Privacy policy

Foreword

The Val d’Amboise Tourist Office strives to ensure that personal-data processing carried out on https://amboise-valdeloire.com/ is compliant with the General Data-Protection Regulation (GDPR) and the French Data-Protection Law. This data-protection policy applies to data processing carried out via the website https://amboise-valdeloire.com/. It informs you of the purpose(s) of the processing carried out, the legal grounds for processing, the data recipients and the duration of storage, security measures (general description), the existence of any data transfers outside of the European Union or the making of automated decisions, the use and management of cookies, your data rights and how to exercise them.

Who is the data controller for this website?

The data controller for the website https://amboise-valdeloire.com/ is the Val d’Amboise Tourist Office, located at Quai du Général de Gaulle – 37400 Amboise.
To find out more, consult the https://amboise-valdeloire.com/mentions-legales

Does this site collect personal data?

In accordance with Article 4.1 of the GDPR, personal data is any information that allows you to be directly or indirectly identified. This site collects personal data via its various contact forms. The personal data is freely communicated to the Val d’Amboise Tourist Office by the data subjects who give their consent to processing and acknowledge the information notice shown under the various contact forms. The data collected is appropriate, useful, necessarily and limited to the strict minimum. In particular, it concerns identification data (name and surname), professional data (company) and connection data (email address).

For what purposes is data collected?

Personal data is collected via the site’s various contact forms for the following purposes:

– Responding to site visitors’ messages.
– Receiving and processing your queries regarding our activities.
– Customer account creation and management
– Delivery of marketing and commercial information
– Satisfaction survey
– Prospect and customer management
– Creation of commercial statistics
– Recruitment
– Technical administration related to service providers (third-party maintenance, hosting, domain-name registration, certification authority)
– Site-security management

What is the legal basis for the processing carried out by this website?

The processing of your personal data by the Val d’Amboise Tourist Office is based:

– Your consent for all cases in which you have transmitted your personal data. Your consent can of course be withdrawn at any time.
– The execution of contractual or precontractual measures as part of your request for quote or the resulting commercial relationship.
– Respect for a legal obligation, in particular with regard to the exercise of your GDPR and French Data-Protection Law rights.

The Val d’Amboise Tourist Office considers that, with the exception of commercial prospecting operations subject to the user’s consent, all processing is necessary for the performance of the contract or the collection of data as part of precontractual measures. Commercial-prospecting operations are based on the data subject’s consent to the processing of their data.

What data is processed?

Processed data categories:
– Identity;
– Contact details (email address);
– Date and subject of the request;
– Next steps;
– Cookies;
– Activity statistics.

Mandatory nature of data collection:
– The Val d’Amboise Tourist Office contact form requires data to be collected in order to properly process the request.

Does this site use cookies?

When consulting this site, cookies are stored on your computer, tablet or smartphone. The Val d’Amboise Tourist Office may make the content or information presented on its website more pertinent or adapt these to your personal needs, in particular with the help of cookies. In no case can the Val d’Amboise Tourist Office identify a user via a cookie. In practice, we use cookies to monitor audience measurements. The cookies used by the Val d’Amboise Tourist Office on this website are therefore functional, technical and audience-measurement cookies.
You can accept or refuse cookies from the cookies information banner or manage your cookies settings thanks to the ‘Cookies management’ menu at the bottom of the page. For more information on cookies, consult the CNIL website.

To make our services more effective, the Val d’Amboise Tourist Office uses the following cookies:
– session
– consent
– audience measurement

Can I object to these cookies?

Yes, in several ways. If you do not want this website to place cookies on your computer, you can block them:

– by using a browser which refuses cookies by default;
– by suitably configuring your browser or installing an add-on to your browser, specifically designed to manage cookies;
– by configuring your browser to convey your wish not to be ‘tracked’ to the website (‘Do not track’). This website respects your choice.

Who are the recipients of data processed by this website?

Your personal data is, first and foremost, received by the Val d’Amboise Tourist Office, the data controller. It is processed only for the purposes indicated above. Your personal data may be processed on a one-off basis by the Val d’Amboise Tourist Office’s sub-processors (as provided for in Article 4.8 of the GDPR), in a strictly controlled manner. It is never communicated to third parties for commercial purposes.

Is personal data transferred outside of the European Union?

The personal data collected by this website is not transferred to actors located outside of the European Union. In the event of the contractual transfer of personal data, the Val d’Amboise Tourist Office ensures that recipients are located in the European Union. The Val d’Amboise Tourist Office also ensures all data recipients’ compliance with the GDPR.
How is the personal data collected by this website secured?
The Val d’Amboise Tourist Office undertakes to protect the personal data processed by this website in accordance with the state of the art. The main security measures to protect your personal data are listed below:

– All pages of the Val d’Amboise Tourist Office website as protected by the https protocol.
– Personal data is deleted upon the request of the data subject or the expiry of the storage period;
– An internal password-management policy is implemented in accordance with the directives of the ANSSI (French Information-Systems Security Agency);
– Data is stored on a 100% French sever respecting maximum technical security.

What is the storage period for personal data processed by the website?

All personal data collected from the ‘client’ user will be stored for the full duration of the commercial relationship and for a period of 5 years following the end of said commercial relationship (for example, from the data of your last purchase, etc.). All personal data collected from ‘prospect or influencer’ users are retained for 3 years following the last contact from the user (for example, request for information on a product, a click on a hypertext link, etc.).

Is the site secured?

Security measures are implement in accordance with the Val d’Amboise Tourist Office’s information-systems security policy.

What are the rights of people concerned by the processing carried out by this website?

You can visit our website without having to identify yourself or provide your personal information. However, you can request that we contact you via a specific form. We collect the individual data that you provide to us via the contact form, as well as in the emails you send to us.
In accordance with the General Data-Protection Regulation (GDPR) which entered into force on 25 May 2018, and the Law No 2018–493 of 20 June 2018 regarding personal-data protection, known as ‘LIL3’, as well as Order No 2018-1125 of 12 December 2018 taken in application of Article 32 of Law No 2018-493 of 20 June 2018 regarding personal-data protection and modifying Law No 78-17 of 6 January 1978 regarding IT, files and freedoms, you have the following rights:

– access to your personal data and information concerning you;
– correction, deletion and portability of your personal data;
– limitation and objection to the processing of your personal data;
– withdrawal of your consent.

You also have the right (when applicable) to formulate general or specific instruction regarding the storage, deletion or communication of your personal data after your death, or the right to be forgotten.

How do I exercise my rights provided by the GDPR and the French Data-Protection Law?

You requests can be formulated in various ways:

– By email, by writing to direction@amboise-valdeloire.com
– In person by visiting the reception of the Val d’Amboise Tourist Office, located at Quai du Général de Gaulle – 37400 Amboise
– By post by writing to the Val d’Amboise Tourist Office, located on Quai du Général de Gaulle – 37400 Amboise
– If you feel that your data rights have not been respected, after having contacted us, you can address a complaint to the CNIL.

Please formulate each of your requests via one of the methods indicated above, attaching a copy of an identity document.

For a right to correction request:
If you believe that information concerning you is erroneous and should be corrected, please precisely indicate the incorrect or incomplete data concerning you and provide all information allowing us to correct or complete said data (Article 15 of the GDPR).

For a right to deletion request:
Please precisely indicate the data concerning you which you wish to be deleted and the reasons for your request (Article 17 of the GDPR).
Note: this right is not absolute. The Val d’Amboise Tourist Office may be obligated to retain your information, in particular as part of managing the commercial relationship (invoice management, dispute management) and for documentation and the provision of proof regarding the exercise of your rights.

For a processing-limitation request:
Please precisely indicate the data concerning you for which you wish to limit processing, and the reasons for your request.
Note: this right is not absolute. The Val d’Amboise Tourist Office may decide to continue processing your data (article 18.3 of the GDPR). Limitation, if implemented, may be translated via the suspension of services carried out by the Val d’Amboise Tourist Office (access to works and deliverables, receipt of information, etc.). These consequences will be described to your in the letter acknowledging receipt of your request for limitation of processing.

For a right to objection request:
Please precisely indicate the processing of data concerning you to which you wish to object, and the reasons for your request.
Note: this right is not absolute. Please precisely indicate the processing for which you object to the management of your personal data, and the reasons for your request (article 21 of the GDPR).

For a right to portability request:
Each user may, at any time, request data portability in order to recover the personal data that the Val d’Amboise Tourist Office has collected about them as part of processing based on consent or based on a contract.
If you would like for said data to be transmitted to another data controller in a standard format, please specify said controller and indicate their contact details.