PRIVACY POLICY

COMPAGNIE DES BATEAUX DU LAC D’ANNECY

Compagnie des Bateaux du Lac d’Annecy, a company of the Tourisme Participations group, ensures the security and confidentiality of personal data.
We comply with all French and European regulatory and legislative provisions relating to the protection of personal data.

We apply an extremely strict privacy policy to guarantee the protection of personal data of users of our websites and other applications:

  • Each user remains in control of their data. Data are processed transparently, confidentially and securely.

  • We are committed to continuously protecting our users’ data in accordance with the amended French Data Protection Act of 6 January 1978 (the “LIL”) and the EU General Data Protection Regulation of 27 April 2016 (the “GDPR”).

PURPOSE OF THIS POLICY

We place great importance on protecting your Personal Data.

We have developed this policy to inform you of the conditions under which we collect, process, use and protect your Personal Data. Please read it carefully to understand which categories of Personal Data are collected and processed, how we use these data, and with whom we may share them. This policy also describes your rights and how you can contact us to exercise them or to ask any questions regarding your Personal Data.

This Policy may be amended, supplemented or updated, notably to comply with legal, regulatory, case-law or technical developments. However, your Personal Data will always be processed in accordance with the policy in force at the time of collection, unless a mandatory legal provision provides otherwise with retroactive effect.

This Policy forms an integral part of the Website’s Terms of Use.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The controller of Personal Data is:
LA COMPAGNIE DES BATEAUX DU LAC D’ANNECY
Registered office: 2 Place aux Bois, 74000 Annecy – France
SIRET: 349 609 0400 0010
EU VAT number: FR82349609040
Legal form: SASU (simplified joint-stock company with a sole shareholder)
APE code: 5030 Z
Share capital: €311,000.00
Tel.: +33 (0)4 50 97 38 37
Email: info@bateaux-annecy.com

Groupe Tourisme Participations
Registered office: Jardins des belles rives, Grand Port, 73100 Aix-Les-Bains – France
SIRET: 522 119 8090 0021
EU VAT number: FR44522119809
Legal form: Public limited company with a board of directors
APE code: 6420 Z
Share capital: €1,904,472.00
Tel.: +33 (0)4 79 63 45 00
Email: info@bateaux-aixlesbains.com

DEFINITIONS

“Personal Data” means any information relating to an identified or identifiable natural person, directly or indirectly, by reference to a name, an identification number, or to one or more factors specific to that person.

“we” or “our” means Compagnie des Bateaux du Lac d’Annecy, a company of the Tourisme Participations group.

“you” means any user/visitor of the Website.

“Website” means the Compagnie des Bateaux du Lac d’Annecy site available at: https://www.bateaux-annecy.com/.

COLLECTION & ORIGIN OF PERSONAL DATA

We may collect your Personal Data directly (notably via the data collection forms available on our Website) or indirectly (notably via our service providers and/or Website technologies).

We undertake to obtain your consent and/or to allow you to object to the use of your data for certain purposes whenever necessary.

In all cases, you will be informed of the purposes for which your data are collected via the various online data collection forms and via the Cookie Policy.

TYPES OF PERSONAL DATA WE COLLECT AND USE

We may collect and process, in particular, the following types of Personal Data:

  • information you provide by completing forms on the Website (e.g., for registration, surveys, marketing purposes, etc.);

  • information you provide for authentication purposes;

  • information you provide for the management of an order or a service;

  • information via posts, comments or other content you publish on the Website.

Personal Data identified by an asterisk in the collection forms are mandatory because they are necessary to process your request. If you do not provide these mandatory details, we will be unable to process the relevant operation(s).

PERSONAL DATA WE COLLECT AUTOMATICALLY

We collect certain information automatically when you visit the Website in order to personalize and improve your experience. We collect this information through various means, namely:

Cookies
A “cookie” is a small information file sent to your browser when you visit our Website and stored on your device. This file includes information such as domain name, internet service provider, operating system, and the date and time of access. Cookies will not damage your device.

Cookies are not used to determine the identity of an individual visiting our Website. They enable us to determine your geographic location and display language in order to improve your browsing. They also allow us to process information about your visit, such as pages viewed and searches performed, to improve Website content, track your interests and offer the most suitable content.

If you do not wish to receive cookies from our Website, you can configure your browser. Cookie preference settings differ for each browser and are described in your browser’s help menu, which explains how to change your cookie preferences.

However, we recommend that you do not disable our cookies. Please note that if you block, turn off or reject our cookies, some pages of our Website may no longer display correctly or you may be unable to use certain services offered. In such cases, we disclaim any liability for the degraded operation of our services resulting from our inability to store or access cookies necessary for their functioning that you have refused or deleted.

Finally, by clicking the social media icons (Instagram, Facebook, LinkedIn, etc.) that may appear on our Website—and if you have accepted cookies by continuing to browse—the relevant social networks may also place cookies on your devices (computer, tablet, mobile phone). These cookies will be placed only if you consent by continuing to browse the Website. You may withdraw your consent at any time.

For more information, please consult our Cookie Policy.

IP addresses
An IP address is a unique identifier used by certain electronic devices to identify themselves and communicate with each other on the Internet. When you visit the Website, we may use the IP address of the device you use to connect. We use this information to determine the general physical location of the device and to understand the geographic regions from which Website visitors come.

Statistics
The Website uses Google Analytics to generate statistical reports. These reports indicate, for example, how many users have visited the Website, which pages were visited, and from which geographic area users come. Information collected for statistical purposes may include, for example, your IP address, the website from which you arrived on our Website, and the type of device you use. Your IP address is masked in our systems and will only be used when necessary to resolve technical issues, administer the Website, and understand visitor preferences. Traffic information is available only to authorized personnel. We do not use this information to identify visitors and we do not share it with third parties.

SOCIAL NETWORKS

You can click the social media icons (Instagram, Facebook, LinkedIn, etc.) appearing on our Website.

Social networks improve the user-friendliness of the Website and help promote it through sharing. Video-sharing services enrich our Website with video content and increase its visibility.

When you click these buttons, we may access the personal information you have made public and accessible from your profiles on the relevant social networks. However, we do not create or use any independent databases from these social networks based on personal information you may post there, and we will not process any data relating to your private life via this channel.

If you do not want us to access personal information published in the public area of your profiles or accounts, use the tools provided by the relevant social networks to limit access to these data.

PURPOSES FOR WHICH WE USE PERSONAL DATA

We use your Personal Data in particular for the following purposes:

  • responding to your requests, such as information, searches, newsletters or other content;

  • providing the services and benefits ordered on the Website and/or in one of our establishments;

  • conducting surveys and compiling statistics;

  • personalizing and improving your experience on our Website;

  • offering you deals for our products and services and/or those of our partners;

  • any other purpose that we may specify at the time your data are collected.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

We process your Personal Data as part of the performance and management of our contractual relationship with you, our legitimate interest in improving the quality and operational excellence of the services we offer, or in order to comply with certain regulatory obligations.

Processing may also be carried out on the basis of your prior consent where this is requested in certain situations.

DISCLOSURE OF PERSONAL DATA

The security and confidentiality of your data are of great importance to us. We therefore restrict access to your Personal Data to members of our staff who need to know them in order to handle your request or provide the requested service.

We do not disclose your Personal Data to unauthorized third parties. However, we may share your data with entities of the Tourisme Participations group and authorized service providers (e.g., technical providers—hosting, maintenance—advisors, etc.) engaged to deliver our services. We do not allow these service providers to use or disclose your data except as necessary to perform services on our behalf or to comply with legal obligations. In addition, we may share Personal Data about you (i) if required by law or legal process, (ii) in response to a request from public authorities or officials, or (iii) if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.

Information processed as part of data collection via a contact form on this website is transmitted to the following recipients:

  • Individuals responsible for the management and direction of Compagnie des Bateaux du Lac d’Annecy;

  • Individuals responsible for business development at Compagnie des Bateaux du Lac d’Annecy;

  • Individuals responsible for managing the website of Compagnie des Bateaux du Lac d’Annecy and communications on social networks;

  • Public bodies and authorities, as well as public officers and auxiliaries of justice, strictly within the framework of legal proceedings requiring Tourisme Participations to provide such data.

RETENTION PERIOD FOR YOUR PERSONAL DATA

We will retain your Personal Data for no longer than is necessary for the purposes for which they are collected and processed, extended, where applicable, by the applicable statutory or regulatory limitation periods.

The retention period for Personal Data submitted via a contact form on this website varies depending on whether you—or the organization on whose behalf you contacted us—have the status of customer or prospect with respect to Compagnie des Bateaux du Lac d’Annecy.

As part of processing consisting of collecting data via a contact form on this website, Tourisme Participations stores data on a secure messaging service provided by Office 365.

Accordingly, Tourisme Participations retains:

  • Personal Data concerning individuals who submitted a request via a contact form on this website, or third parties whose contact details were lawfully provided to Compagnie des Bateaux du Lac d’Annecy by said individuals, on behalf of an organization that has, or has had within the last three years, a business relationship with Compagnie des Bateaux du Lac d’Annecy:

    • In active archives: throughout the business relationship and for three years from its end;

    • In intermediate archives: for seven years from the end of the active-archive retention period.

Active-archive retention periods may be interrupted if rights are exercised as provided in this Privacy Policy, or in the event of withdrawal of consent for the relevant processing.

SENSITIVE PERSONAL DATA

As a rule, we do not collect sensitive Personal Data via our Website. “Sensitive Personal Data” means any information concerning racial or ethnic origin, political opinions, religion or philosophical beliefs, trade-union membership, health data, or data concerning a natural person’s sex life or sexual orientation. This definition also includes Personal Data relating to criminal convictions and offences.

If the collection of such data is strictly necessary to achieve the stated processing purpose, we will do so in compliance with applicable data protection laws and, in particular, with your explicit prior consent and under the conditions described in this Privacy Policy.

PERSONAL INFORMATION AND MINORS

The Website is intended for adults capable of entering into obligations under the laws of their country of residence.

Users under 16 years of age or lacking capacity must obtain the prior consent of their legal guardian before entering data on the Website.

The age of 16 may be lowered to 13 depending on the legislation applicable in your habitual residence.

YOUR RIGHTS

Under applicable law, you have certain rights regarding the processing of your Personal Data.

Right of access: You may request access to your Personal Data. You may also request the rectification of inaccurate Personal Data or that incomplete data be completed. You also have the right to know the sources of these Personal Data.

Right to erasure: Your right to be forgotten allows you to request deletion of Personal Data where:
(i) the data are no longer necessary for the purposes for which they were collected and processed;
(ii) you withdraw your consent (where processing is based on consent), without affecting the lawfulness of processing prior to withdrawal;
(iii) you object to the processing;
(iv) your data have been processed unlawfully;
(v) your data must be erased to comply with a legal obligation; or
(vi) erasure is required to ensure compliance with applicable law.

Right to restriction: You may also request restriction of processing of your Personal Data if:
(i) you contest the accuracy of the data;
(ii) we no longer need the data for processing purposes; and
(iii) you have objected to the processing.

Right to object to direct marketing: You may at any time ask us to stop sending you advertising or marketing communications by contacting us directly and free of charge, using the unsubscribe link included in any marketing email we may send you, or by emailing the address provided below. Such objection does not affect the lawfulness of communications sent before it took effect.

In accordance with Article L.223-2 of the French Consumer Code, users are informed of their right to register free of charge on the telephone marketing opt-out list (www.bloctel.gouv.fr).

Right not to be subject to a decision based solely on automated processing: You may choose not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

Right to data portability: You may ask us to provide your Personal Data in a structured, commonly used and machine-readable format, or to have them transmitted directly to another controller, provided that:
(i) the processing is based on your consent or on the performance of a contract with you; and
(ii) it is carried out by automated means.

Right to give post-mortem instructions: Under French data protection law, you may also define instructions regarding the exercise of your rights after your death (notably concerning retention, deletion and/or disclosure of your data) and designate a person responsible for exercising these rights.

Right to lodge a complaint with a supervisory authority: If you have concerns or complaints regarding the protection of your Personal Data, you have the right to lodge a complaint with the French Data Protection Authority (CNIL) via: www.cnil.fr.

However, please first submit any request to us at the address below so that we can handle it and seek an amicable solution.

To exercise these rights, you may submit your request via our contact form, indicating your first and last name and the purpose of your request. We may ask for additional information to identify you and to process your request.

SECURITY

We implement all appropriate technical and organizational measures to ensure the security and confidentiality of Personal Data processing.

In this respect, and taking into account the nature of the Personal Data and the risks presented by processing, we take all necessary precautions to preserve data security and, in particular, to prevent data from being distorted or damaged or accessed by unauthorized third parties (physical security of premises, authentication procedures with personal and secure access via confidential usernames and passwords, connection logging, encryption of certain data, etc.).

CUSTOMER RELATIONSHIP MANAGEMENT DATABASE (“CRM DATABASE”)

We use a database to manage and monitor our relationships with existing and potential customers. This database contains Personal Data of employees of our customers or other partners with whom we have, or wish to establish, a business relationship. These data—used solely for these purposes—include, in particular: contact details (name, first name, phone number, email address, etc.), publicly available information, responses to targeted emails, and other information collected and recorded by our staff in the course of interactions with our customers and partners. If you wish to be removed from our CRM databases, please contact us via our contact form.

LINKS TO OTHER SITES

We occasionally provide links to other websites for convenience and information. Most of these are Tourisme Participations sites or partner sites, and some operate independently from our sites and are not under our control. These third-party sites may have their own privacy notices or terms of use, which we strongly encourage you to review. We disclaim any responsibility for the content of these sites, for products and services that may be offered there, or for any other use.

UPDATES TO OUR PRIVACY POLICY

This Policy takes effect from 6 May 2020. We may update or modify this Privacy Policy as needed. In such case, the changes will apply only after a period of 30 business days from the modification. Please check this page periodically to monitor any changes.

UNSUBSCRIBE

If you subscribed to certain services via our Website and no longer wish to receive emails in the future, please visit the unsubscribe page corresponding to the subscription you signed up for.

CONTACT US

If you have any questions, please contact us using our contact form.