Personal Data Protection Charter
In the context of operating our business and in accordance with the EU General Data Protection Regulation (GDPR) and the French data protection act (Loi informatique et libertés), we have drawn up a data protection charter, which ensures that the processing of the personal data of our contacts (customers, partners and staff) is carried out in a manner that respects their rights and their privacy.
The charter hereafter provides the answers to questions that our contacts may have regarding the collection, use, processing, storage, security, access and sharing of the personal data collected by us.
Collection and use of data
Data collected: In the context of operating our business, we may be required to collect personal data through different means on various occasions: telephone contact/email/form, online enquiry, administrative formalities, service delivery, interview/appointment, access control (barrier, wifi, etc.) and video-surveillance.
We undertake to collect personal data in a way that is appropriate, proportionate and restricted to the intended purpose.
We may collect different types of personal information:
-
- Marital status – Identity (first and last names, date of birth, contact details, copy of personal ID, photo, etc.)
- Personal life (family situation, lifestyle habits, etc.)
- Professional life (education, qualifications, professional training, distinctions, positions held, personal plans, etc.)
- Information of a monetary or financial nature (bank details, income, financial situation, fiscal status, etc.)
- Website use (e.g.: cookies, tracers, navigation data, audience measurements etc.)
COOKIES
We inform you that in using our website cookies may be automatically installed to your web browser. Cookies are blocks of data that do not identify you, but are used to record information about your navigation on our website.
Most web browsers are configured to accept cookies. If you do not wish to accept them, you can configure your computer to refuse them or to alert you when they are stored. If you refuse to use cookies, our ability to offer you personalized services will be restricted. Information about cookies is also available on the CNIL website (in French).
You have the right to access, rectify and remove the personal data communicated through cookies under the terms mentioned above. However, for technical reasons, anyone who disables cookies may have limited access to our website. Your personal data are sent only to the website operator.
We are required to comply with the provisions of the French data protection act (Loi relative à l’informatique, aux fichiers et aux libertés), the violation of which is punishable by criminal penalties. In particular, with regard to the personal data we access, we must abstain from any collection, misuse and, in general, any act likely to violate a person’s right to privacy or harm their reputation.
Purposes and lawfulness of processing: We process personal information only for the specific and legitimate purposes described in this charter.
- Service delivery
- Legal basis for processing: Item b) of Paragraph 1. of Article 6 of the General Data Protection Regulation – GDPR (Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract).
- Administrative operations
- Legal basis for processing:
- Item f) of Paragraph 1. of Article 6 of the General Data Protection Regulation – GDPR (Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party)
- Item c) of Paragraph 1. of Article 6 of the General Data Protection Regulation – GDPR (Processing is necessary for compliance with a legal obligation)
- Legal basis for processing:
- Other data collection:
- Legal basis for processing: Item a) of Paragraph 1. of Article 6 of the General Data Protection Regulation – GDPR (The data subject has given consent to the processing of his/her personal data for one or more specific purposes)
Data processing and third party use: The personal data collected is, as a general rule, only for our internal use and that of our partners when they are stakeholders in the various data processing operations performed.
Depending on the data processing operation, these partners may be:
- EU or government departments, government agencies, local authorities,
- Private-sector partners: subcontractors, service providers, workshop leaders, training providers,
Automated decision making: No automated decision making is used in the various data processing operations performed.
Data storage: Camping Au Port-Punay only stores your personal data as long as is necessary to achieve the stated purposes or to fulfil its legal obligations.
Transfer of data outside the EU: No transfer of data outside of the European Union is performed.
Information and freedom of choice with regard to personal data
By the term ‘personal information’, also referred to as ‘personal data’, the law means any information concerning an identified or identifiable physical person.
– A person is identified when his or her identity (first and last names) appears in a file.
– A person is identifiable when a file includes information by which he or she can be identified indirectly (e.g.: identification number or code, IP address, telephone number, photo, etc.).
Our contacts must be made aware of their rights and how to exercise those rights: They have the right to object to and restrict data processing and the right to access, modify, transfer and erase personal data.
Right to object to data processing: All persons have the right to object on legitimate grounds to the processing of their personal data.
Right to restrict data processing: All persons have the right to demand that the processing of their personal data be restricted to a specific purpose.
Right to access, rectify and remove (erase) personal data: All persons may ask the file holder to send them any data concerning them. They may verify all the information stored during processing and, if necessary, have the information corrected or erased.
Right to data portability: All persons have the right to request that personal information about them be provided to them in a suitable format or, failing that, directly transmitted to a third party.
Data security: We take all necessary security measures to prevent any unauthorized access, modification, disclosure or destruction of data.
Access to personal data is strictly reserved for our employees and subcontractors who need access to it in order to perform, develop or improve our services. These persons are bound by confidentiality obligations and may be subject to sanctions if this commitment is breached.
Confidentiality clause: All of our staff undertake, at the time of the signing of their commitment, not to disclose facts, information or documents of which they become aware in the performance of their duties.
To exercise your rights, please contact us in writing at: CAMPING AU PORT-PUNAY, Morgan MOREAU, Allée Bernard Moreau – Les Boucholeurs, F-17340 Châtelaillon-Plage or contact@camping-port-punay.com
To lodge a complaint with the CNIL, go to www.cnil.fr > ‘Mes Démarches’ > ‘Agir’ > ‘Déposer une plainte’
Charter drawn up in Châtelaillon-Plage on 19 November 2018