Web Privacy Policy

1- PURPOSE OF THE POLICY

The commune of Val d'Isère attaches great importance to the respect of privacy. This is one of the reasons why we have adopted our own policy on confidentiality and protection of personal data.

We are committed to protecting your privacy rights and ensuring that your personal data is protected.

This privacy policy details the types of personal data we collect, how we process it and how we protect it in relation to the services we offer.

The data is collected when you carry out your procedures through the digital platforms (websites, terminals) made available by the municipality of Val d'Isère

No processing is carried out within the community concerning user data if it does not concern personal data collected by or for our services or processed in relation to our services and if it does not comply with the general principles of the GDPR.

It also reminds you of your rights and how to exercise them with our services.

We maintain adequate technical and organizational measures to protect the personal data you provide to us against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access to your personal data.

This Privacy Policy is published by the commune of Val d'Isère represented by its Mayor as the data controller.

2-YOUR RIGHTS AND HOW TO EXERCISE THEM?

The law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, as well as the general European regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 grant you specific rights such as the right to the collection of consent , the right of access, opposition to personal data concerning you as well as rectification or deletion of incomplete or inaccurate information concerning you.

You may also choose to provide instructions regarding the retention, deletion and disclosure of your personal data after your death.

If you believe that the way in which we have processed your personal data violates data protection legislation, you may submit a complaint to the competent supervisory authorities (CNIL: https://www.cnil.fr/fr/plaintes), in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation.

You can exercise each of these rights:

-By sending us an email at: rgpd@valdisere.fr

-By contacting us via the various online contact forms on our sites

-By contacting us by mail : Mairie de Val d'Isère - Montée du Thovex - 73150 Val d'Isère

-By following the instructions on the CNIL website at this address: https://www.cnil.fr/agir

3-PERSONAL DATA

Personal data refers to information that can directly or indirectly identify you. It generally includes information such as your name, postal address, e-mail address and telephone number, but also other information such as your IP address, login and browsing data.

When you provide us with your personal data, we process it in accordance with this policy.

If you do not agree with the terms of this policy, you are free not to provide any personal data. However, you are advised that the communication of some of these data is a condition for access to the services and that in the absence of this communication certain functionalities and services may be degraded.

Please see the following section for details of the different types of personal data we may collect, the purposes involved and the legal basis for such processing.

3.1-Processed data, basis and purpose of processing

The personal data collected about you are mainly, depending on your choices and the settings of your terminal (especially with regard to cookies): your title, surname, first name, email address, postal address, country, telephone number, your connection logs (IP address), connection data and browsing data, as well as the information you give us when you contact us (mainly for archiving purposes)

Thus, your personal data are collected in order to :

-Answer your questions, complaints, registrations, sent by mail or via our contact or registration forms;

-To send you information (newsletters) when you have requested them;

-Making statistics;

-Prevent fraud.

The data required to fulfill the purposes described above are indicated by an asterisk on the various pages of our sites and applications. If you do not fill in these mandatory fields, we will not be able to respond to your requests and/or provide you with the requested services. The other information is optional and allows us to improve our services to you.

The processing of your personal data is justified by different lawfulness (legal basis) depending on the use we make of the personal data. You will find below the legal bases and retention periods that we apply to our main processing operations.

Among the applicable legal bases, in accordance with article 6.1. of the RGPD (European regulation on the protection of personal data) and article 7 of the Data Protection Act, we use in particular:

-Public interest or authority: the processing of personal data is necessary for the performance of a task of public interest or in the exercise of public authority vested in the community

-Legal obligation: the processing of your personal data is made compulsory by a legal text

-The contract: the processing of personal data is necessary for the performance of the contract to which you have consented, this may be the case when you bid on public contracts or subscribe to a service of the community

-Legitimate interest: the processing is necessary to satisfy the legitimate interest of the community

-Consent: you agree to the processing of your personal data through express consent (checkbox, click, newsletter subscription). You can withdraw this consent at any time

3.2-Recipients

The personal data collected are intended for the internal services of the city council authorized to take cognizance of them.

In the event that the City Council entrusts data processing activities to subcontractors, it will only use subcontractors that present sufficient guarantees regarding the implementation of appropriate technical and organizational measures so that the processing meets the reliability and security requirements of the applicable regulations and guarantees the protection of the rights of individuals. The entity undertakes to use only processors based in the European Economic Area or in countries recognized by the European Commission as having an adequate level of data protection legislation.

In accordance with the regulations in force, your personal data may be transmitted to authorized third parties (public bodies, judicial authorities, court officers and ministerial officers) by a legislative or regulatory provision, within the framework of a particular mission or the exercise of a right of communication.

When the town hall is confronted with a request for communication from a third party based on a text, it ensures that the provision in question is in force and that it actually provides for a right of communication for the applicant. The city council will ensure that only the data provided for in the text is transmitted or, if the text is unclear, only the data that appears to be strictly necessary to achieve the desired goal. The communication of data will be carried out according to methods that ensure their security, by adapting the measure adopted to the nature of the data and the risks involved.

3.3-Duration of data retention

The commune of Val d'Isère keeps the data confidential for as long as it takes to process the request and in compliance with the legal deadlines in force.

Your data is then archived with restricted access for an additional period of time for limited reasons and authorized by law (legal obligation, litigation, disputes ...).

These durations vary according to the requests, procedures and referrals and depend in particular on legal requirements.

You will find some examples of retention times in the table below:

4-ADVERTISING AND POLICY UPDATE

This policy is effective as of May 25, 2018. This procedure may be updated at any time.