Web privacy policy

1- PURPOSE OF THE POLICY

The Val d'Isère commune attaches great importance to respect for privacy. This is one of the reasons why we have adopted our own policy on the confidentiality and protection of personal data.

We are committed to protecting your privacy and ensuring that your personal data is protected.

This personal data management policy details the types of personal data we collect and how we process and protect it in connection with the services we offer.

Data is collected when you use the digital platforms (websites, kiosks) provided by the commune of Val d'Isère to carry out your formalities.

No processing is carried out within the local authority concerning user data if it does not involve personal data collected by or for our services or processed in relation to our services and if it does not comply with the general principles of the RGPD.

It also reminds you of your rights and how to exercise them with our services.

We maintain adequate technical and organizational measures to protect the personal data you provide against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access to your personal data.

This Privacy Policy is published by La commune de Val d'Isère, represented by its Mayor, as the data controller.

2-YOUR RIGHTS AND HOW TO EXERCISE THEM

Law no. 78-17 of January 6, 1978 on data processing, data files and individual liberties, as well as the European General Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 grant you specific rights such as the right to obtain consent, the right to access, to object to personal data concerning you as well as to rectify or delete incomplete or inaccurate information concerning you.

You may also decide to issue instructions concerning the retention, deletion and communication of your personal data after your death.

If you believe that the way in which we have processed your personal data breaches data protection legislation, you may submit a complaint to the competent supervisory authorities (CNIL: https://www.cnil.fr/fr/plaintes), in particular in the Member State of your habitual residence, your place of work or the place of the alleged breach.

You may exercise any of these rights:

By sending us an e-mail to: rgpd@valdisere.fr

-By contacting us via the various online contact forms on our sites

-Contact us by post: Mairie de Val d'Isère - Montée du Thovex - 73150 Val d'Isère

-By following the instructions on the CNIL website at this address: https://www.cnil.fr/agir

3-PERSONAL DATA

Personal data refers to information that is likely to identify you directly or indirectly. It generally includes information such as your name, postal address, e-mail address and telephone number, as well as other information such as your IP address, connection and browsing data.

When you provide us with your personal data, we process them in accordance with this policy.

If you do not agree with the terms of this policy, you are free not to provide any personal data. You are nevertheless warned that the communication of some of this data is a condition of access to the services and that in the absence of this communication certain functionalities and services may be degraded.

Please see the following section for details of the different types of personal data we may collect, the purposes involved and the legal basis for such processing.

3.1-Processed data, basis and purpose of processing

Depending on your choices and the settings of your terminal (in particular with regard to cookies), the personal data collected about you consists mainly of: your title, surname, first name, e-mail address, postal address, country, telephone number, connection logs (IP address), connection data and browsing data, as well as the information you provide when you contact us (mainly for archiving purposes).

Your personal data is collected in order to :

Respond to your questions, complaints and registrations by e-mail or via our contact or registration forms;

-Send you information (newsletters) when you have requested it;

-Creating statistics ;

-Prevent fraud.

The data required to fulfill the purposes described above are indicated by an asterisk on the various pages of our sites and applications. If you do not fill in these mandatory fields, we will not be able to respond to your requests and/or provide you with the requested services. Other information is optional and enables us to improve our services to you.

The processing of your personal data is justified by different lawfulness (legal basis) depending on the use we make of the personal data. You will find below the legal bases and retention periods we apply to our main processing operations.

Among the applicable legal bases, in accordance with article 6.1. of the RGPD (European regulation on the protection of personal data) and article 7 of La loi informatique et libertés, we use in particular:

-Public interest or authority: the processing of personal data is necessary for the performance of a task in the public interest or in the exercise of public authority vested in the local authority.

-Legal obligation: the processing of your personal data is required by law.

-Contract: the processing of personal data is necessary for the performance of the contract to which you have consented. This may be the case, for example, when you are bidding on public contracts or subscribing to a local authority service.

-Legitimate interest: processing is necessary to satisfy the legitimate interest of the community

-Consent: you agree to the processing of your personal data through express consent (checkbox, click, newsletter subscription). You can withdraw this consent at any time

3.2-Recipients

The personal data collected is intended for the internal departments of the town hall authorized to access it.

In the event that the Town Hall entrusts data processing activities to subcontractors, it will only use subcontractors who provide sufficient guarantees that appropriate technical and organizational measures have been implemented so that the processing meets the reliability and security requirements demanded by the applicable regulations and guarantees the protection of individuals' rights. The local authority undertakes to use only subcontractors based in the European Economic Area or in countries recognized by the European Commission as having an adequate level of data protection legislation.

In accordance with current regulations, your personal data may be passed on to authorized third parties (public bodies, judicial authorities, legal auxiliaries and ministerial officers) by virtue of a legislative or regulatory provision, in the context of a specific assignment or the exercise of a right of communication.

When the town hall receives a request for information from a third party based on a text, it makes sure that the provision in question is in force, and that it actually provides for a right of communication for the benefit of the requester. The mayor's office will ensure that only the data specified in the text is transmitted, or, if the text is imprecise, only the data that appears strictly necessary to achieve the desired aim. Data will be communicated in such a way as to ensure its security, adapting the measures adopted to the nature of the data and the risks involved.

3.3-Data retention periods

The commune of Val d'Isère keeps data confidential for as long as is necessary to process the enquiry or request and in compliance with the legal time limits in force.

Your data is then archived with restricted access for a further period for limited reasons authorized by law (legal obligation, litigation, disputes, etc.).

These durations vary according to requests, procedures and referrals, and depend in particular on legal imperatives.

You will find some examples of shelf lives in the table below:

4-ADVERTISING AND UPDATING THE POLICY

This policy takes effect on May 25, 2018. This procedure may be updated at any time.