscribe to our online or on-site services, we collect the information necessary for your registration and the management of your file such as :
- identification data (surname, first name)
- data concerning your personal life (postal address, telephone number, e-mail address, ...)
- economic data (checks, credit card number, ...).
We do not collect sensitive data such as religion, trade union membership, racial and ethnic origins, criminal convictions or health-related data..
- In your professional capacity:
When you enter our professional network, we may collect your name, first name, postal address, telephone number, e-mail address, photos presenting you in the context of your activity as well as economic and banking information.
We do not collect sensitive data such as religion, trade union membership, racial and ethnic origins, criminal convictions or health-related data.
Why we process your personal data?
- While browsing the website & when you wish to contact us:
The processing of your personal data is based on SOGESPRAL's legitimate interest in establishing our relations. For example, the information collected through the contact form is used to answer your questions, to contact you, to present our services, to define your needs, and to carry out our future legal and contractual obligations, if any.
- When you register for our services :
The data we collect and process when you register for our services allows us to carry out the services you order. In particular, they enable us to manage the ski area by issuing ski passes, to organise and manage the booking of your accommodation, to manage invoicing and to carry out all our legal and contractual obligations. They also allow us to send you the Newsletter when you subscribe to it. For the performance of our services, the provision of your personal data is therefore a requirement in order to be able to continue our business relationship with you.
SOGESPRAL does not make any automated decisions based on your personal data. No profiling is implemented during processing, and the data we collect will never be used without human intervention.
Who has access to your personal data?
Your personal data will only be transmitted to SOGESPRAL's internal services and to its partner, the OFFICE DE TOURISME DE PRALOGNAN, for the organisation of your stay. Each participant has access to the data relating to his or her area of intervention.
SOGESPRAL has recourse to service providers in particular in order to ensure the proper functioning of the two websites and the hosting in France of its database. SOGESPRAL also uses service providers for the management of ski passes, access control devices to the slopes and the management of emergency services: SKIDATA, LIFTOPIA, ARKIANE, 2L'AGENCE... The use of service providers is necessary for the proper performance of the services offered by SOGESPRAL.
SOGESPRAL does not and will not sell your personal data.
SOGESPRAL does not transfer your personal data outside the European Union.
How long do we keep your personal data?
- Your navigation data on the website:
SOGESPRAL only keeps certain data relating to navigation on our website, in particular IP addresses, for an indefinite period of time. This data can be accessed, modified and deleted on request.
- The data you provide to contact us:
The personal data you provide when you wish to contact us through the contact form will be kept for a maximum of 3 years.
- Your data in the context of the performance of our services:
We use and keep your customer data for as long as our contractual relationship lasts, in order to manage our exchanges, to follow the customer relationship, the transactions carried out, and to perform our engagements. At the end of the contract, we keep your data for 5 years in accordance with our legal obligations in terms of prescription.
What are your rights and how to exercise them?
In accordance with the regulations in force, you have the following rights concerning your personal data:
- Right of access: You may, at any time, access the personal data we hold about you. To do so, you may contact us in order to access your data and the purposes to which they are linked.
- Right of correction: If you notice an error, omission or ambiguity in your personal data, you can make a request to complete or proceed to a correction or clarification of your personal information.
- - Right of Deletion : You can also ask us to delete your personal data.
- Right to limitation of processing: You can claim the limitation of the future processing of your personal data under certain conditions: when you dispute the accuracy of a data, when you need it for the establishment, exercise or defence of your rights in court. You can also demand the limitation of the processing of your data if the processing is unlawful and you do not wish to have it deleted.
- Right to Portability: As a customer, you have the right to receive your data in a structured, commonly used and machine-readable format. You may also request that we pass on your personal data to another organisation.
- Right of opposition: You have, at any time, the right to object to the use of your personal data within the framework of the activities carried out by our company with regard to the processing of your data based on legitimate interest, such as the sending of news from SOGESPRAL for example.
In addition, we inform you that you have the right to lodge a complaint before a supervisory authority (CNIL): https://www.cnil.fr/fr/agir.
In order to exercise your rights or for any request for information and/or contact, please contact our Data Protection Officer:
SOGESPRAL
140 avenue de Chasseforet,
73710 PRALOGNAN LA VANOISE
